Add the CA Certificate for New Registry

Procedure

  1. Copy the certificate of the CA that signed the new registries’ certificate to the active controller.

  2. Install the CA certificate as a Trusted CA for StarlingX. This is an example with the filename ca.crt containing the CA certificate:

system ca-certificate-install ca.crt
+-------------+--------------------------------------+
| Property    | Value                                |
+-------------+--------------------------------------+
| uuid        | da397ac8-24c2-474c-98fd-5afade15aea2 |
| certtype    | ssl_ca                               |
| signature   | ssl_ca_10872957681153283553          |
| start_date  | 2020-09-03 21:56:16+00:00            |
| expiry_date | 2021-06-30 21:56:16+00:00            |
+-------------+--------------------------------------+

To verify a new a registry and reapply the application, see Check New Registry and Reapply Application.