rhsmcertd(8)

📦
version 1.30.16 · 3 versions
, in centos-stream 10

✨ NAME ✨

okay bestie, meet rhsmcertd(8) from the Subscription Management manual 💖 — she periodically scans and updates the entitlement certificates on a registered system. main character daemon behavior, no cap.

🌸 SYNOPSIS 🌸

rhsmcertd [--cert-check-interval=MINUTES] [--auto-registration-interval]
[--no-splay] [--now] [--auto-registration] [--debug] [--help]

Deprecated usage

rhsmcertd [certInterval]

🦋 DESCRIPTION 🦋

okay so Red Hat provides content updates and support by issuing subscriptions for its products, and those subscriptions are applied to systems, aka machines. Red Hat Subscription Manager is the tool that lets administrators manage those subscriptions by registering systems and people, applying subscriptions, and viewing subscriptions 💅.

When subscriptions are applied to a system, or when new subscriptions are available, the subscription management system issues that machine an X.509 certificate that contains all of the details of that subscription. The rhsmcertd process runs periodically to check for changes in the subscriptions available to a machine by updating the entitlement certificates installed on the machine and by installing new entitlement certificates as they're available. it's giving certificate refresh era ✨.

At a defined interval, the process checks with the subscription management service to see if any new subscriptions are available to the system. If there are, it pulls in the associated subscription certificates. If any subscriptions have expired and new subscriptions are available, then the rhsmcertd process will automatically request those subscriptions. By default, the initial cert check is delayed by a random amount of seconds from zero to certCheckInterval 🎀.

This rhsmcertd process can also perform automatic registration when the VM is running in the public cloud. Three public cloud providers are supported: AWS, Azure and Google Cloud. When it is desired to perform automatic registration by rhsmcertd, then it is also necessary to configure mapping of "Cloud ID" to "RHSM organization ID" on https://cloud.redhat.com 🌈.

This rhsmcertd process invokes the rhsmcertd-worker.py script to perform the certificate add and update operations. teamwork makes the dream work 🫶.

The certificate interval is configurable and can be reset through the rhsmcertd daemon itself or by editing the Subscription Manager /etc/rhsm/rhsm.conf file.

rhsmcertd is started with the machine, by default, and is always running in the background. lowkey always on, highkey iconic 👑.

💅 OPTIONS 💅

  • -h, --help — prints the specific help information for the given command. short and sweet 🎀.
  • -d, --debug — records more verbose output to the /var/log/rhsm/rhsmcertd.log log file. extra yapping, but useful ✨.
  • -n, --now — runs the rhsmcertd scan immediately, rather than waiting for the next scheduled interval. instant gratification, honestly 💅.
  • -c, --cert-check-interval=MINUTES — resets the interval for checking for new subscription certificates. this value is in minutes. the default is 240, or four hours. this interval is in effect until the daemon restarts, and then the values in the /etc/rhsm/rhsm.conf file are used (unless the argument is passed again). so yeah, temporary reset vibes ⏳.
  • -r, --auto-registration-interval=MINUTES — resets the interval for automatic registration. this value is in minutes. the default is 60, or 1 hour. this interval is in effect until the daemon restarts, and then the values in the /etc/rhsm/rhsm.conf file are used (unless the argument is passed again). same energy, different timer 🕰️.
  • -s, --no-splay — if present this option disables the splay feature entirely. when not present the value of "splay" from the /etc/rhsm/rhsm.conf file is used to determine whether the splay feature is on ("1") or off ("0"). choose your chaos wisely 🌸.
  • -a, --auto-registration — if present this option enable automatic registration. when not present the value of "auto_registration" from the /etc/rhsm/rhsm.conf file is used to determine whether the automatic registration feature is on ("1") or off ("0"). auto mode: activated 🦋.

🌟 USAGE EXAMPLES 🌟

NOTE Be sure to stop the running rhsmcertd daemon before making any configuration changes, or the new configuration is not applied. no cap, this one matters 😭.

🎀 RESETTING THE CERTIFICATE SCAN INTERVAL

service rhsmcertd stop
rhsmcertd --cert-check-interval=240

🔥 RUNNING CERTIFICATE SCANS IMMEDIATELY

Normally, the certificate scans are run periodically, on a schedule defined in the rhsmcertd configuration. The scans can be run immediately -- which is useful if an administrator knows that there are new subscriptions available -- and then the scans resume their schedules. get that scan done rn bestie 💅.

service rhsmcertd stop
rhsmcertd -n

💀 DEPRECATED USAGE

rhsmcertd used to allow the certificate intervals to be reset simply by passing an integer argument.

rhsmcertd certInterval

For example:

service rhsmcertd stop
rhsmcertd 180

This usage is still allowed, but it is deprecated and not recommended. it's giving old group chat screenshot energy 🙈.

🍓 ASSOCIATED FILES 🍓

  • /usr/share/rhsm/certmgr.py
  • /etc/rhsm/rhsm.conf
  • /var/log/rhsm/rhsmcertd.log

🧚 BUGS 🧚

This daemon is part of Red Hat Subscription Manager. To file bugs against this daemon, go to https://bugzilla.redhat.com, and select Red Hat > Red Hat Enterprise Linux > subscription-manager 🐛.

💜 AUTHORS 💜

Deon Lackey, <dlackey@redhat.com> and Jeff Ortel, <jortel@redhat.com>. rhsmcertd was written by Jeff Ortel. shoutout the authors fr fr 🫶.

Copyright (c) 2010-2012 Red Hat, Inc. This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt. legal bestie moment, but make it iconic 📜✨.

okay that's the whole page, bestie 💖 this is rhsmcertd(8) from the Subscription Management manual, and the footer didn't give a date — so no fake date, no cap. byeee 🫶🌈

📦 where this page comes from