10.6. Cloning TKS Subsystems
- Configure the master subsystem, and back up the keys.
- Create the clone subsystem instance using the
pkispawn
utility.For examples of the configuration file required bypkispawn
when cloning TKS subsystems, see theInstalling a KRA or TKS clone
section of the pkispawn(8) man page. - Restart the clone instance.
# systemctl restart pki-tomcatd@instance_name.service
For the TKS, enroll a smart card and then run an
ldapsearch
to make sure that the same key information is contained in both databases.