2.10. Uninstalling Certificate System Subsystems
It is possible to remove individual subsystem instances or to uninstall all packages associated with an entire subsystem. Instances and subsystems are installed and uninstalled individually. For example, it is possible to uninstall a DRM subsystem while leaving an installed and configured CA subsystem. It is also possible to remove a single CA instance while leaving other CA instances on the machine.
To remove a subsystem instance, run the following command:
pkiremove -pki_instance_root=pki_instance_root-pki_instance_name=pki_instance_ID
The pki_instance_root is the directory path of the instance, such as /var/lib. The pki_instance_name is the instance name, such as rhpki-ca.
pkiremove -pki_instance_root=/var/lib -pki_instance_name=rhpki-ca1 PKI instance Deletion Utility ... PKI instance Deletion Utility cleaning up instance ... Stopping rhpki-ca1: process already stopped Removing dir /var/lib/rhpki-ca1 Removing file /var/log/rhpki-ca1-install.log Removing file /etc/init.d/rhpki-ca1 Removing file /usr/share/applications/rhpki-ca1-config.desktop Removing file /usr/bin/dtomcat5-rhpki-ca1
pkiremove removes the instance and any related files, such as the certificate databases, certificates, keys, and associated users. It does not uninstall the subsystem.
To uninstall an individual Certificate System subsystem, do the following:
Remove all the associated subsystem instances using pkiremove. For example:
pkiremove -pki_instance_root=/var/lib -pki_instance_name=rhpki-ca
Run the uninstall utility. rhpki-uninstall is one of the tools included in the rhpki-manage package. For example:
rhpki-uninstall -pki_subsystem=ca
The subsystem type can be ca, ra, drm, esc, ocsp, tks, tps, or all. This command uninstalls the Certificate System servers as well as the Enterprise Security Client. This also removes all Certificate System RPMs used by the specified subsystems.
If all of the Certificate System subsystems on the machine have been uninstalled, remove the Certificate System uninstall utility; this means removing the rhpki-manage package.
rpm -ev rhpki-manage