This is the documentation for the 20.08 version. Looking for the documentation of the latest version? Have a look here.

Updates and Packages

TNSR™ software updates are available to download over the Internet using Linux package management tools (RPM, yum). The settings required to communicate with the software repository containing TNSR updates are preconfigured on TNSR. Connections to the Netgate TNSR repository must be authenticated using a valid signed client certificate.


TNSR Home+Lab installations cannot be updated. Reinstall with TNSR Business or install a new version of TNSR Home+Lab.


All versions of TNSR, including Home+Lab, can update the operating system even without the TNSR update certificate in place. Only TNSR-related packages require authentication to update.

This guide explains how to obtain and install the required client certificate on a TNSR instance.


Portions of this process are not final and may change.

Commands must be executed on the TNSR instance to generate an X.509 certificate signing request. The request must then be submitted to Netgate for signing. Once the request has been signed and a certificate has been generated, the certificate must be downloaded and installed in TNSR.


While it is possible to create the certificate outside of TNSR and import it afterward, this guide only demonstrates using TNSR directly. See Public Key Infrastructure for more details about creating and importing certificates.

At a high level, the steps involved in the process can be summarized as: