Chapter 3. Configuring authentication

• Certificate-based authentication (CERT)

  Certificate-based authentication is the default authentication method. Certificates are generated when you register a system with Red Hat Subscription Manager (RHSM), or when Red Hat Satellite system management manages your system. The client configuration file includes authmethod=CERT by default. There are no additional configuration change requirements.

• Activation keys

  The preferred authentication method uses activation keys, along with the Organization ID, to register a system with Red Hat hosted services such as RHSM or remote host configuration (RHC).

  A list of the activation keys for your organization are on the Activation Keys page in the Red Hat Hybrid Cloud Console. You can use an activation key as an authentication token to register a system with Red Hat-hosted services, such as Red Hat Subscription Manager (RHSM) or remote host configuration (RHC). Administrators can create, edit, and delete activation keys for your organization.

• Service accounts

  Service accounts authenticate applications and services, whereas user accounts authenticate human users. Use service account authentication when:

  • An application or service needs access to specific resources.
  • The application or service needs to access resources without the need for human intervention.

  • The application or service needs to access resources from multiple locations.

    Service accounts employ a token-based authentication model for API access to cloud services. CERT and activation keys use certificate-based authentication.

    For more information about the transition from basic authentication to service accounts and instructions for updating accounts that use Basic Authentication for API access, refer to Transition of Red Hat Hybrid Cloud Console APIs from basic authentication to token-based authentication via service accounts.

    For more information about how to use service accounts, refer to Creating and Managing Service Accounts.

Additional resources

• Creating and managing activation keys in the Red Hat Hybrid Cloud Console.
• Getting started with activation keys on the Red Hat Hybrid Cloud Console
• How to switch from Basic Auth to Certificate Authentication for Red Hat Lightspeed
• Transition of Red Hat Hybrid Cloud Console APIs from basic authentication to token-based authentication via service accounts
• Creating and Managing Service Accounts

• Registering with Red Hat hosted services, such as Red Hat Subscription Manager (RHSM) or remote host configuration (rhc).
• Registering the system with the Red Hat Lightspeed client.

• Getting started with Red Hat Lightspeed

Prerequisites

• Admin login access to each system
• Activation key
• Organization ID

Additional resources

• Getting started with Red Hat Lightspeed
• For more information about the rhc client, refer to Remote host configuration and management
• Getting started with activation keys on the Red Hat Hybrid Cloud Console
• Creating and managing activation keys in the Red Hat Hybrid Cloud Console.
• Getting started with RHEL System Registration
• Getting started with RHEL System Registration
• Client configuration guide for Red Hat Lightspeed