Chapter 2. Installing Red Hat Insights for Red Hat Enterprise Linux (RHEL) This document provides starting points and resources for registering systems to Red Hat Insights for Red Hat Enterprise Linux. Installation of Red Hat Insights typically involves installing the Insights client, then registering systems for use with Insights. You can use different methods to register and install Insights. A registration assistant is also available to guide you through the process of registering and installing Insights. You can also use the Remote Host Configuration (RHC) tool. The installation method you use can depend on conditions such as, Whether you are connecting to Red Hat for the first time Whether you use a certain version of RHEL Whether you want to do an automated installation or manual install Other factors 2.1. Installing Red Hat Insights on Red Hat Enterprise Linux Satellite-managed hosts To install Insights on Red Hat Enterprise Linux hosts managed by Red Hat Satellite, see: Creating a Host in Red Hat Satellite Using Ansible roles to automate repetitive tasks on clients Monitoring Hosts Using Red Hat Insights 2.2. Registering and configuring Satellite Server integration with FedRAMP Before you can use Insights with your server, you need to connect your servers to the Satellite Server. The Satellite Server enables your servers to communicate with Red Hat Insights. An IP address-based allow list restricts network access to the Insights service. This ensures that only the servers and ports that you specify can connect to the Satellite Server. Note Red Hat Insights subscription services are currently not available in the FedRAMP environment. Red Hat continuously evaluates service offerings, and will announce any updates or expansions to the FedRAMP environment as they become available. Note The following requirements are in addition to existing Satellite Server connectivity requirements to the Red Hat Content Delivery Network and Red Hat Subscription Management (RHSM) for software updates. For more information about connectivity requirements, refer to How to access Red Hat Subscription Manager (RHSM) through a firewall or proxy . Prerequisites The Satellite Server must be able to connect to the domain mtls.console.stage.openshiftusgov.com , using the HTTPS protocol on port 443. You must provide a static public egress IP address (or address range) from which Satellite traffic will originate. Note Contact Red Hat Support to set up the public egress IP address. The public egress IP address is an additional IP address on the primary network interface of your server. You are logged in to the Hybrid Cloud Console ( https://console.openshiftusgov.com ) as an Organization Administrator. You have administrator ssh access to the Satellite server. You are logged in to the Satellite Server using ssh . Procedure From the main menu, navigate to Inventory > Configure Satellites . The Configure Satellites page displays. Click Generate Token to create the registration token for your organization. Copy the token. Open a terminal window on your Satellite Server and enter the following command: # hammer organization list The system returns your organization ID. Make note of it for the step. Copy the command shown in Step 3 on the Configure Satellites page. Paste it into the terminal. Substitute the organization ID for <organization_id> . # SATELLITE_RH_CLOUD_URL=https://mtls.console.openshiftusgov.com org_id=<organization_id> foreman-rake rh_cloud:hybridcloud_register The system returns a prompt for the token that you generated. Paste the generated token that you copied at the prompt and press Enter . The system returns a success message. You can now register the system with Satellite and run insights-client . Additional resources Hammer CLI Guide Client Configuration Guide for Insights with FedRAMP Installing the Satellite server in a disconnected network 2.3. Managing trusted IP addresses with an IP allowlist Before you can connect Insights to your Satellite servers, you need to configure an allowlist that contains a trusted IP address (or range of IP addresses). You can configure the allowlist in two ways: Provide the trusted IP address (or addresses) to Red Hat stateside support during onboarding. Support uses the IP addresses to configure an allowlist for Insights. This allowlist allows network traffic from your Satellite-controlled environment into Insights. To configure the allowlist, contact stateside support through ServiceNow and mention that you want to connect your satellite servers to Insights. If you have not created the allowlist during onboarding, use the IP allowlist in the Manage Satellites page in the Red Hat Hybrid Cloud Console to manually add trusted IP addresses. 2.3.1. Adding trusted IP addresses to an allowlist You can use Manage Satellites to create an allowlist, or add an IP address (or a range of IP addresses) to an existing allowlist. Adding IP addresses enables additional FedRAMP users in your organization to access the Red Hat Hybrid Cloud Console. Note Manage Satellites allows only IPv4 addresses. It does not support IPv6 addresses. To add a range of IP addresses, use CIDR notation (for example, 226.167.71.76/32). Prerequisites You have Organization Administrator permissions. You are logged in to the Hybrid Cloud Console. Procedure Click Manage Satellites . The Manage Satellites page displays. Scroll down the page to the IP Address Allowlist section at the bottom. Click Add IP Addresses . The Add IP Addresses to Allowlist dialog box displays. Type an IP address (or range of IP addresses) and click Submit . The IP addresses appear on the allowlist. 2.3.2. Removing IP addresses from the allowlist Prerequisites You have Organization Administrator permissions. You are logged in to the Hybrid Cloud Console. You have an IP allowlist configured. You have added at least one IP address (or range of IP addresses) to the allowlist. Procedure Click Manage Satellites . The Manage Satellites page displays. Scroll down the page to the IP Address Allowlist section at the bottom. Select the IP address you want to remove, and then click Remove . The Remove IP Addresses from Allowlist dialog box displays. Click Remove , and then click Submit . Additional resources For more information about the Insights onboarding process, refer to Registering and managing Satellite server integration with FedRAMP . For more information about using Manage Satellites to connect to Satellite servers, see Registering and managing Satellite server integration with FedRAMP

Commands:
hammer organization list
SATELLITE_RH_CLOUD_URL=https://mtls.console.openshiftusgov.com org_id=<organization_id> foreman-rake rh_cloud:hybridcloud_register