thanks for the hint.

I ran stuck during the search for the needed files in /var/lib/pki-ca/conf/CS.cfg on the master
in the CS.cfg file the related ca.crl items do not exist. and the ca.listenToCloneModifications=true.
This would implicate that its not the ca-master. 

Unfortunately it is the ca-master.
Appart from this, I also was not able to install a CA on the replica with ipa-ca-install.

I abbondoned the effort to promote this replica and decided to install a new ipa-server.

This leads to an other problems for which i will open a new tread.


Regards,

Rob.