1rhsmcertd(8) Subscription Management rhsmcertd(8)
2
6 rhsmcertd - Periodically scans and updates the entitlement certificates
7 on a registered system.
8
11 rhsmcertd [--cert-check-interval=MINUTES] [--auto-attach-interval=MIN‐
12 UTES] [--no-splay] [--now] [--debug] [--help]
13 Deprecated usage
16 rhsmcertd [certInterval autoattachInterval]
18
21 Red Hat provides content updates and support by issuing subscriptions
22 for its products. These subscriptions are applied to systems
23 (machines). Red Hat Subscription Manager is a tool which allows admin‐
24 istrators to manage those subscriptions by registering systems and peo‐
25 ple, applying subscriptions, and viewing subscriptions.
26 When subscriptions are applied to a system or when new subscriptions
29 are available, the subscription management system issues that machine
30 an X.509 certificate which contains all of the details of that sub‐
31 scription. The rhsmcertd process runs periodically to check for changes
32 in the subscriptions available to a machine by updating the entitlement
33 certificates installed on the machine and by installing new entitlement
34 certificates as they're available.
35 At a defined interval, the process checks with the subscription manage‐
38 ment service to see if any new subscriptions are available to the sys‐
39 tem. If there are, it pulls in the associated subscription certifi‐
40 cates. If any subscriptions have expired and new subscriptions are
41 available, then the rhsmcertd process will automatically request those
42 subscriptions. By default, the initial auto-attach is delayed by a ran‐
43 dom amount of seconds from zero to the autoAttachInterval. The initial
44 cert check is delayed by a random amount of seconds from zero to
45 certCheckInterval.
46 This rhsmcertd process invokes the rhsmcertd-worker.py script to per‐
49 form the certificate add and update operations.
50 Both the certificate interval and the auto-attach interval are config‐
53 urable and can be reset through the rhsmcertd daemon itself or by edit‐
54 ing the Subscription Manager /etc/rhsm/rhsm.conf file.
55 rhsmcertd is started with the machine, by default, and is always run‐
58 ning in the background.
59
62 -h, --help
63 Prints the specific help information for the given command.
64 -d, --debug
67 Records more verbose output to the /var/log/rhsm/rhsmcertd.log
68 log file.
69 -n, --now
72 Runs the rhsmcertd scan immediately, rather than waiting for the
73 next scheduled interval.
74 -c, --cert-check-interval=MINUTES
77 Resets the interval for checking for new subscription certifi‐
78 cates. This value is in minutes. The default is 240, or four
79 hours. This interval is in effect until the daemon restarts, and
80 then the values in the /etc/rhsm/rhsm.conf file are used (unless
81 the argument is passed again).
82 -i, --auto-attach-interval=MINUTES
85 Resets the interval for checking for and replacing expired sub‐
86 scriptions. This value is in minutes. The default is 1440, or 24
87 hours. This interval is in effect until the daemon restarts, and
88 then the values in the /etc/rhsm/rhsm.conf file are used (unless
89 the argument is passed again).
90 -s, --no-splay
93 If present this option disables the splay feature entirely. When
94 not present the value of "splay" from the /etc/rhsm/rhsm.conf
95 file is used to determine whether the splay feature is on ("1")
96 or off ("0").
97
100 NOTE Be sure to stop the running rhsmcertd daemon before making any
101 configuration changes, or the new configuration is not applied.
102 RESETTING THE CERTIFICATE SCAN INTERVAL
105 service rhsmcertd stop
106 rhsmcertd --cert-check-interval=240
107 RUNNING CERTIFICATE AND HEALING SCANS IMMEDIATELY
110 Normally, the certificate and auto-attach scans are run periodically,
111 on a schedule defined in the rhsmcertd configuration. The scans can be
112 run immediately -- which is useful if an administrator knows that there
113 are new subscriptions available -- and then the scans resume their
114 schedules.
115 service rhsmcertd stop
116 rhsmcertd -n
117 DEPRECATED USAGE
120 rhsmcertd used to allow the certificate and auto-attach intervals to be
121 reset simply by passing two integers as arguments.
122 rhsmcertd certInterval autoAttachInterval
124 For example:
126 service rhsmcertd stop
127 rhsmcertd 180 480
128 This usage is still allowed, but it is deprecated and not recommended.
130
133 * /usr/share/rhsm/certmgr.py
134 * /etc/rhsm/rhsm.conf
136 * /var/log/rhsm/rhsmcertd.log
138
141 This daemon is part of Red Hat Subscription Manager. To file bugs
142 against this daemon, go to https://bugzilla.redhat.com, and select Red
143 Hat > Red Hat Enterprise Linux > subscription-manager.
144
148 Deon Lackey, <dlackey@redhat.com> and Jeff Ortel, <jortel@redhat.com>.
149 rhsmcertd was written by Jeff Ortel.
150
153 Copyright (c) 2010-2012 Red Hat, Inc. This is licensed under the GNU
154 General Public License, version 2 (GPLv2). A copy of this license is
155 available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
156 rhsmcertd(8)