Ben,

Looks like this has already been answered here: https://www.redhat.com/archives/pki-users/2014-June/msg00004.html.

pkispawn only works for CA, KRA, TKS, TPS, and OCSP. Here's the meat of that email thread:

~~~

> In order to install a native Apache-based RA (or a legacy TPS) instance, you
> must still use the 'pkicreate' installer, and configure the instance using a
> browser with the GUI interface or construct the proper arguments to the
> 'pkisilent' configuration tool.

~~~

There is  a trac ticket for references to RA to be removed from pkispawn. Hope this helps!

-- Dave

---

From: "Ben Peck" <tangoxix@gmail.com>
To: pki-users@redhat.com
Sent: Monday, July 13, 2015 4:53:56 PM
Subject: [Pki-users] How to install RA on DogTag 10?

I'm running Fedora 21 with Dogtag 10.2.1-3 and trying to get the Registration Authority subsystem to install to enable SCEP ultimately.

I installed pki-ra, but when I run "pkispawn -s RA" I get the following:

Traceback (most recent call last):
  File "/usr/sbin/pkispawn", line 579, in <module>
    main(sys.argv)
  File "/usr/sbin/pkispawn", line 143, in main
    parser.init_config()
  File "/usr/lib/python2.7/site-packages/pki/server/deployment/pkiparser.py",
line 192, in init_config
    'pki_instance_name': default_instance_name,
UnboundLocalError: local variable 'default_instance_name' referenced
before assignment

Can anyone point me in the right direction concerning SCEP and DogTag 10? Is there some updated documentation on this somewhere I'm missing?

Thanks,

Ben

_______________________________________________
Pki-users mailing list
Pki-users@redhat.com
https://www.redhat.com/mailman/listinfo/pki-users