freeipa

#7090 [RFE] Migration capabilities between non-FIPS IDM to FIPS IDM
Opened by pvoborni. Modified

Open
Close Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1475085

Description of problem:
As per the Doc Text for bug
https://bugzilla.redhat.com/show_bug.cgi?id=1125174, the text leads mentions
that there is no transition from an IPA instance that is not FIPS to a new FIPS
enabled environment short of re-installing everything.
This is unacceptable as customers would have to redo the entire trust domain as
the solution.
Version-Release number of selected component (if applicable):
ipa-4.5.0-1.el7
Additional info:
In the case that this is "the only way" then we may need some really good
documentation on how to migrate everything. IPA is woven throughout the entire
Red Hat product line and transitioning the various products (RHV, Satellite,
etc) to a new trust domain is likely not trivial.

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1475085

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1475085

Metadata Update from @frenaud:
- Issue tagged with: fips
Metadata
None

fips

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.