[DEFAULT]
#pki_admin_uid=caadmin
pki_admin_password=redhat123
pki_client_database_password=redhat123
pki_client_pkcs12_password=redhat123
#pki_security_domain_user=caadmin
pki_security_domain_password=redhat123
pki_pkcs12_password=redhat123

# Provide HSM parameters
pki_hsm_enable=True
pki_hsm_libfile=/usr/lib64/pkcs11/libsofthsm2.so
pki_hsm_modulename=softhsm
pki_token_name=HSM
pki_token_password=redhat123

# Provide PKI-specific HSM token names
pki_sslserver_token=internal
pki_sslserver_nickname=%(pki_instance_name)s/sslserver/%(pki_hostname)s
pki_subsystem_token=HSM
pki_subsystem_nickname=%(pki_instance_name)s/subsystem
pki_audit_signing_token=HSM
pki_audit_signing_nickname=%(pki_instance_name)s/audit_signing

[CA]
pki_client_pin=redhat123
pki_clone_pkcs12_password=redhat123
pki_external_pkcs12_password=redhat123
pki_one_time_pin=redhat123
pki_pin=redhat123
pki_replication_password=redhat123
pki_server_pkcs12_password=redhat123

# Provide CA-specific HSM token names
pki_ca_signing_token=HSM
pki_ca_signing_nickname=%(pki_instance_name)s/ca_signing
pki_ocsp_signing_token=HSM
pki_ocsp_signing_nickname=%(pki_instance_name)s/ocsp_signing

pki_ds_hostname=fedora28.magnuskkarlsson.local
pki_ds_bind_dn=cn=Directory Manager
pki_ds_password=redhat123
pki_ds_base_dn=o=pki-tomcat-CA