Tip

This is the documentation for the 19.12 version. Looking for the documentation of the latest version? Have a look here.

Updates and Packages

TNSR™ software updates are available to download over the Internet using Linux package management tools (RPM, yum). The settings required to communicate with the software repository containing TNSR updates are preconfigured on TNSR. Connections to the Netgate TNSR repository must be authenticated using a valid signed client certificate.

Warning

Trial versions of TNSR cannot be updated. Reinstall with a full version of TNSR or install a new trial version.

Note

All versions of TNSR, including trial versions, can update the operating system packages even without the update certificate in place. Only TNSR-related packages require authentication to update.

This guide explains how to obtain and install the required client certificate on a TNSR instance.

Warning

Portions of this process are not final and may change.

Commands must be executed on the TNSR instance to generate an X.509 certificate signing request. The request must then be submitted to Netgate for signing. Once the request has been signed and a certificate has been generated, the certificate must be downloaded and installed in TNSR.

Note

While it is possible to create the certificate outside of TNSR and import it afterward, this guide only demonstrates using TNSR directly. See Public Key Infrastructure for more details about creating and importing certificates.

At a high level, the steps involved in the process can be summarized as:

• Generate a Key Pair
• Generate a Certificate Signing Request
• Submit the Certificate Signing Request
• Retrieve the signed certificate
• Install the certificate
• Package Management
• Package Information Commands
• Package Installation
• Updating TNSR