Chapter 5. Managing Entitlement Certificates

The Entitlements Manager screen is used to list entitled products in the current Red Hat content certificates and to upload new certificates.
To access the Entitlements Manager screen, go to the Home screen and type n at the prompt:
rhui (entitlements) => n
	
------------------------------------------------------------------------------
             -= Red Hat Update Infrastructure Management Tool =-


-= Entitlements Manager =-

   l   list Red Hat content certificate entitlements
   c   list custom repository entitlements
   u   upload a new or updated Red Hat content certificate

                                                  Connected: rhua.example.com
------------------------------------------------------------------------------
rhui (entitlements) =>

Procedure 5.1. List Certificate Information

  • From the Entitlements Manager screen, type l at the prompt to list data about the current content certificate.
    Red Hat Update Infrastructure Manager will give the following information about the certificate:
    rhui (entitlements) => l
    
    Red Hat Entitlements
    
      Valid
        Red Hat Enterprise Linux Server (RPMs)
        Expiration: 01-31-2012     Certificate: big-content-cert.pem
    
        Red Hat Enterprise Linux Server (SRPMS)
        Expiration: 01-31-2012     Certificate: big-content-cert.pem
    
        Red Hat Enterprise Linux Server 6 Releases (RPMs)
        Expiration: 01-31-2012     Certificate: big-content-cert.pem
    
        Red Hat Enterprise Linux Server 6 Releases (SRPMS)
        Expiration: 01-31-2012     Certificate: big-content-cert.pem
    
        Red Hat Enterprise Linux Server 6 Updates (RPMs)
        Expiration: 01-31-2012     Certificate: big-content-cert.pem
    
        Red Hat Enterprise Linux Server 6 Updates (SRPMS)
        Expiration: 01-31-2012     Certificate: big-content-cert.pem
    
        Red Hat Update Infrastructure 1.2 (RPMs)
        Expiration: 01-31-2012     Certificate: big-content-cert.pem
    
        Red Hat Update Infrastructure 1.2 (SRPMS)
        Expiration: 01-31-2012     Certificate: big-content-cert.pem
    
      Expired
        Red Hat Update Infrastructure 1.1 (RPMs)
        Expiration: 06-25-2011     Certificate: content-cert.pem
    
    
    ---------------------------------------------------------------
    rhui (entitlements) =>
    

Procedure 5.2. List Custom Repository Entitlements

  • From the Entitlements Manager screen, type c at the prompt to list data about the custom repository entitlements.
    rhui (entitlements) => c
    
    Custom Repository Entitlements
    
      For each entitlement URL listed, the corresponding repositories
      that are configured with that entitlement are listed.
    
      /protected/$basearch/os
        - Name: Repo 1
          URL:  protected/i386/os
        - Name: Repo 2
          URL:  protected/x86_64/os
          
    ------------------------------------------------------------------------------
    rhui (entitlements) =>
    

Procedure 5.3. Upload Content Certificate

Red Hat might need to issue a new content certificate if your old content certificate is about to expire, or to change the entitlements of the certificate. If Red Hat issues a new content certificate, it will need to be uploaded to Red Hat Update Infrastructure.

Note

When you upload a new content certificate, it will also be updated in the Red Hat Update Appliance, and will be used for synchronizing Red Hat repositories. For this reason, do not upload a new content certificate before it becomes valid, as it will cause your synchronizations to fail until the valid date is reached.
If two or more content certificates provide the same entitlements, the certificate with an expiration date furthest in the future will be used.
Red Hat Update Infrastructure Manager expects that both the content certificate and its private key will be contained in the same file. If you have existing content certificates with separate keys, you can create the single file using the cat command at a shell prompt:
# cat content.crt content.key > content-2.pem
  1. From the Entitlements Manager screen, type u at the prompt to upload a new content certificate:
    rhui (entitlements) => u
    

    Important

    Content certificates are stored on the same system Red Hat Update Infrastructure Manager is installed on, at /etc/pki/rhui. For security reasons, this directory requires root permissions. If you do not have the correct permissions, Red Hat Update Infrastructure Manager will not allow you to proceed:
    rhui (entitlements) => u
    
    The current user does not have write privileges to update the
    content cert at /etc/pki/rhui/content-cert.crt.
    
    ------------------------------------------------------------------------------
    rhui (entitlements) =>
    
  2. Enter the full path to the new content certificate:
    Full path to the new content certificate:
    /home/example/rhui-certs/cert-1.pem
    
  3. The details of the new certificate to be uploaded will be displayed. Type y at the prompt to confirm the information and upload the packages. Red Hat Update Infrastructure Manager will then list the current certificates:
    The RHUI will be updated with the following certificate:
      Certificate:
    /home/example/rhui-certs/cert-1.pem
    
    Proceed? (y/n) y
    
    
    Red Hat Entitlements
    
      RHEL 5
      Expiration: 06-06-2012     Certificate: cert-2.pem
    
      RHUI 1.1
      Expiration: 06-07-2012     Certificate: cert-1.pem
    
      RHUI 1.2
      Expiration: 06-07-2012     Certificate: cert-1.pem
      
    ------------------------------------------------------------------------------
    rhui (entitlements) =>