[DEFAULT]
pki_instance_name = <name>

pki_http_port = 9080
pki_https_port = 9443
pki_ajp_port = 9009
pki_tomcat_server_port = 9005

[CA]
pki_admin_uid = <name>
pki_admin_password = <passwd>
pki_backup_password = <passwd>
pki_client_database_password = <passwd>
pki_client_pkcs12_password = <passwd>
pki_import_admin_cert = False
pki_client_admin_cert = /<path-to-admin-cert>/ca_admin.cert
pki_admin_name=%(pki_admin_uid)s
pki_admin_nickname=PKI Administrator
pki_admin_subject_dn=cn=PKI Administrator,o=%(pki_security_domain_name)s

pki_ds_hostname = <localhost.localdomian>
pki_ds_ldap_port = <port>
pki_ds_bind_dn = cn=<name>
pki_ds_password = <passwd>
pki_ds_base_dn = o=<name>
pki_security_domain_name = <domain name>
pki_security_domain_password = <passwd>

pki_client_pin = <passwd>
pki_clone_pkcs12_password = <passwd>
pki_one_time_pin = <passwd>
pki_pin = <passwd>
pki_token_password = <passwd>
pki_ca_signing_key_algorithm=SHA256withRSA
pki_ca_signing_key_size=2048
pki_ca_signing_key_type=rsa
pki_ca_signing_signing_algorithm=SHA256withRSA
pki_ca_signing_subject_dn=cn=<name>,o=<name>,ou=<name>,L=<name>
pki_ca_signing_token=Internal Key Storage Token
pki_external=True
pki_external_csr_path=/home/fedora/ca_signing.csr