<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>I've tried googling but keep coming up with beer recipes.</p>
<p>How do you suggest adding the replica CA? I'm piecing together
the options I want on my ipa-server-install command and am trying
to understand the CA-related options.<br>
</p>
<p>Thanks!<br>
</p>
<br>
Bret<br>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 03/28/2017 08:45 AM, Bret Wortman
wrote:<br>
</div>
<blockquote
cite="mid:eb36c5c9-1b55-204c-4f52-8525794f866f@damascusgrp.com"
type="cite">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
I'm studying the best way to migrate out IPA servers (there are
two) from F21 to C7. I _think_ the sequence of steps I need to
perform is:<br>
<blockquote>1. Build new C7 IPA server (ipa-c) and enable
replication to it.<br>
2. Migrate CA functions from our existing CA server (ipa-a) to
this new one (ipa-c).<br>
3. Upgrade ipa-b to C7 and enable replication to it.<br>
4. Either upgrade ipa-a and have a third ipa server or discard
the vm in favor of the two now in service.<br>
</blockquote>
Am I missing anything? Making this harder than it needs to be? <br>
<br>
Our F21 servers are using IPA 4.1.4-1 (and pki-ca 10.2.1-3) so I'm
not if replication across versions is supported between these and
IPA 4.4.0 (pki-ca 10.3.3).<br>
<br>
<br>
<div class="moz-signature">-- <br>
<div><b>Bret Wortman</b></div>
<div>Damascus Products</div>
<div>ph/fax: 1-855-644-2783</div>
<div><a moz-do-not-send="true" href="wrapbuddies.co/store">Wrap
Buddies InDemand</a> at <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://bwortman.us/2ieQN4t">http://bwortman.us/2ieQN4t</a><br>
</div>
</div>
</blockquote>
<br>
</body>
</html>