Creating the RHSM entitlement certificates
You must create and download certificates through the Red Hat Subscription Management system. From the Red Hat portal, you must register a system then attach your subscriptions (entitlements) to that system.
About this task
This section describes the steps you need to create RHSM certificates through the Red Hat Subscription Management system. This entails registering a system then attaching your subscriptions (entitlements) to that system.
You must have at least one set of certificates that you need to download. You only need to register at least one system and attach the subscriptions (entitlements) to cover your machines.
Procedure
- Log in to the Red Hat Customer Portal at https://access.redhat.com/.
- Go to the Subscription Overview page at https://access.redhat.com/management/. Click Systems.
- Click New to create a new system.
-
Fill in the form with the following information then click Create.
- System type: Virtual system type
- Name
- Architecture: x84_64
If you are using System z, select s390x.
- Number of Sockets or LPARS - this field displays when you select Physical system type
- Number of vCPUs - this field displays when you select Virtual system type
- Red Hat Enterprise Linux version: 7.2
Selecting Red Hat Enterprise Linux version 7.2 will create entitlement certificates that also work with RHEL 6. The RHSM download plug-in does not support RHEL 5.
Note: This should not affect the entitlement but only the cert format.
-
When the page has refreshed, click the Subscriptions tab and click
Attach Subscriptions.
Note: You only need to do this step once for your BESServers as you can attach multiple subscriptions for the system that you are registering, to cover access to RHEL 6 and RHEL 7 packages. -
Select the subscriptions that will be attached to the system that you created and click
Attach Subscriptions.
-
The page displays the subscriptions attached to the system. Click Download
Certificates.
-
Unzip the downloaded certificate. Red hat now uses a single certificate instead of the earlier
RHSM version which required having both an entitlement certificate and an identity certificate.
Note: Ensure that your Red Hat subscriptions are active to avoid errors. -
Go to <BES Server>\DownloadPlugins\RHSMProtocol\certs and create a folder. Place the
unzipped certificates in the newly-created folder. Ensure that your Red Hat subscriptions are
active to avoid errors.
Note: In the plugin.ini, the "rootCertDir" value should be "certs", which is the default value. This is the relative path from the RHSMDownloadPlugin.exe to the rootCertDir called "certs".
You can run verify access to the repos when you run RHSMPlugin.exe --check-baserepos. For more information, see the Verifying RHSM download plug-in certificate access to Red Hat repositories section.