<html><head></head><body><div>hi users,</div><div><br></div><div>as one follows official docs and issues a certificate for a service/host, one wonders what is the correct way to move such a certificate to a host(which is domain member) ?</div><div>I understand certificates issued with:</div><div><br></div><div>$ ipa cert-request -add --principal</div><div><br></div><div>are stored in ldap backend, (yet I don't quite get the difference between that tool and ipa-certget).</div><div>How do I get such a certificate off the server and to a host-not-server?</div><div>In my case I'm hoping to use this certificate in apache+nss.</div><div>I realize I also will need CA certificate on that host, which I got hold of with certutil operated on /etc/dirsrv/slapd-MY-DOMAIN - if it's the right way?</div><div><br></div><div>many thanks.</div><div>L</div></body></html>