[Pki-users] General Cloning Question

Hello, I am in the process of setting up a dogtag system with cloning. I have the following up and running: CA (on server service-1), KRA, OCSP, RA, TKS, and TPS I have already cloned the CA (on server service-2) and have a question about what security domain to join when cloning the rest of the sub systems? Should the clone of the other sub systems join the primary domain (service-1) or the cloned domain (service-2)? Thanks, Mike