URL:
Reporter RHNID:
Section: - Managing Certificates
Language: en-US (English)
Workaround:

Description: On p.140 the 'Requesting a Certificate' section shows you how to create a CSR but it doesn't explain how to submit the CSR to the integrated CA. You must use 'ipa cert-request` for this and for user certificates specifically the IECUserRoles profile should be explained.
The guided exercise that follows, uses `ipa cert-request` but it should be part of the narrative.

This section covers two use cases: User certificates for client authentication vs. Certificates used by services. The narrative could be improved to distinguish the procedure for each use case.