How to Install and Uninstall pki-kra.noarch Package on CentOS Stream 9

Last updated: September 28,2024

1. Install "pki-kra.noarch" package

Please follow the guidance below to install pki-kra.noarch on CentOS Stream 9

$ sudo dnf update $ sudo dnf install pki-kra.noarch

2. Uninstall "pki-kra.noarch" package

Please follow the instructions below to uninstall pki-kra.noarch on CentOS Stream 9:

$ sudo dnf remove pki-kra.noarch $ sudo dnf autoremove

3. Information about the pki-kra.noarch package on CentOS Stream 9

Last metadata expiration check: 3:24:42 ago on Sat Mar 16 16:03:45 2024.
Available Packages
Name : pki-kra
Version : 11.2.0
Release : 0.2.beta1.el9
Architecture : noarch
Size : 305 k
Source : pki-core-11.2.0-0.2.beta1.el9.src.rpm
Repository : appstream
Summary : PKI KRA Package
URL : https://www.dogtagpki.org
License : GPLv2 and LGPLv2
Description : PKI Key Recovery Authority (KRA) is an optional subsystem that can act
: as a key archival facility. When configured in conjunction with the
: Certificate Authority (CA), the KRA stores private encryption keys as part of
: the certificate enrollment process. The key archival mechanism is triggered
: when a user enrolls in the PKI and creates the certificate request. Using the
: Certificate Request Message Format (CRMF) request format, a request is
: generated for the user's private encryption key. This key is then stored in
: the KRA which is configured to store keys in an encrypted format that can only
: be decrypted by several agents requesting the key at one time, providing for
: protection of the public encryption keys for the users in the PKI deployment.
:
: Note that the KRA archives encryption keys; it does NOT archive signing keys,
: since such archival would undermine non-repudiation properties of signing keys.