1.7. Installing the Key Recovery Authority in IdM

Prerequisites

• You are logged in as root on the IdM server.
• An IdM certificate authority is installed on the IdM server.
• You have the Directory Manager credentials.

Procedure

• Install the KRA:

  # ipa-kra-install

  注意

  To make the vault service highly available and resilient, install the KRA on two IdM servers or more. Maintaining multiple KRA servers prevents data loss.

  重要

  You can install the first KRA of an IdM cluster on a hidden replica. However, installing additional KRAs requires temporarily activating the hidden replica before you install the KRA clone on a non-hidden replica. Then you can hide the originally hidden replica again.