On Thu, 02 Apr 2015, Andrew Holway wrote: >Is it possible to generate certs without the host having an entry in the >DNS? Yes. Create a host with 'ipa host-add --force' and then use normal ways to generate certificates for this host. -- / Alexander Bokovoy