Hi,
The PKI version that you have is rather old. The latest stable version is
PKI 10.9 and
we are working on PKI 10.10. Is it possible for you to upgrade to the
latest version?
If PKI is used as part of IPA, the profiles and certs will be replicated
automatically.
However, if it's used outside of IPA, the profiles and the certs will need
to be copied
manually to the new replica.
Here's the upstream doc that we have on CA cloning for PKI 10.5:
https://www.dogtagpki.org/wiki/PKI_10.5_Installing_CA_Clone
However, the PKI 10.5 code and doc is no longer maintained upstream. If you
need
to use this particular version on RHEL I'd suggest to check RHEL
documentation or
contact RH support.
Thanks.
-- 
Endi S. Dewata
On Thu, Oct 8, 2020 at 10:41 PM Jose Antonio Mendoza Roa <roa(a)unixmexico.org>
wrote:
 Hi folks
 I have some doubts
 How is the better step for configure replication of dogtag-pki
 Im read this manual  and it's very confusing for me .
 Now i have running  dogtag-pki-10.5.1-2.el7pki.noarch  in one server1
 (RHEL 7.x)
 But i need to replicate   in the other server2 in case of failure this
 server1
 Im read this manual  
https://www.dogtagpki.org/wiki/DS_Replication_Setup
 -Firs Question  in server1 i have modified  3 profiles in dogtag PKI (how
 to replicate this configuration in the server2)
 -Second Question  in server1 i have some certs ssl how to replicate this
 certs to server 2
 --
 Ce courrier électronique et les fichiers qui y sont annexés peuvent
 renfermer des
 renseignements privilégiés et confidentiels à l'intention exclusive du
 destinataire. Si
 vous n'êtes pas le destinataire, vous n'êtes pas autorisé(e) à utiliser, à
 copier ou à
 divulguer à un tiers le contenu de ce courrier électronique ni des
 fichiers joints. Si
 vous avez reçu ce courrier électronique par erreur, veuillez en aviser
 l'expéditeur
 immédiatement par courrier électronique et détruire ce message ainsi que
 les fichiers
 en annexe.
 This electronic mail message -- and any attachments -- may contain
 privileged/confidential information, intended only for the use of the
 addressee. If you
 are not the addressee, you may not use, copy or disclose to a third party
 the content
 of this message or its attachments. If you have received this message by
 mistake,
 please notify us immediately by e-mail and destroy this message, along
 with all
 attachments
 _______________________________________________
 Pki-users mailing list
 Pki-users(a)redhat.com
 
https://www.redhat.com/mailman/listinfo/pki-users