Chapter 111. Demoting or promoting hidden replicas

Prerequisites

• Ensure that the replica is not the DNSSEC key master. If it is, move the service to another replica before making this replica hidden.
• Ensure that the replica is not a CA renewal server. If it is, move the service to another replica before making this replica hidden. For details, see Changing and resetting IdM CA renewal server.

Procedure

• To hide a replica:

  # ipa server-state replica.idm.example.com --state=hidden

  Copy to Clipboard

• To make a replica visible again:

  # ipa server-state replica.idm.example.com --state=enabled

  Copy to Clipboard

• To view a list of all the hidden replicas in your topology:

  # ipa config-show

  Copy to Clipboard

  If all of your replicas are enabled, the command output does not mention hidden replicas.