Skip to content

nodecertutil(8) -- Manage BMC CA certificates and sign BMC certificates

SYNOPSIS

nodecertutil <var>noderange</var> <var>command</var> [args]

DESCRIPTION

nodecertutil manages the certificate authority (CA) certificates trusted by the baseboard management controllers (BMCs) of the nodes matched by <var>noderange</var>, and can sign a BMC certificate. One of the subcommands below must be supplied.

COMMANDS

  • installbmccacert <var>filename</var>: Install the CA certificate contained in <var>filename</var> onto the BMCs.

  • removebmccacert <var>id</var>: Remove the CA certificate identified by <var>id</var> from the BMCs. Use listbmccacerts to discover the identifiers.

  • listbmccacerts: List the CA certificates currently installed on the BMCs.

  • signbmccert [--days <var>days</var>] [--added-names <var>names</var>]: Sign a BMC certificate. --days is required and sets the number of days the certificate is valid for; --added-names adds additional subject alternative names to the certificate.

OPTIONS

  • -h, --help: Show help message and exit

EXAMPLES

  • List the CA certificates installed on a node's BMC: # nodecertutil n1 listbmccacerts

  • Install a CA certificate on a range of nodes: # nodecertutil n1-n4 installbmccacert /etc/confluent/myca.pem

  • Sign a BMC certificate valid for one year: # nodecertutil n1 signbmccert --days 365

SEE ALSO

nodeconfig(8), nodeattrib(8)