[Freeipa-users] CA install on replica fails - Clone URI does not match...

[Ross Infinger]

I'm installing the CA service on an existing replica with command ipa-ca-install.  It
fails with this error in the log:

Installation failed:
com.netscape.certsrv.base.BadRequestException: Clone URI does not match available
subsystems: https://pci-mgmt-ipa01.pci.xxxxxx.com:443

Version of both ca master and replica is 4.5.0 api version 2.228
domain level is 1

ipareplica-ca-install.log attached.

How can I further troubleshoot this?

Thanks,
Ross