2
0
mirror of https://github.com/xcat2/confluent.git synced 2026-08-04 08:27:01 +00:00
Files
confluent/confluent_client/doc/man/nodecertutil.ronn
T
Laurence 00a772785d doc/man: add man pages for previously undocumented client commands
These commands ship in confluent_client/bin but had no .ronn man page, so
they did not appear in the generated documentation. Add man pages matching
the existing style, with synopsis and options taken from each command's
argument parser:

- confluent2ansible: export node inventory to an Ansible hosts file
- confluent2lxca: export nodes to a Lenovo XClarity Administrator bulk import CSV
- confluent2xcat: export nodes to an xCAT stanza definition (and optional macs.csv)
- dir2img: build a FAT image from a directory for nodemedia upload
- nodecertutil: manage BMC CA certificates and sign BMC certificates
- nodegrouprename: rename a node group
- noderename: rename nodes
2026-06-28 19:22:34 +01:00

51 lines
1.5 KiB
Markdown

nodecertutil(8) -- Manage BMC CA certificates and sign BMC certificates
=======================================================================
## SYNOPSIS
`nodecertutil <noderange> <command>` [<args>]
## DESCRIPTION
`nodecertutil` manages the certificate authority (CA) certificates trusted by
the baseboard management controllers (BMCs) of the nodes matched by
`<noderange>`, and can sign a BMC certificate. One of the subcommands below
must be supplied.
## COMMANDS
* `installbmccacert <filename>`:
Install the CA certificate contained in `<filename>` onto the BMCs.
* `removebmccacert <id>`:
Remove the CA certificate identified by `<id>` from the BMCs. Use
`listbmccacerts` to discover the identifiers.
* `listbmccacerts`:
List the CA certificates currently installed on the BMCs.
* `signbmccert` [`--days <days>`] [`--added-names <names>`]:
Sign a BMC certificate. `--days` is required and sets the number of days
the certificate is valid for; `--added-names` adds additional subject
alternative names to the certificate.
## OPTIONS
* `-h`, `--help`:
Show help message and exit
## EXAMPLES
* List the CA certificates installed on a node's BMC:
`# nodecertutil n1 listbmccacerts`
* Install a CA certificate on a range of nodes:
`# nodecertutil n1-n4 installbmccacert /etc/confluent/myca.pem`
* Sign a BMC certificate valid for one year:
`# nodecertutil n1 signbmccert --days 365`
## SEE ALSO
nodeconfig(8), nodeattrib(8)