PKI 10.5 Installing TKS - dogtagpki/pki GitHub Wiki
This document describes the process to install TKS subsystem. It assumes that CA subsystem is already installed and the CA admin certificate is already exported into /root/.dogtag/pki-tomcat/ca_admin.cert.
Prepare a deployment configuration file:
[TKS] pki_admin_cert_file=/root/.dogtag/pki-tomcat/ca_admin.cert [email protected] pki_admin_name=tksadmin pki_admin_nickname=tksadmin pki_admin_password=Secret.123 pki_admin_uid=tksadmin pki_client_database_password=Secret.123 pki_client_database_purge=False pki_client_pkcs12_password=Secret.123 pki_ds_base_dn=dc=tks,dc=example,dc=com pki_ds_database=tks pki_ds_password=Secret.123 pki_security_domain_name=EXAMPLE pki_security_domain_user=caadmin pki_security_domain_password=Secret.123
Then execute:
$ pkispawn -f tks.cfg -s TKS
$ pki -d ~/.dogtag/pki-tomcat/ca/alias/ -c Secret.123 -n caadmin tks-user-find ----------------- 1 entries matched ----------------- User ID: tksadmin Full name: tksadmin ---------------------------- Number of entries returned 1 ----------------------------