Currently the tools use different default certificate databases:

• pkispawn: ~/.pki/<instance>/<subsystem>/alias
• console: ~/.dogtag-idm-console or ~/.redhat-idm-console
• CLI: ~/.pki/nssdb (to be changed to ~/.dogtag/nssdb)

So to use the tools the user would have to export/import the certificates manually or use additional parameters to specify the database location. To streamline the operation it would be better to use a shared database, but there are some issues:

• The current database doesn't support concurrent access. A database migration may be required.
• The above tools need to be able to handle conflicting certificates.
• A new tool may be needed to merge existing databases.