Red Hat SummitEste contenido no está disponible en el idioma seleccionado.
Chapter 7. Using Red Hat Subscription Manager
7.1. Understanding Red Hat Subscription Management
Red Hat Subscription Manager tracks the Red Hat products that your organization has purchased and the systems that the products are installed on. Subscription Manager establishes the relationship between the product subscriptions that are available to the system and the elements of infrastructure of your business where those subscriptions are allocated.
Red Hat subscription services have moved from Red Hat Customer Portal to Red Hat Hybrid Cloud Console, however, your technical environment might require you to perform some tasks in the Customer Portal. For example, a user with a Red Hat Satellite Server on a disconnected network will continue to use the Customer Portal to create and manage subscription manifests. Also, a connected user without a Satellite Server will use the Customer Portal to enable simple content access for their organization.
If simple content access mode is enabled for your Red Hat organization, then you do not need to attach subscriptions or manage entitlements. The simple content access mode is enabled at the organization-level for new accounts by default. For information about enabling simple content access mode for an existing organization, see Enabling simple content access with Red Hat Subscription Management
While Red Hat products are available through a GNU Public License, Red Hat supports its products through a subscription-based license. Support includes:
- Downloadable content and updates
- Access to the knowledge base
- Support for your product
Red Hat Subscription Management provides administrators with the following information:
- Which products are available to your organization
- Which products are installed on your systems
- The status of your subscriptions
Red Hat Subscription Management allows administrators to identify the relationship between their systems and the subscriptions used by those systems from two different perspectives:
- All active subscriptions for an account and which systems are consuming them
- All systems profiled within the inventory and which subscriptions they are consuming
7.1.1. Additional resources
- For information about the changes and improvements to the subscription management platform, see Transition of Red Hat’s subscription services to console.redhat.com
- For more information about simple content access, see Getting Started with Simple Content Access.
- For information about how to register your RHEL system, see Getting Started with RHEL System Registration.
- For information about managing user roles for services hosted on the Hybrid Cloud Console, see User Access Configuration Guide for Role-based Access Control (RBAC).
7.2. Understanding your workflow for subscribing with Red Hat products
Before you can register your system to Red Hat, you need an active subscription. Subscriptions can be purchased through the Red Hat Store or by contacting Sales directly. With a registered system and an active subscription, you can do the following tasks:
- View or manage any systems for your account in the Systems inventory on the Red Hat Hybrid Cloud Console
- View or manage any subscriptions for your account in the Subscription Inventory on the Red Hat Hybrid Cloud Console
- Download software packages and updates from the content delivery network for as long as the subscription is active
Each element in the subscription service must be uniquely identified. This allows true relationships to be established between the system, the products, and the subscriptions. The subscription service generates and installs these certificates on the local system:
- An identity certificate for the system. This certificate is created when the system is registered. The system uses it to authenticate to the subscription service and periodically check for updates.
- A product certificate for each Red Hat product installed on the system. This certificate is installed on the system along with the product. It identifies the product, but it is not unique to the system.
- A subscription certificate for each subscription associated with the system. This certificate includes information about the subscription from the inventory.
Subscription management delivers better information and offers administrators better control over their infrastructures.
7.3. Tools and applications available for Red Hat Subscription Management
Red Hat Subscription services have moved from the Customer Portal to Red Hat Hybrid Cloud Console, however, your technical environment might require you to perform some tasks in the Customer Portal. For example, a user with a Red Hat Satellite Server on a disconnected network will continue to use the Customer Portal to create and manage subscription manifests.
All Red Hat Enterprise Linux subscriptions automatically include the following tools for managing the subscription configuration:
- Red Hat Subscription Manager client tools to manage local systems on the command line
- Subscription services on the Red Hat Hybrid Cloud Console to manage systems and subscriptions for your account
- Red Hat Satellite as an on-premise solution for systems that may not regularly check in
The diversity of tools allows administrators to create a workflow that fits both the business and infrastructure demands of their organization.
7.4. Red Hat Subscription Manager
Red Hat Subscription Manager tracks and displays what subscriptions are available to the local system and what subscriptions have been consumed by the local system. It works as a conduit back to the subscription service to synchronize changes, such as available product quantities or subscription expiration dates.
The Subscription Manager includes the following components:
- A UI-based client to manage the local machine
- A CLI client, which can be used with other applications or in automation scripts
These tools allow authorized users to perform tasks directly related to managing subscriptions, such as registering a system to Red Hat and updating the certificates required for authentication. Some minor operations, such as updating system facts, are available to help show and track available subscriptions.
You must have root privileges to run the Subscription Manager CLI tool because of the nature of the changes to the system. However, Subscription Manager connects to the subscription service as a user account for the subscription service.
The Subscription Manager is part of the firstboot process for configuring content and updates, but you can register the system at any time through the Subscription Manager UI or CLI. New subscriptions, new products, and updates can be viewed and applied to a system through the Subscription Manager tools.
7.4.1. Additional resources
- For information about how to register your RHEL system, see Getting Started with RHEL System Registration.
- For information about how to view and manage your subscriptions and their details, see Viewing and managing your subscription inventory on the Hybrid Cloud Console
7.4.2. Launching Red Hat Subscription Manager
You can run Red Hat Subscription Manager from the Red Hat Enterprise Linux UI. The following instructions show you how to run Subscription Manager from the RHEL UI based on the release version of your system:
- In RHEL 9, click Activities > Show Applications.
- In RHEL 8, click Activities > Show All Programs.
- In RHEL 7, click System Tools > Administration.
7.5. Viewing subscriptions with Red Hat Subscription Manager
To manage subscriptions, administrators need to know the following information:
- What subscriptions are available to the system
- What subscriptions are being used by the system
You can view your subscriptions and their details in the following ways:
-
From the command line interface (CLI) using the
subscription-managercommand - From the Subscription Inventory page on the Hybrid Cloud Console.
The following table shows options that you can use to manage your subscriptions with the subscription-manager command.
7.5.1. subscription-manager list Options
| Command | Description |
| --installed (or nothing) | Lists all of the installed products on the system. If no option is given with 'list', it is the same as using the '--installed' argument. |
| --consumed | Lists all of the subscriptions associated with the system. |
| --available[-all] | Using '--available' alone lists all of the compatible, active subscriptions for the system. Using '--available --all' lists all options, even ones not compatible with the system. |
| --ondate=YYYY-MM-DD | Shows subscriptions which are active and available on the specified date. This is only used with the '--available' option. If this is not used, then the command uses the current date. |
| --installed | Lists all of the products that are installed on the system (and whether they have a subscription) and it lists all of the product subscriptions which are associated with the system (and whether those products are installed). |
7.5.2. Example 'list' showing subscriptions consumed
7.5.3. Example 'list' showing all available subscriptions
7.5.4. Additional resources
- For information about viewing your subscription inventory with the Hybrid Cloud Console GUI, see Viewing and managing your subscription inventory on the Hybrid Cloud Console
7.6. Using system purpose with Red Hat Subscription Manager
You use system purpose to record the intended use of a Red Hat Enterprise Linux (RHEL) system. Setting system purpose allows you to specify system attributes, such as the role, service level agreement, and usage. The following values are available for each system purpose attribute by default.
Role
- Red Hat Enterprise Linux Server
- Red Hat Enterprise Linux Workstation
- Red Hat Enterprise Linux Compute Node
Service Level Agreement
- Premium
- Standard
- Self-Support
Usage
- Production
- Development/Test
- Disaster Recovery
Configuring system purpose offers the following benefits:
- In-depth system-level information for system administrators and business operations
- Reduced overhead when determining why a system was procured and its intended purpose
You can set system purpose data in any of the following ways:
- During activation key creation
- During image creation
- During installation using the Connect to Red Hat screen to register your system
- During installation using the syspurpose Kickstart command
- After installation using the subscription-manager CLI tool
7.6.1. Listing available values for system purpose attributes
As the root user, you can enter the subscription-manager syspurpose command and the role, usage, service-level, or addons subcommand with the --list option to list available values for all system purpose attributes. Listing system purpose values for an unregistered system requires you to enter additional information on the command line.
The following examples show how to list the available system purposes values for the role attribute for registered and unregistered systems.
When the system is registered, enter the following command:
subscription-manager syspurpose role --list
[root@localhost ~]# subscription-manager syspurpose role --list
When the system is unregistered, enter the following command with the --username, --password, --organization, and --token authentication options, as required:
subscription-manager syspurpose role --list --username=<username> --password=<password> --organization=<organization_ID> --token=<token>
[root@localhost ~]# subscription-manager syspurpose role --list --username=<username> --password=<password> --organization=<organization_ID> --token=<token>
where: The --username option specifies the name of a user with organization administrator authority in your Red Hat account. The --password option specifies the associated password. The --organization option specifies the organization ID number. The --token option specifies the token of the virt-who service account.
Specifying the organization ID is only required if you have multiple organizations and need to specify a particular organization.
Specifying the token is only required if you have configured virt-who to connect to OpenShift Virtualization.
When you enter the command on a registered system or on an unregistered system with authentication options, the expected output is the list of available values for the role attribute:
System purpose addons are specific to your organization and do not appear in the list of available values. If you try to list available system purpose addons with the --list option, then subscription-manager displays a warning message. For example:
subscription-manager syspurpose addons --list There are no available values for the system purpose "addons" from the available subscriptions in this organization.
# subscription-manager syspurpose addons --list
There are no available values for the system purpose "addons" from the available subscriptions in this organization.7.6.2. Setting custom values for system purpose attributes
If the value you want to set is not included in the list of valid values for the account, you can enter a custom system purpose value with the --set option. To set a custom value, you must enter the command on a registered system or enter the command with authentication options on an unregistered system.
The following examples show how to set a custom value of “foo” for the system purpose role attribute on registered and unregistered systems.
When the system is registered, enter the following command:
subscription-manager syspurpose role --set=”foo”
[root@localhost ~]# subscription-manager syspurpose role --set=”foo”
When the system is unregistered, enter the following command with the --username, --password, --org, and --token authentication options, as required:
subscription-manager syspurpose role --set=”foo” --username=<username> --password=<password> --organization=<organization_ID> --token=<token>
[root@localhost ~]# subscription-manager syspurpose role --set=”foo” --username=<username> --password=<password> --organization=<organization_ID> --token=<token>
where: The --username option specifies the name of a user with organization administrator authority in your Red Hat account. The --password option specifies the associated password. The --org option specifies the organization ID number. The --token option specifies the token of the virt-who service account.
Specifying the organization ID is only required if you have multiple organizations and need to specify a particular organization.
Specifying the token is only required if you have configured virt-who to connect to OpenShift Virtualization.
When you set a custom value on a registered system or on an unregistered system with authentication options, the expected output displays a warning message because the custom value is considered invalid. However, the output also displays a confirmation message because subscription-manager sets the custom value despite the warning.
Warning: Provided value "foo" is not included in the list of valid values - Red Hat Enterprise Linux Workstation - Red Hat Enterprise Linux Server - Red Hat Enterprise Linux Compute Node role set to "foo".
Warning: Provided value "foo" is not included in the list of valid values
- Red Hat Enterprise Linux Workstation
- Red Hat Enterprise Linux Server
- Red Hat Enterprise Linux Compute Node
role set to "foo".Subscription Manager only outputs the warning message if the system is registered or if you enter authentication credentials on an unregistered system. If your system is unregistered and you do not enter authentication options, Subscription Manager sets the custom value without displaying the warning message.
7.7. Enabling simple content access with Red Hat Subscription Management
If you use a Red Hat Satellite Server, then you can enable simple content access in the following ways:
- On a subscription manifest on the Red Hat Hybrid Cloud Console Manifests page.
- On a Satellite organization using the Satellite graphical user interface.
The simple content access setting on the Satellite organization supersedes the settings on the manifest.
If you do not use a Satellite Server, then you can enable simple content access through the Red Hat Customer Portal.
After simple content access is enabled, you can complete additional post-enablement steps related to activation key, host group, and host configuration through the Hybrid Cloud Console.
Enabling simple content access without a Red Hat Satellite Server
When you enable simple content access, you change the content access mode. You stop using the traditional mode, where you must attach a subscription to a system as a prerequisite of gaining access to content. You start using a new mode, where you can consume content regardless of the presence of an attached subscription.
Prerequisites
- The Organization Administrator role for the organization
Procedure
To enable simple content access for the directly connected systems in Red Hat Subscription Manager without a Satellite Server, complete the following steps:
- Log in to the Red Hat Customer Portal.
- On the Overview page, set the Simple content access for Red Hat switch to Enabled.
After you complete these steps, simple content access is enabled for all current and newly registered systems. Current systems will download the required simple content access certification information the next time that they check in to the subscription management services.
Additional resources
- For information about how to enable simple content access for a Satellite-supported system, see Setting the simple content access mode from Red Hat Hybrid Cloud Console.
7.8. Subscriptions Services notifications on the Hybrid Cloud Console
In the Hybrid Cloud Console, you can configure event notifications for Errata and Subscriptions Usage. The notifications are only sent for registered systems that have subscriptions for the product associated with them.
Part of subscription management is tracking updates, new releases of software, and subscription usage. When updates are available, from bug fixes to new releases, you can opt in to receive event notification alerts.
7.8.1. Errata event notifications
Errata event notifications are opt-in alerts for errata related to your subscriptions. These notifications include the following options:
- Daily digest: Receive a daily summary of triggered application events that occur in a 24 hour time frame.
Instant notification: Receive an email immediately for each triggered application event. For errata alerts, instant notifications are batched and sent in 15-minute intervals.
ImportantSome services do not offer both instant notification and daily digest. If you select Instant notification for any service, aside from Subscriptions Usage, you might receive a very large number of emails.
7.8.2. Configuring Errata notifications
You can opt in to receive event notifications for Errata related to your subscriptions.
Each user in the Hybrid Cloud Console must opt in to receive email notifications about events. You can select the services from which to receive notifications and the frequency.
If you select Instant notification for any service, you might receive a very large number of emails.
Prerequisites
You are logged in to the Hybrid Cloud Console.
NoteYou cannot log in to the Hybrid Cloud Console with your email address unless your email address is the same as your Red Hat login. For more information, see Finding your login.
- A Notifications administrator or Organization Administrator has configured behavior groups to receive event notifications.
Procedure
- In the Hybrid Cloud Console, navigate to Settings > Notifications > Notification Preferences. The My Notifications page is displayed. On the My Notifications page, the available services are grouped by category, for example OpenShift, Red Hat Enterprise Linux, or Subscriptions Services.
- Select Errata in the Subscriptions Services group. A list of the available event notifications for Errata | Subscription Services is displayed.
At the top of the list, click Select all to enable all notifications for the service, or select one of the following options for each event listed:
- Daily digest: Receive a daily summary of triggered application events that occur in a 24 hour time frame.
Instant notification: Receive an email immediately for each triggered application event. For errata alerts, instant notifications are batched and sent in 15-minute intervals.
ImportantIf you select Instant notification, you might receive a very large number of emails.
Update your information and then click Save. Email notifications are delivered in the format and frequency that you selected.
NoteIf you decide to stop receiving notifications, select Deselect all or clear the boxes for the events you do not want to be notified about, and then click Save. You will no longer receive any email notifications unless you return to this screen and enable them once again.
7.8.3. Troubleshooting errata applicability
If you see applicable errata displayed in Red Hat Subscription Management but have no yum updates available, it can mean one of a couple of settings are not correct.
Procedure
- Verify that you have the proper permissions to install all available updates on the system. If you do not have the necessary permissions, contact your organization administrator.
- If you are running RHEL 5 or RHEL 6.4 or earlier, please consider upgrading your system so that you can have the most up-to-date errata and system updates.
- Force a check in and run yum update again.* If the system has not been checked in recently, you may see a discrepancy between what you see in the Customer Portal and what is actually installed on your system.
rm -f /var/lib/rhsm/packages/packages.json service rhsmcertd stop rhsmcertd --now yum update
# rm -f /var/lib/rhsm/packages/packages.json
# service rhsmcertd stop
# rhsmcertd --now
# yum updateAfter forcing your system to check in again, please wait up to four hours for the errata data on Red Hat Subscription Management to update to their correct data.
7.8.4. Subscriptions Usage event notifications
Subscriptions Usage event notifications are opt-in alerts for when your organization has exceeded your subscription threshold. This notification includes the following option:
Instant Notification is the only option for Subscription usage.
- The Subscription Usage notification alert triggers when your organization’s usage reaches 105% capacity of your subscription threshold for a product.
You will receive one notification per month for as long as your organization’s usage reaches or exceeds 105% capacity of your subscription threshold for a product.
NoteBecause the Subscription Usage notification is sent once per month, you will not receive a second notification in the same month if you make any adjustments to your account.
The notification contains the aggregate usage for the entirety of the product in your subscription, which means you will need to look at your metrics to assess the adjustments needed for your account.
Because of the aggregate calculation used for the Subscription Usage notification, you will need to review the overall metrics for your the product subscription you received the notification for to assess the adjustments needed for your account.
The Subscription Usage event notification Behavior Group is set by default to send alerts to administrators. Administrators for your organization can set additional notification integration options including Slack, Google Chat, Microsoft Teams, by creating new Behavior Groups.
- Example for Subscription Usage
The following is an example Red Hat Enterprise Linux product subscription that demonstrates the aggregate calculation that the Subscription Notification uses, and would not trigger the notification.
An organization has the following subscriptions:
-
1 RHEL subscription with Premium / Production and
1socket -
1 RHEL subscription with Standard / Development-Test and
100sockets
-
1 RHEL subscription with Premium / Production and
-
The Subscription Usage notification compares the total RHEL socket usage against
105sockets. -
Since the organization is using
100sockets of RHEL premium, they will not be notified because the sum of all subscriptions is101.
7.8.5. Configure Subscription Usage notifications
You can opt in to receive event notifications to alert you when subscription usage for your organization has exceeded your subscription threshold for a product.
The Subscription Usage notification is triggered when your organization’s subscription usage reaches 105% capacity of the subscription threshold for a product, and is sent once per month. The notifications apply to all of your organization’s subscriptions, and can be used as a reminder to make adjustments to your account as needed.
The Subscription Usage event notification Behavior Group is set by default to send alerts to administrators by email. Administrators for your organization can set additional notification integration options including Slack, Google Chat, Microsoft Teams, by creating new Behavior Groups.
Because the Subscription Usage notification is sent once per month, you will not receive a second notification in the same month if you make any adjustments to your account.
Prerequisites
You are logged in to the Hybrid Cloud Console.
NoteYou cannot log in to the Hybrid Cloud Console with your email address unless your email address is the same as your Red Hat login. For more information, see Finding your login.
Procedure
- In the Hybrid Cloud Console, navigate to Settings > Notifications > Notification Preferences. The My Notifications page is displayed. On the My Notifications page, the available services are grouped by category, for example OpenShift, Red Hat Enterprise Linux, or Subscriptions Services.
- Select Subscription Usage in the Subscriptions Services group. A list of the available event notifications for Subscription Usage | Subscription Services is displayed.
At the top of the list, click Select all to enable all notifications for the service, or for Usage at 105% select:
- Instant notification
Update your information and then click Save.
NoteIf you decide to stop receiving notifications, select Deselect all or clear the boxes for the events you do not want to be notified about, and then click Save. You will no longer receive any notifications unless you return to this screen and enable them once again.
'%20d='M201.5%20305.5c-13.8%200-24.9-11.1-24.9-24.6%200-13.8%2011.1-24.9%2024.9-24.9%2013.6%200%2024.6%2011.1%2024.6%2024.9%200%2013.6-11.1%2024.6-24.6%2024.6zM504%20256c0%20137-111%20248-248%20248S8%20393%208%20256%20119%208%20256%208s248%20111%20248%20248zm-132.3-41.2c-9.4%200-17.7%203.9-23.8%2010-22.4-15.5-52.6-25.5-86.1-26.6l17.4-78.3%2055.4%2012.5c0%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.3%2024.9-24.9s-11.1-24.9-24.9-24.9c-9.7%200-18%205.8-22.1%2013.8l-61.2-13.6c-3-.8-6.1%201.4-6.9%204.4l-19.1%2086.4c-33.2%201.4-63.1%2011.3-85.5%2026.8-6.1-6.4-14.7-10.2-24.1-10.2-34.9%200-46.3%2046.9-14.4%2062.8-1.1%205-1.7%2010.2-1.7%2015.5%200%2052.6%2059.2%2095.2%20132%2095.2%2073.1%200%20132.3-42.6%20132.3-95.2%200-5.3-.6-10.8-1.9-15.8%2031.3-16%2019.8-62.5-14.9-62.5zM302.8%20331c-18.2%2018.2-76.1%2017.9-93.6%200-2.2-2.2-6.1-2.2-8.3%200-2.5%202.5-2.5%206.4%200%208.6%2022.8%2022.8%2087.3%2022.8%20110.2%200%202.5-2.2%202.5-6.1%200-8.6-2.2-2.2-6.1-2.2-8.3%200zm7.7-75c-13.6%200-24.6%2011.1-24.6%2024.9%200%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.1%2024.9-24.6%200-13.8-11-24.9-24.9-24.9z'/%3e%3c/svg%3e){kind=small}