Add the CA Certificate for New Registry

Procedure

  1. Copy the certificate of the CA that signed the new registries’ certificate to the active controller.

  2. Install the CA certificate as a Trusted CA for StarlingX. This is an example with the filename ca.crt containing the CA certificate:

system certificate-install -m ssl_ca ca.crt
WARNING: For security reasons, the original certificate,
containing the private key, will be removed,
once the private key is processed.
+-------------+--------------------------------------+
| Property    | Value                                |
+-------------+--------------------------------------+
| uuid        | da397ac8-24c2-474c-98fd-5afade15aea2 |
| certtype    | ssl_ca                               |
| signature   | ssl_ca_10872957681153283553          |
| start_date  | 2020-09-03 21:56:16+00:00            |
| expiry_date | 2021-06-30 21:56:16+00:00            |
+-------------+--------------------------------------+

To verify a new a registry and reapply the application, see Check New Registry and Reapply Application.