Kashyap, I can confirm that your method works on F11 as well. I would add an extra step after the pki-ca install, namely disabling the updates-testing repo to avoid updates to other packages. Many thanks for the help. Cheers, Andrew