PKI Server KRA CLI - dogtagpki/pki GitHub Wiki
To export the KRA system certificates for cloning, execute the following command:
$ pki-server kra-clone-prepare --pkcs12-file kra-certs.p12 --pkcs12-password-file password.txt
See also Installing KRA Clone.