How to Install and Uninstall pki-kra Package on Ubuntu 21.10 (Impish Indri)

Last updated: May 14,2024

1. Install "pki-kra" package

This guide covers the steps necessary to install pki-kra on Ubuntu 21.10 (Impish Indri)


    
        
            $
        

        
            
                sudo apt update
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt install
            
                        
                pki-kra
            
                    
    
    Copied

2. Uninstall "pki-kra" package

This guide covers the steps necessary to uninstall pki-kra on Ubuntu 21.10 (Impish Indri):


    
        
            $
        

        
            
                sudo apt remove
            
                        
                pki-kra
            
                    
    
    Copied


    
        
            $
        

        
            
                sudo apt autoclean && sudo apt autoremove
            
                    
    
    Copied

3. Information about the pki-kra package on Ubuntu 21.10 (Impish Indri)

Package: pki-kra
Architecture: all
Version: 10.10.2-3build1
Priority: optional
Section: universe/java
Source: dogtag-pki
Origin: Ubuntu
Maintainer: Ubuntu Developers
Original-Maintainer: Debian FreeIPA Team
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 630
Depends: pki-server (>= 10.10.2-3build1)
Suggests: pki-ca
Filename: pool/universe/d/dogtag-pki/pki-kra_10.10.2-3build1_all.deb
Size: 183072
MD5sum: 36da275d8603592ff84753a0c2a3408a
SHA1: 1926e4a56d7410aa1bbddb08510d0aa19b90cf64
SHA256: 7adf077285996572c3978e0049b232d37f4e07230f409873151e1eaed2ab4ed2
SHA512: a7b1619f5d1ffbb0c1cb6a9d75eedce0b544cd4d20e97dd61ff81344dbf6abb11b5ebeabfdd5a6b608f0021e08f0506098d5d8695acd1289887fa879751041c0
Homepage: http://pki.fedoraproject.org
Description-en: Certificate System - Data Recovery Manager
Certificate System (CS) is an enterprise software system designed
to manage enterprise Public Key Infrastructure (PKI) deployments.
.
The Data Recovery Manager (DRM) is an optional PKI subsystem that can act
as a Key Recovery Authority (KRA). When configured in conjunction with the
Certificate Authority (CA), the DRM stores private encryption keys as part of
the certificate enrollment process. The key archival mechanism is triggered
when a user enrolls in the PKI and creates the certificate request. Using the
Certificate Request Message Format (CRMF) request format, a request is
generated for the user's private encryption key. This key is then stored in
the DRM which is configured to store keys in an encrypted format that can only
be decrypted by several agents requesting the key at one time, providing for
protection of the public encryption keys for the users in the PKI deployment.
.
Note that the DRM archives encryption keys; it does NOT archive signing keys,
since such archival would undermine non-repudiation properties of signing keys.
Description-md5: 246648bc4977717e7478d9a034ee965d