Red Hat CERTIFICATE SYSTEM 8 Install Manual page 103

To update any clone CAs with new DRM configuration in the master CA:
1. Stop the clone CA.
service subsystem_name stop
Always stop a subsystem instance before editing its configuration files.
2. Copy all of the ca.connecter.KRA.* parameters for the new DRM connection in the CS.cfg
for the master CA over to the clone CA CS.cfg file.
3. Restart the clone CA.
service subsystem_name restart
Updating CA Clones
93