RHEL7: computers with no internet access, certificat downloaded in 2017 december, but expired now
Hello;
I work with the contract number xxxxxx816.
In 2017, December, I have recorded on RedHat portal the 18 VM .
Then, I have downloaded the 18 pem files on a USB key.
And, with this USB key, I have install these certificate on a private network with the command :
subscription-manager import --certificat=1SIMDTPXXXXX.pem
This process was successful , the yum command was successful (no warning messages..)
But, today , the system, at local computer say me that I have no license as response to the command : #yum list
*** WARNING ***
The subscription for following product(s) has expired:
...................
- Red Hat Enterprise Linux Server
...
(full text is provided in attached text file)
Also, on the RedHat Customer portal, for all systems, the field status is : " Partiellement abonné" with "an orange star" (see also attached "screen shot")
What is the step I have missed.
I suppose , I should produced a file in my local system, and then, this file should be probably recorded on the RedHat portal.
Thank you for your anwer;
Best regard;
Pierre Soubeille
Airbus Defence & Sapce
Attachments
Responses
Guru
10133 points
Hello Pierre Soubeille,
I recommend you remove your email address, the contract number from the public discussion forum, & company name as well from the post you started here (above).
Pierre, it looks like from what you say, you have a private network with 18 Red Hat servers. I'm not certain, but without direct knowledge of your network constraints, I get the impression these 18 systems on a private network are not able to reach the public Internet, and therefore can not directly access Red Hat, or Red Hat's networks in order to attain updates. (I do not mean to be master of the obvious here).
Generally, when a company, or some entity has the need to provide updates for an isolated network of some form, they often select a solution such as Red Hat Satellite server, and there's a number of methods either "connected" or "disconnected" a company/agency can then provision the updates necessary for systems on a private network. Perhaps you can have the Red Hat Satellite server (nothing to do with satellites in the sky, it is the name of a product) face both the public Internet to acquire updates, and then maybe have a another network interface facing the 18 systems you speak of. Or the use of a "capsule" server. Much of what I describe here goes into the case use of a Red Hat Satellite server and it's features.
However, maybe your company/agency will allow you the freedom to let the 18 systems you speak of face the public Internet, and then you could subscribe them directly to Red Hat, and acquire updates/patches directly without the need of a Red Hat Satellite server. This will depend of course on the layout, intentions and security policies of your company. Remember this is a public forum, and keep security in mind with any details you provide. (see next paragraph).
All of the above said, please start with opening a case with Red Hat to at least initially settle the matter of the software channel expirations you've noticed, because based on what you have said in this discussion you have opened, it seems likely (I do not know definitively) that you probably have active subscriptions for these 18 systems.
So please start with opening a case with Red Hat https://access.redhat.com/support/cases/.
Regards, RJ
Guru
6222 points
All,
Are you aware that the subscription name for Oracle Java rpm's has changed to "Oracle Java Add-On". So it might be that Pierre and other in the Discussion forum need to request this new subscription and afterwards have to add a new yum repository to get Erratta. I found an article by accident.
https://access.redhat.com/solutions/732883
Regards,
Jan Gerrit Kootstra
Guru
10133 points
Thanks - yeah, Pierre, it may be more efficient to contact Red Hat sales if your subscriptions have expired. (I had pointed him to RH support thinking they'd point him in the right direction.) If you merely need the Oracle Packages, see the link Jan provided https://access.redhat.com/solutions/732883.
ADDED/EDITED: however, since he mentioned (in the title of the thread) he has no internet access (with these servers it seems), I didn't suspect channels were the primary thing to initially focus on.
Thanks Jan Gerrit Kootstra
RJ
Guru
6222 points
Hello Pierre,
Have you checked the status of your subscriptions? The error message states that the subscriptions expired.
So either you need to choose different subscription numbers to create your certificate or your internal sales people need to buy subscription renewals.
Regards,
Jan Gerrit Kootstra
Guru
10133 points
Pierre,
It might be worthwhile to contact Red Hat sales as Jan Gerrit Kootstra mentioned above, to settle any issue with subscriptions. If you are doing development work, you can acquire a development license (non-production use, and you have to agree to development-use agreement with Red Hat). This might give you more time than 31 days if you are working with an evaluation. That being said, if you have a 30 day evaluation with Red Hat, you can often get it extended if you contact your sales person ( at least we have been able to do so when we are testing a product).
ADDED/EDITED: I suspect from the title of the thread these systems are not connected to the Internet (see some things I mentioned in my initial post), so if you wish to provide software channels from Red Hat or Oracle, you might have to figure a means for this.
Hope it goes well Pierre,
Thanks Jan Gerrit Kootstra
RJ
Guru
10133 points
HI Pierre,
Read my last paragraph first. These solution ID links I've provided seem to be for those who are facing the issue you are facing. However, it may be more efficient to sort this out with Red Hat support directly.
Sorry you're having trouble with this. I found this possible solution https://access.redhat.com/solutions/60702 that you might have already done. And here is another solution like it https://access.redhat.com/solutions/492323, but wait there's yet another link https://access.redhat.com/solutions/3121571.
One thought, as you are performing your commands to register the certificates, in a separate window run (as root)
tail -f /var/log/messages
And see if anything that might relate to the issue you're facing appears.
I think you can probably contact Red Hat support directly, and they have support people in France - and they might be able to help you sort this out more efficiently. I have never once in my life registered an offline system with PEM certificates. Make an "sosreport" (after a registration subscription-manager import attempt) -- an "sosreport" is something that helps Red Hat diagnose your system and attach it (the file) to your case. It will be located in /var/tmp/sosreport-name.number.tar.xz
Kind Regards, -RJ
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.