How to Install a Certificate and Key for the Oracle Solaris Support Repository

Language:

If you use the Oracle Solaris support repository, you must install a certificate and key. You cannot add the support repository origin to your solaris publisher unless you specify a valid certificate and key.

Get certificate and key files.
1. Open the Oracle Certificate Request site.
  In your browser, navigate to https://pkg-register.oracle.com/.
2. Sign in to the site.
  1. Select the Request Certificates link.
  2. Sign in using your My Oracle Account support credentials.
3. Find the Oracle Solaris 11 Support repository, and select the Request Access button.
4. Read the license and select the Accept button.
5. Open the Certificate Information page.
  On the Product Details page, select the "certificate page" link or navigate to https://pkg-register.oracle.com/register/certificate/.
6. Select the Download Certificate button, and save the certificate file on your system.
7. Select the Download Key button, and save the key file on your system.

Configure the solaris publisher using the new certificate and key files.

The arguments to the -c and -k options are the certificate and key files that you downloaded in the previous step, as shown in the following example:

$ pkg set-publisher -g https://pkg.oracle.com/solaris/support/ \
> -c ~/Downloads/pkg.oracle.com.certificate.pem \
> -k ~/Downloads/pkg.oracle.com.key.pem  solaris

Use the following command to show that the certificate and key are installed:

$ pkg publisher solaris
            Publisher: solaris
                Alias:
           Origin URI: https://pkg.oracle.com/solaris/support/
              SSL Key: /var/pkg/ssl/keyfile
             SSL Cert: /var/pkg/ssl/certfile
 Cert. Effective Date: July  1, 2015 04:47:13 PM
Cert. Expiration Date: July  8, 2017 04:47:13 PM
          Client UUID: client-uuid
      Catalog Updated: January 18, 2016 06:59:40 PM
              Enabled: Yes
           Properties:
                       proxied-urls = []
                       signature-policy = require-signatures

Next Steps

This process is similar for repositories of other publishers such as solarisstudio or ha-cluster.