21.6. Kickstart certificates section
The %certificate section specifies the certificates that will be installed into the installer environment and the installed system. The certificate content must be in Base64 ASCII encoding format. The certificate will be written into a .pem file. You can specify the location to install the certificate and file details by using the following options:
- Options
--filenameFILENAMESpecifies the name of the certificate file.
--dirDIRSpecifies the directory where the certificate should be installed.
- Example Usage
A certificate bundle can be installed as part of a single %certificate section.
%certificate --dir /etc/pki/dns/extracted/pem/ --filename tls-ca-bundle.pem -----BEGIN CERTIFICATE----- MIIBhDCCASugAwIBAgIUO27jF1hTk3lMZ5O6yMCC87FdLZcwCgYIKoZIzj0EAwIw EzERMA8GA1UEAwwIVHJ1c3RlZENBMB4XDTI1MDQwMTEyMDAwMFoXDTM1MDMzMDEy MDAwMFowEzERMA8GA1UEAwwIVHJ1c3RlZENBMFYwEAYHKoZIzj0CAQYFK4EEAAoD QgAErPu3eF/MBcNfFh1lYWfLzQz9O5sWu/bOXMIQ5iU6GZ4H17Q5aHpDJvuBq+nv uZYucGrdKj6GSa2KoD2Rz6GxDQIDAQABozEwLzAOBgNVHQ8BAf8EBAMCAQYwDwYD VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwIDRwAwRAIg A+3Txsfb5XQxpyq1dhK1c9Wy+F0dHZBaM4lKl8Zlf50CIHZ+bE5+8q90f5oRO2/f CZtCWZZRAquC/hXoNcGxM2b7 -----END CERTIFICATE----- %end