DogTag's two-step installation: https://www.dogtagpki.org/wiki/Two-Step_Installation allows to customize the configuration before installing the CA. Method: invoke pkispawn with --skip-configuration first, edit the profile in /var, then relaunch pkispawn with --skip-installation.
This is required for, among others, https://pagure.io/freeipa/issue/7827
Metadata Update from @fcami: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/4796
Login to comment on this ticket.