EJBCA Mariadb data snapshot

[hanamantagoud]

Hi ,

I am using EJBCA community edition software. I am trying to setup a EJBCA PKI infra for on-prem K8s cluster. EJBCA is running inside a VM as docker container along with mariadb. I have created Certificate Authorities , Certificate profiles , end entity profiles etc ... I have integrated EJBCA with Cert-Manager running inside K8s cluster . I am able to see Certificate Rotation etc ..

I see that there a lot of manual steps required to setup EJBCA . There are many steps to create Certificate Authorities , Certificate profiles , end entity profiles etc .. Can i create these once and take mariadb snapshot ? When i want to create new EJBCA instance , can i load it so that i can avoid the steps ? Is it possible ? Will it work ?

I wanted to automate the steps to setup the EJBCA instead of manual steps via GUI .. As part of that , one thought was to take maridb snapshot and keep re-using .. Another option is using CLI tool to create those profiles etc .. Is there any other better way ?

[primetomas]

There are a lot of options that is for sure, since everything is in the database you can export/import and modify any data.

--- start enterprise-plug ---
The best option is ConfigDump.
https://docs.keyfactor.com/ejbca/latest/configdump-tool
https://docs.keyfactor.com/ejbca/latest/tutorial-automate-ejbca-ra-deployment-with-helm
--- end enterprise-plug ---