Reported on the mailing list of a fresh install: I notice in our original setup it says: Installing : ipa-server 64/64 Missing Certification Authority file. You should place a copy of the CA certificate in /usr/share/ipa/html/ca.crt We should exist ipa-upgradeconfig quietly if IPA isn't currently configured.