For those of you who haven't read the "Add DRM to IPA" thread: you have to use Dogtag 10.2 which is only available in COPR repo. Otherwise httpd won't start because of missing pki.crypto. Could be done simply by: # dnf copr enable vakwetu/dogtag Might save you some time... -- Petr Vobornik