[DEFAULT]
#pki_skip_configuration=True

[CA]
pki_security_domain_name = IPA
pki_enable_proxy = True
pki_restart_configured_instance = False
pki_backup_keys = True
pki_backup_password = Secret123
pki_client_database_dir = /tmp/tmp-VkH7xp
pki_client_database_password = Secret123
pki_client_database_purge = False
pki_client_pkcs12_password = Secret123
pki_admin_name = admin
pki_admin_uid = admin
pki_admin_email = root@localhost
pki_admin_password = Secret123
pki_admin_nickname = ipa-ca-agent
pki_admin_subject_dn = cn=ipa-ca-agent,O=REDHAT.COM
pki_client_admin_cert_p12 = /root/ca-agent.p12
pki_ds_ldap_port = 389
pki_ds_password = Secret123
pki_ds_base_dn = o=ipaca
pki_ds_database = ipaca
pki_subsystem_subject_dn = cn=CA Subsystem,O=REDHAT.COM
pki_ocsp_signing_subject_dn = cn=OCSP Subsystem,O=REDHAT.COM
pki_ssl_server_subject_dn = cn=vm-117.idm.lab.bos.redhat.com,O=REDHAT.COM
pki_audit_signing_subject_dn = cn=CA Audit,O=REDHAT.COM
pki_ca_signing_subject_dn = cn=Certificate Authority,O=REDHAT.COM
pki_subsystem_nickname = subsystemCert cert-pki-ca
pki_ocsp_signing_nickname = ocspSigningCert cert-pki-ca
pki_ssl_server_nickname = Server-Cert cert-pki-ca
pki_audit_signing_nickname = auditSigningCert cert-pki-ca
pki_ca_signing_nickname = caSigningCert cert-pki-ca