Bug 1328472

Summary:	ca cert renewal
Product:	Red Hat Enterprise Linux 7	Reporter:	Thorsten Scherf <tscherf>
Component:	doc-Linux_Domain_Identity_Management_Guide	Assignee:	Aneta Šteflová Petrová <apetrova>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Namita Soman <nsoman>
Severity:	medium	Docs Contact:
Priority:	high
Version:	7.2	CC:	rhel-docs, rvdwees
Target Milestone:	rc	Keywords:	Documentation, EasyFix
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-07-29 07:23:13 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Thorsten Scherf 2016-04-19 13:21:33 UTC

Description of problem:

I'm referring to our current documentation:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/manual-cert-renewal.html

I'm proposing the following changes:

29.3. Manual CA Certificate Renewal

All instructions are listed under this section:

"""
To manually renew the Dogtag CA certificate signed by an external CA: """

"""
1. Run the ipa-cacert-manage renew command. """

This should be
1. Run the ipa-cacert-manage renew command and --external-ca option: ipa-cacert-manage renew --external-ca


"""
5. Run the ipa-certupdate utility on all clients to update them with the
information about the new certificate from LDAP. You have to run
ipa-certupdate on every client separately. """

This should be
5. Run the ipa-certupdate utility on all clients and replicas to update them with the information about the new certificate from LDAP. You have to run ipa-certupdate on every client and replica separately.
Also looping in Martin for his comments.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 4 Aneta Šteflová Petrová 2016-06-20 10:33:10 UTC

I applied the changes proposed in this BZ for section "29.3. Manual CA Certificate Renewal":
* The ipa-cacert-manage renew step for an external CA now includes --external-ca
* Both ipa-certupdate steps now mention clients and replicas

Comment 6 Aneta Šteflová Petrová 2016-07-29 07:23:13 UTC

Published with the latest update: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/Linux_Domain_Identity_Authentication_and_Policy_Guide/index.html