If I have a pair of IPA servers and need to reinstall the one currently
holding the CA master, is it actually necessary to promote the other one,
or can I just follow the procedure to rebuild the current master via
replication and then verify its CA configuration[1] after the fact?
Thanks,
-Rob
[1] Specifically, everything mentioned in
https://www.freeipa.org/page/Howto/Promote_CA_to_Renewal_and_CRL_Master