except that wouldnt work for me, I had to scp the keys after creating them on the IPA server. 8><-------- The best way to ensure keys are properly handled is to retrieve them directly on the target machine, and only there. Simo.