Novell LINUX ENTERPRISE SERVER 11 - DEPLOYMENT, Руководство по развертыванию

Страница: 261 / 322

regcert=/data/inst/smt/smt-ca.cert
Interactive
Use
ask
to open a pop-up menu during installation where you can specify the
path to the certificate. Do not use this option with AutoYaST. Example:
regcert=ask
Deactivate Certificate Installation
Use
done
if either the certificate will be installed by an add-on product, or if
you are using a certificate issued by an official certificate authority. Example:
regcert=done
WARNING: Beware of Typing Errors
Make sure the values you enter are correct. If
regurl
has not been specified
correctly, the registration of the update source will fail.
If a wrong value for
regcert
has been entered, you will be prompted for a
local path to the certificate. In case
regcert
is not specified at all, it will default
to
http:// FQDN /smt.crt
with
FQDN
being the name of the SMT server.
WARNING: Change of SMT Server Certificate
If the SMT server gets a new certificate from a new and untrusted CA, the
clients need to fetch the new CA certificate file. This is done automatically with
the registration process but only if a URL was used at installation time to fetch
the certificate, or if the
regcert
parameter was omitted and thus, the default
URL is used. If the certificate was loaded using any other method, such as
floppy or local path, the CA certificate will not be updated.
16.2 Configuring Clients Using
AutoYaST Profile
Clients can be configured to register with SMT server via AutoYaST profile. For gen-
eral information about creating AutoYaST profiles and preparing automatic installation,
Subscription Management 249