Skip to content

nodecertutil(8) - Manage BMC CA certificates and sign BMC certificates

SYNOPSIS

nodecertutil <noderange> <command> []

DESCRIPTION

nodecertutil manages the certificate authority (CA) certificates trusted by the baseboard management controllers (BMCs) of the nodes matched by <noderange>, and can sign a BMC certificate. One of the subcommands below must be supplied.

COMMANDS

  • installbmccacert <filename>: Install the CA certificate contained in <filename> onto the BMCs.

  • removebmccacert <id>: Remove the CA certificate identified by <id> from the BMCs. Use listbmccacerts to discover the identifiers.

  • listbmccacerts: List the CA certificates currently installed on the BMCs.

  • signbmccert [--days <days>] [--added-names <names>]: Sign a BMC certificate. --days is required and sets the number of days the certificate is valid for; --added-names adds additional subject alternative names to the certificate.

OPTIONS

  • -h, --help: Show help message and exit

EXAMPLES

  • List the CA certificates installed on a node's BMC: # nodecertutil n1 listbmccacerts

  • Install a CA certificate on a range of nodes: # nodecertutil n1-n4 installbmccacert /etc/confluent/myca.pem

  • Sign a BMC certificate valid for one year: # nodecertutil n1 signbmccert --days 365

SEE ALSO

nodeconfig(8), nodeattrib(8)