4.7 Start and Enable OCLM

Start OCLM only after Operator CA configuration, CMP identity files, and trust files are in place.

sudo systemctl daemon-reload
sudo systemctl start oclm-service
sudo systemctl status --no-pager oclm-service

If the service starts successfully and configuration is final for the site, enable the service for future boots.

sudo systemctl enable oclm-service

Validate that OCLM is listening on TCP 8989:

sudo ss -ltnp | grep ':8989'