Chapter 110. Demoting or promoting hidden replicas

After a replica has been installed, you can configure whether the replica is hidden or visible.

For details about hidden replicas, see The hidden replica mode.

Prerequisites

Ensure that the replica is not the DNSSEC key master. If it is, move the service to another replica before making this replica hidden.
Ensure that the replica is not a CA renewal server. If it is, move the service to another replica before making this replica hidden. For details, see Changing and resetting IdM CA renewal server.

Procedure

To hide a replica:

# ipa server-state replica.idm.example.com --state=hidden

To make a replica visible again:

# ipa server-state replica.idm.example.com --state=enabled

To view a list of all the hidden replicas in your topology:
```
# ipa config-show
```
If all of your replicas are enabled, the command output does not mention hidden replicas.

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

© 2024 Red Hat, Inc.