[Freeipa-users] Add CA server AFTER install?

[Rob Crittenden]

Zak Wolfinger wrote:
> Not having much luck with the docs / Google.  Is there a way to add the
> CA server role to a FreeIPA installation if it wasn’t included at the
> time of install?

Too quick on the draw...

It isn't clear what you mean. ipa-ca-install can add a CA to a master 
installed using ipa-replica-install.

If you installed as CA-less then I'd look at 
http://www.freeipa.org/page/V4/CA-less_to_CA-full_conversion It is 
rather thin on details unfortunately but it looks like you can just run 
ipa-ca-install in this case as well.

rob