I experienced the same install issue. Here is what you have to do. When you run your "yum install pki-ca" in the first place, observe the version of pki-related dependencies; i.e. pkiconsole, pki-ca, dogtag* I believe when you do this yum install, yum accidently picks up 1.3.0 version, except the pki-ca. In order to confirm this mixed version, you can do "yum list | grep pki | grep installed" This will list the version and pki-related packages and notice the mixed of 1.2.0 and 1.3.0 versions. To ensure version consistency, you can either all 1.2.0 version or 1.30 version. I personally keep the 1.3.0 version. To keep the 1.3.0 version, do "yum erase pki-ca" and other pki and dogtag packages belonging to 1.2.0 version. After you erase all the 1.2.0 version, do "yum list | grep pki | grep installed" again to ensure no 1.2.0 version package is installed. Also, make sure that all dependencies have also been installed; I.e. the java, tomcat, etc. If those dependencies are not installed yet, I recommend you to install those packages separately. Assuming the remainder of the pakcages are pki related and dogtag related, you can use the following command to install the 1.3.0 version. Use "yum install pki-ca --enablerepo=updates-testing". This command will pick up the 1.30 versions for pki and dogtag related packages. Thanks to Kashyap for showing this, reff: https://www.redhat.com/archives/pki-users/2010-January/msg00016.html When you do this, you might encounter error for which you want to check your /etc/yum.repos.d/fedora-updates-testing.repo In this file make sure to uncomment the "base...." and comment the "mirrorlist....." for each section. After you successfully install the pki-ca packages, you can proceed with pkicreate to create the ca instance. Just type the pkicreate and it spits out the required parameters. I sue default value. Let me know if you need more help. By the way, I have not created pki-ra yet; that's the next thing on my list. By the way, when you configured your ca, make sure your directory server process is running; check using "ps -ef | grep dirsrv" (if you install your directory server locally). Or, use /etc/init status | start | stop | restart. Erwin -------------------------------------------------- From: "Rafal Kaminski" <rafal.kaminski(a)blstream.com&gt; Sent: Monday, March 01, 2010 8:34 AM To: <pki-users(a)redhat.com&gt; Subject: [Pki-users] yum install pki-ca - and problem :(

Rafal, The pki-cad script is part of a new feature that has been added to dogtag. The pki-cad script is used to start all CA instances on a box. To start all instances, service pki-cad start To start a particular instance foo: service pki-cad start foo There will be similar scripts for pki-rad, pki-ocspd etc. Ade On Tue, 2010-03-02 at 12:40 +0100, Rafał Kamiński wrote: