4.5. Importing Subscription Certificates

In certain situations, new product subscriptions can be added by installing the subscription certificate directly rather than polling the subscription service. For example, systems which are offline must have subscriptions manually added because they cannot connect to the subscription service directly. Alternatively, an administrator may want to attach a subscription for a product which is not yet installed.
  1. Retrieve the certificate information for the system from the Customer Portal.
    1. Open the Subscriptions tab in the Customer Portal, and select the Overview item under the Certificate-based Management area.
    2. In the summary of systems, click the name of the offline system.
    3. If necessary, attach the subscriptions to the system.
    4. Open the My Subscriptions tab.
    5. Click the Download All Certificates button. This exports all of the subscription certificates, for each product, to a single .zip file. Save the file to some kind of portable media device, like a flash drive.
      To download individual subscription certificates, click the Download link on the row for the subscription.
  2. Copy the certificates over to the system machine.
  3. If all certificates were downloaded in an archive file, then there are multiple archives in the downloaded certificates.zip file. Unzip the directories until the PEM files for the subscription certificates are available.
  4. Import the certificates.
    This can be done from the command line using the import command:
    # subscription-manager import --certificate=/tmp/export/entitlement_certificates/596576341785244687.pem --certificate=/tmp/export/entitlement_certificates/3195996649750311162.pem
    Successfully imported certificate 596576341785244687.pem
    Successfully imported certificate 3195996649750311162.pem
    This can also be performed through the Subscription Manager GUI:
    1. Launch Subscription Manager. For example:
      [root@server ~]# subscription-manager-gui
    2. Open the System menu, and select the Import Certificate item.
    3. Click the file folder icon at the right of the field to navigate to the .pem file of the product certificate.
    4. Click the Import Certificate button.
All of the uploaded subscriptions are attached to the system.