default install: part 2

[pki-bot]

This issue was migrated from Pagure Issue #380. Originally filed by vakwetu (@vakwetu) on 2012-10-25 15:31:22:

• Closed as Fixed
• Assigned to edewata (@edewata)

---

User should be able to do a default install without modifying config files:

pkispawn or pkispawn -h (would provide usage)
pkispawn -D (would create a default instance containing all 4 subsystems, using pkideployment.cfg). In this case, the user would be prompted for passwords.
pkispawn -D --generate_passwords would configure as above, would prompt for the DS password (and maybe the admin password), and would generate the remaining passwords.

[pki-bot]

Comment from edewata (@edewata) at 2012-11-03 01:05:48

To clarify, subsystem installation can be done interactively as follows:

% pkispawn
Dogtag 10.0.0 Subsystem Installation
------------------------------------

Subsystem type (CA/KRA/OCSP/TKS): CA
Instance name [pki-tomcat]:
Port [8080]:
Secure port [8443]:
Admin username [caadmin]:
Admin password: *****
Security domain name [EXAMPLE.COM]:
Directory server hostname [localhost]:
Directory server port [389]:
Directory server suffix [o=pki-tomcat-CA]:
Directory server bind DN [cn=Directory Manager]:
Directory server password: *****

Installation complete.

Note: To simplify the process the passwords for client database, token, etc. will be identical to the admin password. It's possible to specify different passwords via config file.

Silent installation can be done with a config file:

% pkispawn -f ca.cfg
Dogtag 10.0.0 Subsystem Installation
------------------------------------

Reading configuration file ca.cfg.
Installation complete.

When installing additional subsystem, pkispawn will require security domain information:

% pkispawn
Dogtag 10.0.0 Subsystem Installation
------------------------------------

Subsystem type (CA/KRA/OCSP/TKS): KRA
Instance name [pki-tomcat]:
Admin username [kraadmin]:
Admin password: *****
Security domain hostname [localhost]:
Security domain port [8443]:
Security domain name [EXAMPLE.COM]:
Security domain user [caadmin]:
Security domain password: *****
Directory server hostname [localhost]:
Directory server port [389]:
Directory server suffix [o=pki-tomcat-KRA]:
Directory server bind DN [cn=Directory Manager]:
Directory server password: *****

Installation complete.

Removing the subsystem can be done interactively:

% pkidestroy
Dogtag 10.0.0 Subsystem Removal
-------------------------------

Subsystem type (CA/KRA/OCSP/TKS): KRA
Instance name [pki-tomcat]:

Removal complete.

Or silently:

% pkidestroy -s KRA
Dogtag 10.0.0 Subsystem Removal
-------------------------------

Removal complete.

[pki-bot]

Comment from edewata (@edewata) at 2013-02-05 01:52:06

master: 981ebcc

[pki-bot]

Comment from vakwetu (@vakwetu) at 2017-02-27 14:10:39

Metadata Update from @vakwetu:

• Issue assigned to edewata
• Issue set to the milestone: 10.0.2