Hello When external CA is used ipa-server-install generates ipa.csr certificate request file, requesting SHA-2 certificate. Is there any working way to make it work with SHA-1, is that fine from point of view of functionality (forget about security). Best regards, George Machitidze