dogtagpki

#2971 Unable to install PKI 10.6 with HSM
Closed: duplicate Opened by edewata.

Closed: duplicate
Reopen Issue

Previously, in HSM installation all certificates & key would be generated in the HSM. Since PKI 10.6 now uses Tomcat 8.5, the SSL server cert & keys must be generated in internal token such that it can be exported into a PKCS #12 file which will be used by the NIO connector.

The problem is, currently if the pki_hsm_enable is set to True, all certificates will be generated in the HSM regardless of pki_<cert ID>_token parameters. The installation code needs to be fixed to support creating system certificates and keys in different tokens.

Duplicate of ticket #2449.

Metadata Update from @edewata:
- Custom field component adjusted to None
- Custom field feature adjusted to None
- Custom field origin adjusted to None
- Custom field proposedmilestone adjusted to None
- Custom field proposedpriority adjusted to None
- Custom field reviewer adjusted to None
- Custom field type adjusted to None
- Custom field version adjusted to None
- Issue close_status updated to: duplicate
- Issue status updated to: Closed (was: Open)

Metadata Update from @edewata:
- Issue set to the milestone: 10.6.0 (was: 10.6)

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/3089

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.
Metadata
None
None
None
None
Low
None
None
None
None
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.