<div dir="ltr">Hi,<br><div><br>The <code class="">password.conf</code> file stores system 
passwords in plaintext, and I prefer to enter system 
passwords manually and to remove the password file.
                        <br><br></div><div>I have found original documentation <a href="https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/System_Passwords.html">https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/System_Passwords.html</a>. But it is for older version on PKI and does not work with systemd.<br></div><div><br>How to setup PKI CA to ask for NSS DB password at startup?<br><br>Packages versions (I have rebuilt F22 packages for CentOS 7):<br># rpm -qa | grep pki<br>pki-base-10.2.5-1.el7.centos.noarch<br>pki-server-10.2.5-1.el7.centos.noarch<br>dogtag-pki-server-theme-10.2.5-1.el7.centos.noarch<br>pki-ca-10.2.5-1.el7.centos.noarch<br>pki-tools-10.2.5-1.el7.centos.x86_64<br>dogtag-pki-console-theme-10.2.5-1.el7.centos.noarch<br><br></div>Aleksey<br></div>