On Wed, Sep 12, 2018 at 02:36:23PM -0000, Peter Tselios via FreeIPA-users wrote:
I talked with some friends. It looks like the only way to alter
this information is during the installation only (when you specify
an external CA) and there is no way to change it afterwards.
That's correct. When installing FreeIPA the CA Subject DN is
completely configurable via the `--ca-subject=...` option.
After installation the CA subject DN cannot be changed. This is due
to X.509 itself, not specific to FreeIPA.
There are hacks to change the CA Subject DN in FreeIPA, but the
process is complicated and unsupported.