Getting error "This Organization's subscription manifest has expired. Please import a new manifest"
Environment
- Red Hat Satellite 6.x
Issue
-
While navigating to Subscription page on the Red Hat Satellite WebUI, getting error:
This Organization's subscription manifest has expired. Please import a new manifest. -
Does Satellite 6 manifests expire?
Resolution
-
Re-import the same manifest from Red Hat Hybrid Cloud console and upload it to Red Hat Satellite server by following the below steps:
1. Follow the procedure described in [Chapter 2. Exporting and downloading a manifest](https://docs.redhat.com/en/documentation/subscription_central/1-latest/html-single/creating_and_managing_manifests_for_a_connected_satellite_server/index#proc-exporting-downloading-manifest-satellite-connected) to export and download the manifest. 2. Follow the procedure in [2.1. Importing a Red Hat subscription manifest into Satellite Server](https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/managing_content/managing_red_hat_subscriptions_content-management#Importing_a_Red_Hat_Subscription_Manifest_into_Server_content-management) to import the manifest into the Satellite server. **NOTE:** It should not be attempted to delete the manifest from the **Red Hat Satellite** GUI by clicking on the `Delete` button on the Manifest page or else the client hosts will get unsubscribed from the Red Hat Satellite server.
For more KB articles/solutions related to Red Hat Satellite 6.x Manifest Issues, please refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x Manifest Issues
Root Cause
Please refer to How and when does a Red Hat Satellite manifest certificate expire?
Diagnostic Steps
-
Using the following command to identify the ID of the target organization for which you want to check the manifest expiry date:
# hammer organization listNote down the organization ID.
-
Replace <ORG_ID> in the following one-liner with the organization ID obtained from step (1) above, then run the command on the Satellite server:
# foreman-rake console << EORAKE org = Organization.find(<ORG_ID>) File.write('/tmp/cert_upstream.pem', org.owner_details['upstreamConsumer']['idCert']['cert']) EORAKE -
Run the following command to display the issuance and expiry date of the manifest:
# rct cat-cert /tmp/cert_upstream.pem | grep -i DateThe output will look like:
Start Date: 2023-08-14 08:52:54+00:00 End Date: 2024-08-14 09:52:54+00:00The
End Dateis the manifest's expiry date.
This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.