Skip to content

Commit 8c89a73

Browse files
authored
Update file references from sb_cert.cer to sb_cert.der
1 parent d9b75be commit 8c89a73

1 file changed

Lines changed: 11 additions & 5 deletions

File tree

  • content/storage/ibm-fusion-access-san

content/storage/ibm-fusion-access-san/index.md

Lines changed: 11 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,6 +43,12 @@ Documentation:
4343

4444
Here are the commands executed on RHEL 10.
4545

46+
* Install required packages
47+
48+
```shell
49+
dnf install pesign openssl kernel-devel mokutil keyutils
50+
```
51+
4652
* Create public and private key
4753

4854
```shell
@@ -53,13 +59,13 @@ Here are the commands executed on RHEL 10.
5359
--nickname 'Custom Secure Boot key'
5460
```
5561

56-
* Export public key to `sb_cert.cer`
62+
* Export public key to `sb_cert.der`
5763

5864
```shell
5965
certutil -d /etc/pki/pesign \
6066
-n 'Custom Secure Boot key' \
6167
-Lr \
62-
> sb_cert.cer
68+
> sb_cert.der
6369
```
6470

6571
* Export private key to `sb_cert.p12`
@@ -89,7 +95,7 @@ In my virtual lab environment running on KVM/libvirt with [hetzner-ocp4](https:/
8995
* Copy the public key to the VM via SSH
9096

9197
```shell
92-
scp sb_cert.cer core@compute-X:~/
98+
scp sb_cert.der core@compute-X:~/
9399
```
94100

95101
* Check & import the key via `mokutil` on the node:
@@ -100,7 +106,7 @@ In my virtual lab environment running on KVM/libvirt with [hetzner-ocp4](https:/
100106
Subject: CN=Red Hat Secure Boot CA 8/emailAddress=secalert@redhat.com
101107
102108
# Set a simple password; it will be needed later in the UEFI shell.
103-
% sudo mokutil --import sb_cert.cer
109+
% sudo mokutil --import sb_cert.der
104110
input password:
105111
input password again:
106112
```
@@ -234,7 +240,7 @@ Create the key pair in the earlier section [If Secure Boot is enabled: Create an
234240
```shell
235241
oc create secret generic secureboot-signing-key-pub \
236242
-n ibm-fusion-access \
237-
--from-file=cert=sb_cert.cer
243+
--from-file=cert=sb_cert.der
238244
```
239245

240246
### Optional: Configure external registry for kernel module container image

0 commit comments

Comments
 (0)