Looks like this has already been answered here:

pkispawn only works for CA, KRA, TKS, TPS, and OCSP. Here's the meat of that email thread:

> In order to install a native Apache-based RA (or a legacy TPS) instance, you
> must still use the 'pkicreate' installer, and configure the instance using a
> browser with the GUI interface or construct the proper arguments to the
> 'pkisilent' configuration tool.

There is  a trac ticket for references to RA to be removed from pkispawn. Hope this helps!

-- Dave

From: "Ben Peck" <>
Sent: Monday, July 13, 2015 4:53:56 PM
Subject: [Pki-users] How to install RA on DogTag 10?

I'm running Fedora 21 with Dogtag 10.2.1-3 and trying to get the Registration Authority subsystem to install to enable SCEP ultimately.

I installed pki-ra, but when I run "pkispawn -s RA" I get the following:

Traceback (most recent call last):
  File "/usr/sbin/pkispawn", line 579, in <module>
  File "/usr/sbin/pkispawn", line 143, in main
  File "/usr/lib/python2.7/site-packages/pki/server/deployment/",
line 192, in init_config
    'pki_instance_name': default_instance_name,
UnboundLocalError: local variable 'default_instance_name' referenced
before assignment

Can anyone point me in the right direction concerning SCEP and DogTag 10? Is there some updated documentation on this somewhere I'm missing?


Pki-users mailing list