3.5. Registering an Offline System

Some systems may not have Internet connectivity, but administrators still want to attach and track the subscriptions for that system. This can be done by manually registering the system, rather than depending on Subscription Manager to perform the registration. This has two major steps, first to create an entry on the subscriptions service and then to configure the system.
  1. Open the Subscriptions tab in the Customer Portal, and select the Overview item under the Subscriptions area.
  2. In the Utilization area, click the Register a system link to create the new inventory entry.
  3. Fill in the architecture and hardware information for the system, along with other required information.
    • The name for the entry, which is normally the hostname.
    • The system type, physical or virtual.
    • The architecture, which is used to determine compatible subscriptions.
    • The number of sockets, either the number of physical sockets or, for virtual machines, the number of CPUs. Some subscriptions apply to a certain number of sockets, and multiple subscriptions may be required to cover larger systems.
  4. Once the system is created, attach the appropriate subscriptions to that system.
    1. Open the Available Subscriptions tab.
    2. Click the checkboxes by all of the subscriptions to attach, and then click the Add Selected button.
  5. Once the subscriptions are added, open the My Subscriptions tab.
  6. Click the Download All Certificates button. This exports all of the subscription certificates, for each product, to a single .zip file. Save the file to some kind of portable media, like a flash drive.
  7. Copy the subscription certificates from the media device over to the system.
  8. If all subscription certificates were downloaded in an archive file, then there are multiple archives in the downloaded certificates.zip file. Unzip the directories until the PEM files for the subscription certificates are available.
  9. Import the subscription certificates. This can be done using the Import Certificates item in the System menu or using the import command. For example:
    # subscription-manager import --certificate=/tmp/export/entitlement_certificates/596576341785244687.pem --certificate=/tmp/export/entitlement_certificates/3195996649750311162.pem
    Successfully imported certificate 596576341785244687.pem
    Successfully imported certificate 3195996649750311162.pem
  10. Optionally, disable the automatic Red Hat repository.
    When a system is registered, Subscription Manager automatically creates a redhat.repo file to access hosted repositories. For disconnected systems, it may be preferable to disable this repository. This is described in Section 6.3, “Disabling the Subscription Manager Repository”.


The logic that processes whether a product on a system has a valid subscription attached is performed on the subscription server, not the local client. This means that even if all products have the proper subscriptions attached an offline system will always show an unknown subscription status.
To connect the system to a subscription server and update the subscription status (meaning, moving the system from an offline system to an online system), download the identity certificate from the system entry in Customer Portal Subscription Management, and extract the cert.pem and key.pem files into the /etc/pki/consumer directory.