Installation Guide - dogtagpki/pki Wiki

🚨 github-wiki-see.page does not render asciidoc. Source for crawling below. Please visit the Original URL! 🚨


= Overview =

This page describes various PKI installation procedures. Some pages are still being migrated from the old wiki:

* link:https://www.dogtagpki.org/wiki/PKI_10_Installation[PKI 10 Installation Guide]

For older versions see:

* link:PKI-10.6-Installation-Guide[PKI 10.6 Installation Guide]
* link:PKI-10.5-Installation-Guide[PKI 10.5 Installation Guide]
* link:PKI-10.4-Installation-Guide[PKI 10.4 Installation Guide]
* link:https://www.dogtagpki.org/wiki/PKI_9_Installation[PKI 9 Installation Guide]
* link:https://www.dogtagpki.org/wiki/PKI_1_Installation[PKI 1 Installation Guide]

= Installation Tools =

Most of the PKI subsystems can be installed with `pkispawn` except the ACME subsystem which uses `pki-server` command.

To install a PKI subsystem execute the following command:

----
$ pkispawn -f <deployment configuration> -s <subsystem>
----

By default it will install the subsystem in a PKI server instance called `pki-tomcat` in `/var/lib/pki/pki-tomcat` folder.
Multiple subsystems can be installed in the same instance.

Sample deployment configuration files can be found in 
link:https://github.com/dogtagpki/pki/tree/master/base/server/examples/installation[/usr/share/pki/server/examples/installation] folder.

To remove a subsystem execute the following command:

----
$ pkidestroy -i <instance> -s <subsystem>
----

For more information see also:

* link:https://github.com/dogtagpki/pki/blob/master/docs/manuals/man8/pkispawn.8.md[pkispawn manual]
* link:https://github.com/dogtagpki/pki/blob/master/docs/manuals/man8/pkidestroy.8.md[pkidestroy manual]

= Installing PKI Subsystems =

* link:CA-Installation-Guide[CA Installation Guide]
* link:KRA-Installation-Guide[KRA Installation Guide]
* link:OCSP-Installation-Guide[OCSP Installation Guide]
* link:TKS-Installation-Guide[TKS Installation Guide]
* link:TPS-Installation-Guide[TPS Installation Guide]
* link:ACME-Installation-Guide[ACME Installation Guide]

= Other =

* link:https://github.com/dogtagpki/pki/blob/master/docs/installation/server/Installing_Basic_PKI_Server.md[Installing Basic PKI Server]
* link:https://github.com/dogtagpki/pki/blob/master/docs/installation/server/Installing_PKI_Server_with_Custom_NSS_Databases.md[Installing PKI Server with Custom NSS Databases]
* link:Upgrading-PKI-Database[Upgrading PKI Database]
* link:Upgrading-PKI-Server[Upgrading PKI Server]
* link:Migrating-PKI-Server[Migrating PKI Server]
* link:Removing-PKI-Server-Manually[Removing PKI Server Manually]
* link:https://www.dogtagpki.org/wiki/Installation_with_Secure_Database_Connection[Installation with Secure Database Connection]
* link:https://www.dogtagpki.org/wiki/Installing_Additional_Instance_on_the_Same_Machine[Installing Additional Instance on the Same Machine]
* link:https://www.dogtagpki.org/wiki/Installing_Theme[Installing Theme]
* link:https://docs.fedoraproject.org/en-US/quick-docs/using-shared-system-certificates/[Using Shared System Certificates]
* link:Two-Step-Installation[Two-Step Installation]
** link:Configuring-Session-Timeout[Configuring Session Timeout]
** link:Configuring-Subsystem-Debug-Level[Configuring Subsystem Debug Level]
** link:Adding-System-Certificate-Request-Extensions[Adding System Certificate Request Extensions]
** link:Configuring-System-Certificate-Profiles[Configuring System Certificate Profiles]
** link:Configuring-Certificate-Serial-Number-Range[Configuring Certificate Serial Number Range]
** link:Configuring-TLS-Cipher-List[Configuring TLS Cipher List]
** link:Configuring-Access-Log[Configuring Access Log]
* link:https://www.dogtagpki.org/wiki/Fine-Grained_Installation[Fine-Grained Installation]
* link:https://www.dogtagpki.org/wiki/Cloning_Issues[Cloning Issues]

= See Also =

* https://github.com/dogtagpki/pki/tree/master/docs/installation
* link:https://www.dogtagpki.org/wiki/PKI_Known_Issues[Known Issues]
* link:https://www.dogtagpki.org/wiki/PKI_How_To[How Tos]