8.2. Installing an IdM server or replica with custom certificate authority settings from an INI file

Procedure

1. Create a text file in INI format with your custom CA settings. Write each parameter on a new line. This example sets the CA signing key size to 4096 bits.

   [CA]
   pki_ca_signing_key_size=4096

2. Use the --pki-config-override parameter to pass the INI file to the installation script.

   1. To install an IdM server:

      # ipa-server-install --pki-config-override <pkiconfig.ini>

   2. To install an IdM replica:

      # ipa-replica-install --pki-config-override <pkiconfig.ini>