Updates and Packages¶

TNSR software updates are available to download over the Internet using Linux package management tools (e.g. apt). The settings required to communicate with the software repository containing TNSR updates are preconfigured on TNSR. Connections to the Netgate TNSR repository must be authenticated using a valid signed client certificate.

Warning

Former TNSR Home+Lab installations can be updated in-place by purchasing a TNSR Business subscription and installing a signed update certificate.

Note

Administrators can update the operating system and base OS packages with or without a TNSR update certificate in place. Only TNSR-related packages require certificate authentication to update.

This guide explains how to obtain and install the required client certificate on a TNSR instance.

Warning

Portions of this process are not final and may change.

Commands must be executed on the TNSR instance to generate an X.509 certificate signing request. The request must then be submitted to Netgate for signing. Once the request has been signed and a certificate has been generated, the certificate must be downloaded and installed in TNSR.

Note

While it is possible to create the certificate outside of TNSR and import it afterward, this guide only demonstrates using TNSR directly. See Public Key Infrastructure for more details about creating and importing certificates.

At a high level, the steps involved in the process can be summarized as: