Tip

This is the documentation for the v21.03 version. Looking for the documentation of the latest version? Have a look here.

Updates and Packages

TNSR software updates are available to download over the Internet using Linux package management tools (RPM, yum). The settings required to communicate with the software repository containing TNSR updates are preconfigured on TNSR. Connections to the Netgate TNSR repository must be authenticated using a valid signed client certificate.

Warning

TNSR Home+Lab installations can be updated in-place by purchasing a TNSR Business subscription and installing a signed update certificate.

If a subscription isn’t necessary at this time, install the newest version of TNSR Home+Lab software after registering for the newest version of TNSR software, and then migrate any configuration settings.

Note

All versions of TNSR, including Home+Lab, can update the operating system even without the TNSR update certificate in place. Only TNSR-related packages require authentication to update.

This guide explains how to obtain and install the required client certificate on a TNSR instance.

Warning

Portions of this process are not final and may change.

Commands must be executed on the TNSR instance to generate an X.509 certificate signing request. The request must then be submitted to Netgate for signing. Once the request has been signed and a certificate has been generated, the certificate must be downloaded and installed in TNSR.

Note

While it is possible to create the certificate outside of TNSR and import it afterward, this guide only demonstrates using TNSR directly. See Public Key Infrastructure for more details about creating and importing certificates.

At a high level, the steps involved in the process can be summarized as:

• Generate a Key Pair
• Generate a Certificate Signing Request
• Submit the Certificate Signing Request
• Retrieve the signed certificate
• Install the certificate
• Package Management
• Updating TNSR