Status: IN
The Dogtag KRA (Key Recovery Authority) must be installed (`ipa-kra-install`) on at least one IdM server before vaults can be used.
Source: repo:entries/2026/03/04/en-documentation-red_hat_enterprise_linux-9-html-working_with_vaults_in_identity.md