Overview

This page describes the process to set up a KRA admin user with PKI tools.

Adding KRA Admin User

$ pki-server kra-user-add \
    --full-name Administrator \
    --type adminType \
    kraadmin

In PKI 11.6 or later the user certificate can be specified with the --cert <path> option.

$ pki-server kra-user-cert-add \
    --cert admin.crt \
    kraadmin

$ pki-server kra-user-role-add kraadmin "Administrators"
$ pki-server kra-user-role-add kraadmin "Data Recovery Manager Agents"