Transition of Red Hat's subscription services to the Red Hat Hybrid Cloud Console (console.redhat.com)

What is changing?

Red Hat is migrating many of its core customer facing subscription services from access.redhat.com to the Hybrid Cloud Console console.redhat.com. This is being done to unify system and subscription management experiences, regardless of deployment or registration method, by migrating key use cases from Customer Portal RHSM to console.redhat.com. This migration will allow new capabilities such as richer permissions/RBAC tooling to better reflect customer environments, simplification of client registration tooling, and better alignment with cloud-native management tooling.

Additionally Red Hat is transitioning from entitlement based (system-level) subscription management to account level subscription management (Simple Content Access).

Important Upcoming dates and releases

• Satellite 6.15 - Satellite version 6.15 will be the last release of Satellite which supports entitlement workflows and will continue to do such through its published lifecycle
• Satellite 6.16 - Satellite versions 6.16 (and future versions) will only support Simple Content Access.
• April 2024 - Red Hat Subscription Management users who have adopted Simple Content Access, will be redirected to the Hybrid Cloud Console.
• Oct/Nov 2024 - Red Hat Subscription Management users who haven't switched to using Simple Content Access and the Hybrid Cloud Console will be converted to use this experience. As part of this conversion to using Simple Content Access and the Hybrid Cloud Console, most parts of the RHSM user interface in access.redhat.com will be made inaccessible. This conversion for users who are not using Simple Content Access and the Hybrid Cloud Console is expected to happen on/around 25-Oct-2024
• Oct/Nov 2025 - As support for AUS now exists within the subscriptions service (see SWATCH-2743), users of RHSM who also use the AUS add-on will be converted to Simple Content Access & the Hybrid Cloud Console at/around Oct/Nov 2025 with a more exact date being announced in 2025.

Users who have been using RHSM to track system profiles for offline systems will need to use tools such as Red Hat Satellite or Discovery or maintain their own offline counting mechanisms, as described in the Legacy Functions section of this document.

Special considerations for users of Advanced Update Services (AUS)

Users of the Advanced Update Services add-on are excluded from the Oct/Nov 2024 deadline pending the release of support for reporting this addon in the subscriptions service. Migration dates for these users will be announced at a future date.

Tracker for support for AUS in the subscriptions service can be found here: (SWATCH-2743). For users of the AUS add-on, the conversion to use Simple Content Access and the Hybrid Cloud Console will occur no earlier than one year after SWATCH-2743 is completed.

Update - Support for the Advanced Update Support (AUS) add-on has been available since 22-Oct-2024. Users who wish to use this functionality can find it within the subscriptions service and selecting the RHEL Advanced Update Support Add-on, Annual Variant

Upcoming changes to Red Hat Enterprise Linux's client/registration tools

In support of this modernized subscription experience, the tools used to connect Red Hat Enterprise Linux to Red Hat's hosted properties / Red Hat Satellite are being modernized and updated, with a number of incompatible and outdated capabilities being deprecated & removed. Specifically:

• In a future release of RHEL 9, support for commands related to entitlement management, e.g. subscription-manager attach, subscription-manager auto-attach, and similar commands will be deprecated.
• The upcoming release of Red Hat Enterprise Linux 10 will remove support for commands related to entitlement management
• The upcoming release of Red Hat Enterprise Linux 10 can only be registered in Red Hat accounts (or Red Hat Satellites) where Simple Content Access is enabled.

How does this subscription experience work?

There are three core components that power this experience.

• Simple Content Access - Access the software as simply as possible
• System Purpose - Tag the workloads, as needed to help delinate between development/production or standard/premium/self-support
• The Subscriptions Service - View your utilization of Red Hat products, with the ability to filter for deployment type, SLA, add-ons/variants, etc.

Let's walk through an example workflow.

Step 1 - Register a system using either subscription-manager or rhc

subscription-manager register OR rhc connect

Both tools can also use Activation Keys instead of username/password for automation.

Step 2 - (Optional) - Set System Purpose Attributes

In this example, the system being registered should be counted as Standard, so set the service-level to Standard

subscription-manager syspurpose service-level --set Standard

Step 3 View your usage in the Subscription Service

Visit the Subscriptions Service to see your product usage. An example of this usage is shown below.

Want to learn more about the Subscriptions Service? Try our self-paced lab

That's it. No complexity of attaching (and reattaching) subscriptions, ever again.

Which capabilities are changing, have moved, and are moving to console.redhat.com?

All of the major functions of Red Hat Subscription Management have been moved to the Hybrid Cloud Console. Listed below is a simple mapping of those functions to help understand where to go to complete tasks.

RHSM	Function	HCC
https://access.redhat.com/management/	"Where do I go to see the subscriptions I own?"	https://console.redhat.com/subscriptions/inventory
https://access.redhat.com/management/systems	"Where are my systems?"	https://console.redhat.com/insights/inventory
https://access.redhat.com/management/activation_keys	"How do I create an activation key?"	https://console.redhat.com/insights/connector/activation-keys
https://access.redhat.com/management/subscription_allocations	"How do I create a manifest?"	https://console.redhat.com/subscriptions/manifests
https://access.redhat.com/management/cloud	"Where do I get gold images?"	https://console.redhat.com/settings/integrations

• Subscription Inventory (Released - Q2/2022) - The Subscription listings at access.redhat.com are now deprecated and are now available at console.redhat.com.
• Activation Keys (Released - Q3/2022) - Activation keys (which are used to connect systems in lieu of username/password) are available at console.redhat.com, and will include new features such as the ability to set System Purpose attributes. The activation key UI at RHSM is deprecated and will be removed in a future release.
• Manifests
  • Connected Manifests (Released - Q3/2021) - Satellite customers who have Satellites which can reach console.redhat.com should manage their manifests via the UI at console.redhat.com. The new UI allows the creation (and modification) of a subscription manifest, which can then have subscriptions added/removed via the Satellite UI. Additionally, newly created Satellite manifests default to having Simple Content Access enabled. However, connected Satellite customers can continue to use the subscription allocations page at access.redhat.com if preferred.
  • Disconnected Manifests (TBD) - Satellite customers who have Satellites which cannot reach access.redhat.com or console.redhat.com MUST continue to manage their manifests via Red Hat Subscription Management. Additionally, users of Ansible Automation Platform and our community users of Theforeman project MUST also continue to use the access.redhat.com interface.
• Cloud account linkage (formerly known as Cloud Access) (Released - Q2/2021) - Customers who are running Red Hat Enterprise Linux on the public cloud are advised to use the Hybrid Cloud Your Way workflow on console.redhat.com, The workflows to request gold images via access.redhat.com are deprecated and will be removed in a future release.
• Default account configuration - As of 15-Jul-2022, newly created Red Hat accounts default to having Simple Content Access enabled.
• Errata Notifications (Q4 2024) - Users receiving errata notification emails will have their preferences migrated to the new notification service at console.redhat.com, which includes additional features for receiving events through integrations with webhooks and select 3rd party applications. The sender of these emails will transition from errata@redhat.com to noreply@redhat.com. This migration will complete by 25-October-2024.

Which capabilities are being retired

• Entitlement Management - Entitlement management, effective with the release of Satellite 6.11 (for Satellite customers) and 15-Jul-2022 (for RHSM) is deprecated. Customers are advised to enable Simple Content Access if you haven't already. The ability to operate RHSM in 'entitlement mode' WILL be removed in a future release. Additionally:

  • Requests For Engineering (RFEs) for subscription tooling related to attaching entitlements will be CLOSED-WONTFIX.
  • Requests For Engineering (RFEs) for subscription tooling when operating with SCA enabled will be addressed based on severity & urgency.
  • Bugs related to 'the subscription tools didn't attach the right entitlement' will also be CLOSED-WONTFIX.
  • Bugs related to 'the subscription tools block access to content' will be addressed based on severity & urgency.
  • RFEs and Bugs related to RHSM (the subscription web UI at access.redhat.com) will be CLOSED-WONTFIX
  • RFEs and Bugs related to subscription services at console.redhat.com will be addressed based on severity & urgency.

• Offline profile creation - Registering 'offline' systems, as documented in https://access.redhat.com/solutions/3121571 is also deprecated. Support for this functionality will be removed from the subscription-manager CLI tooling in the near future and isn't supported at console.redhat.com. Customers who are in disconnected environment are advised to use either Red Hat Satellite or Red Hat Discovery for localized tracking of Red Hat Enterprise Linux usage totals. These tools can provide summarized usage counts for almost all RHEL variants, which can be manually compared to available account capacity.

What is the roadmap/future for Red Hat Subscription Tooling?

Maximize Your RHEL Subscription Benefits | Red Hat Enterprise Linux Product Update

Additionally, the videos below cover more of the modern improvements to the Red Hat subscription experience.

Access RHEL Subscriptions: Trials & More | Red Hat Enterprise Linux Presents 75

Modernizing the Registration Experience | Red Hat Enterprise Linux Presents 43

The Red Hat subscription experience of the future is built on a trifecta of tools with the stated goal of allowing you to "use simply. use obviously."

Simple Content Access

Empower the operator of Red Hat technologies to simply 'register & run' their systems without having to be an expert at Red Hat subscription management.

SCA Makes renewals super simple

When SCA is enabled, you no longer have to attach subscriptions to hosts, and therefore, you do not have to (re) attach subscriptions to hosts post-renewal.

• If you are a RHSM customer, you have absolutely nothing to do at renewal time. Just renew your subscriptions and keep using the bits. You don't have to reattach subscriptions to hosts; nor do you have to reattach them.
• If you are a Satellite customer, add the new subs to your manifest and refresh.

Renewals with Red Hat should be like any other renewal: It should keep working with little to no action required on your part. Simple Content Access makes that a practical reality.

Improves registration performance
* Registering systems has been measured to be up to 10x improved when SCA is enabled. This is primarily due to not having the overhead of calculating which entitlement should be attached. An example of the positive performance implications of enabling SCA are described in this document Performance impact of Simple Content Access and Red Hat Satellite. Similar perspective will be seen with large RHSM accounts.

Removes subscription complexity
* Your administrators no longer need to know exactly which subscription, entitlement, or pool-id that is needed to access a certain repository. All that is needed is to register the system, either using subscription-manager or rhc and optionally enable non-default repositories via subscription-manager repos.

Subscription Watch

Empowers the buyer of Red Hat to understand at the fleet level where technology is being used, how much, and if they need to purchase more. Subscription Watch has other more holistic benefits:

Account-level reporting
* Subscription Watch provides reporting across the entirety of a Red Hat account, including connected systems in RHSMs, systems in Satellite, OpenShift clusters, their add-ons and workloads, cloud based systems on Amazon/Azure/Google clouds, and in the near future disconnected systems.

Historical usage data
* Subscription Watch provides historical usage data, which can be useful for reporting and forecasting.

System Purpose

System Purpose is an implementation of use-case attributes, allowing the gathering of data that isn't traditionally fingerprint-able, which connect the two personas together. This allows the operator to tag the systems with the use-case data (which they actually know) and subsequently allows the buyer to filter based upon the use-cases in Subs Watch.

Summary (Read: what do we want you to do?)

• Use the software that you paid for as simply as possible by enabling Simple Content Access if it isn't already enabled.
• Tag up your inventory as accurately as possible to reflect how you are using it via System Purpose.
• If you are a Satellite customer, enable the Red Hat Cloud plugin to share inventory with console.redhat.com
• Use Subscription Watch to understand your usage over time.

Frequently Asked Questions:

General

Question: How do my systems get to the Hybrid Cloud Console?
Answer: By enabling either the Subscriptions Service or Simple Content Access. You are not expected, nor required to reconfigure or re-register each system to get them to show up in the Hybrid Cloud Console.

Question: I want to see what subscriptions are attached to a specific system and/or which contracts they are associated with.
Answer: In Simple Content Access mode, this no longer exists. The Subscriptions Service provides a reasonable approximation of this capability, primarily via its filtering capabilities. Consider using our self-paced lab on the subscriptions service to learn more about how to use filtering.

Question: How quickly do my systems get to the Hybrid Cloud Console?
Answer: systems registered solely with subscription-manager will show in the Hybrid Cloud Console's system inventory within a few minutes. It is recommended to register systems using either the rhc command or subscription-manager + insights-agent as per the guidance in the Getting Started with RHEL registration guide. Using either of these methods ensures that the systems will show in the Hybrid Cloud Console's inventory, immediately.

Question: Do I need to change my workflows when Simple Content Access is enabled?
Answer: Generally no. In some advanced use-cases, some reconfiguration of tools will be required. These are documented in the Simple Content Access guide.

Question: How often is the subscriptions service updated?
Answer: Once per day for most products. More detail can be found in the subscription service documentation

Question: My usage is higher that I expected in the Subscriptions Service
Answer: Check your configuration, particularly that of the virt-who utility. When virt-who is misconfigured, the subscription service may show incorrect data

Question: Is the virt-who utility still required?
Answer: Yes. Without the host/guest mapping information that the virt-who utility provides, the subscriptions service will be incorrect for subscription types (like RHEL Virtual Data)

Question: Are systems which are paid for via a cloud provider (such as PAYG or Marketplace systems) counted in the subscription service?
Answer: No. These systems are not counted. In the charts in the subscription service, these systems show up with a "double-dash" -- for their 'Sockets' usage to indicate this.

Question: What do I need to do at renewal time when SCA is enabled?
Answer: Other than purchasing the correct types & quantities of subscriptions, nothing. Note: Satellite is designed to operate independently of Red Hat's hosted properties, so Satellite users will need to add renewed subscriptions to their manifest and refresh it. But after that, nothing. You don't need to (re)attach subscriptions to systems or activation keys. Learn more about how Simple Content Access simplifies the renewal process here

Question: How do I file a bug or Request For Engineering (RFE) on the Hybrid Cloud Console?
Answer: On each page of the Hybrid Cloud Console there is a Feedback option. Use that to file feedback and/or bugs.

Question: How does the subscription service count my product usage, if I not attaching entitlements to systems?
Answer: See this subscription service documentation

Question: I use Red Hat Enterprise Linux in a CI/CD pipeline, how does Simple Content Access & the subscriptions service help me?
Answer: The new subscription experience improves this workflow in many ways.

• Firstly, when SCA is enabled, you no longer have to worry about either reclaiming entitlements from retired systems nor do you have to worry about deleting inactive systems.
• While it is recommended to delete inactive systems for general "system hygiene" reasons, systems which haven't checked in with the past 24h are not included in the daily usage charts in the subscription service.
• The time to register a system is reduced significantly when SCA is enabled (Performance impact of Simple Content Access and Red Hat Satellite)

Satellite

Question: What if I do not want to use the Simple Content Access?
Answer: Satellite versions <= 6.15 are the only versions that support entitlement mode. Eventually, as per the Red Hat Satellite Lifecycle document, those versions will be out of support eventually.

Question: As a satellite user, how do I track my usage of subscriptions?
Answer: Install and/or enable the Satellite inventory upload plugin

Question: I am a disconnected user of Satellite and I cannot send usage data to console.redhat.com?
Answer: There are a number of ways our data/security sensitive customers can address this.

• The Satellite rh_cloud plugin has options to redact certain attributes like hostname or IPv4 addresses
• Future versions of the rh_cloud plugin will have additional features to make it easier for disconnected or semi-connected users to upload inventory.
• Satellite versions >= 6.15 has a new report template Host - Installed Products, which allows a user to export their inventory with subscription pertinent facts. This report can be used to help determine subscription usage.

Question: The manifest UI in console.redhat.com doesn't have any way to attach subscriptions. How do I attach subscriptions to a manifest?
Answer: The preferred pattern for a connected Satellite customer is to download the manifest from console.redhat.com, import it, and add subscriptions via the Satellite user interface. Learn more about creating manifests for a connected Satellite Server. If you are a disconnected Satellite or Ansible Automation Platform user, please continue to use the Subscription Allocations page on access.redhat.com.

Legacy Functions:

Question: I download paper certificates via access.redhat.com. Are those moving to the Hybrid Cloud Console?
Answer: No. Those can still be downloaded via the Subscription inventory page in access.redhat.com. Select which subscription you are downloading a paper certificate for and select "Download"

Question: I use the How to register and subscribe a system offline to the Red Hat Customer Portal? process, what replaces it?
Answer: The "offline system" workflow attempted to solve the needs of multiple use-cases, and did not do that satisfactorily. It depends on either lots of manual action by the end-user OR workflows that are unsupported and brittle.

Users who used offline profiles for subscription tracking - We are removing this as a valid workflow. There are better ways to gather actual product usage for tracking purposes. If you register systems directly to Red Hat, this is done for you via the subscriptions service. If you are disconnected, tools such as Red Hat Satellite or Red Hat Discovery can be used to assist. This is covered in more detail in the "Offline 'subscription management'" section below.

Users who need to provide access to Red Hat content for 3rd party tools to mirror/sync content - This functionality is NOT moving to the Hybrid Cloud Console. Copying entitlement certificates is inherently very brittle as these certificates are periodically rotated leading to their revocation and a loss of content access. Tools like subscription-manager, Red Hat OpenShift Container Platform, and the Satellite manifest refresh process properly (and transparently) handle the rotation of certificates. While it is still unsupported to use them outside of the scope of those three tools, if you are going to use them in conjunction with a third party tool, configure your tool (on a registered system) to use the certificates in /etc/pki/entitlement as they'll keep working when rotated.

Users who need want to provide updates directly from the Red Hat CDN without registering a system - This process also depends on copying entitlement certificates which are used to access to CDN between systems. These certificates may be periodically revoked, making this process incredibly brittle. If you are disconnected, use tools such as Satellite to provide updates in a supported manner or register the system (via the guidance in the Getting Started Guide with RHEL system registration guide)

Users who need to provide updates to a Red Hat container - Red Hat containers, when running on a registered host (RHEL, CentOS Stream, or Fedora) or cluster (Red Hat OpenShift Container Platform) are automatically granted access to the same repositories of the host/cluster which is it running on. There is generally no reason to explicitly register a container, though that is also supported if needed. Copying entitlement certificates into containers manually is inherently broken and unsupported. Many valid alternatives are supported and are recommended for use.

Offline 'subscription management'

Firstly, what are your obligations as a Red Hat customer?

Red Hat does not require you to use any of our management tooling or connect your systems to us. Red Hat does require you to maintain the correct quantities and types of subscriptions for your deployments and gives you ways to update them. How you do that is up to you, though we provide many tools to assist. Some are intended for connected users (the Hybrid Cloud Console), some are intended for disconnected users (like reposync), and some do both (like Satellite & Discovery).

That being said, we understand that many of our customers are disconnected/airgapped for data privacy, policy, or even national security reasons. And that's totally fine, just purchase the right subs. We do not deny you access to support if your systems aren't registered, either directly via tools like subscription-manager or via this now deprecated offline systems workflow.

Secondly, I am offline / airgapped, what do I do?

The phrase "subscription management" is actually one (or both) of the following tasks:

• I need to provide updates for an offline system - For this, you always have been able (and will continue to be able) to mirror our updates so that you can use them offline. You can use any tool you like for this: Satellite, mrepo, reposync, community Pulp, etc. While we at Red Hat have strong opinions about which tool is best, ultimately it is your choice based on cost, time, and amount of complexity you are willing to take on.

• I need to track the number of systems running Red Hat software - As you are offline, tracking usage of Red Hat software needs to be done locally. Again, there are multiple tools to do this too: Satellite, Discovery, your internal CMDB, an Ansible inventory, a spreadsheet of your choosing, etc. Again, it's your pick. All of those are infinitely more automatable than creating system records at access.redhat.com

That "offline systems" workflow accomplished neither of the above. If you are disconnected, you can't reasonably provide an accurate system record (things like hostnames and other unique identifiers are likely considered sensitive) nor should you waste time doing such. There are better ways to track offline systems and keep them updated.

Learn More

See our guide on adopting your workflows to the Hybrid Cloud Console
Want to try the Subscriptions Service? Try our self-paced lab on Instruqt, which gives an overview of the subscriptions service using real-world data and subscriptions so that one can familiarize themselves with the service.

Contact us