25.2. Prerequisites for Using Vaults
To enable vaults, install the Key Recovery Authority (KRA) Certificate System component on one or more of the servers in your IdM domain:
ipa-kra-install
# ipa-kra-install
Note
To make the Vault service highly available, install the KRA on two IdM servers or more.