Re: [Pki-users] Certificate System Want to change hostname/IP address after installation

Your idea should be quite simple to achieve. The domain for the CA service does not have to be related to the certificates you issue. I do this currently on test machine (inside vmware) with the key ports forward from the host to the dogtag system. People connect remotely to the public and changing IP address specified by a DynDNS fully qualified host name. So for your install machine use a dynamic DNS host name. DynDNS offer a great service both the free and paid service. You could also use your own organisation's DNS, however DynDNS is quick and easy. At each new site you simply login to DynDNS, change the related IP addresses and away you go. For your own convenience, you also want the /etc/hosts file to resolve the host name to 127.0.0.1, so it always works even when not on a network... I do wonder about the security of your laptop, access control, whether you might like to use some sort of hardware token (smart card/HSM) to at least protect the CA key when on the road. It would be a shame to go to all the trouble and have the laptop stolen and/or compromised. On Wed, Jan 14, 2009 at 1:20 AM, <lambam80(a)hotmail.com&gt; wrote: