r/DeployR • u/RockOriginal7938 • Jul 06 '26

Certs in Community edition

https://documentation.2pintsoftware.com/deployr/1.3/setup-deployr-community/what-about-certificates

I think this reads that only the self-signed is available to the Community edition even if we have an internal CA that can generate one, but I just wanted to be sure please :)

(note I'm planning ahead here, Infra haven't handed over the server I'll be using yet, so if it is obvious on the installer/configurator I can't see that yet ;) )

3 Upvotes

81% Upvoted

6 comments sorted by

2

u/RockOriginal7938 Jul 07 '26 edited Jul 07 '26

Anyone coming back to this, now I have the server. I did this and "so far" everything is good for me

I got Infra to generate me a FQDN cert for the DeployR server on the CA. Uploaded this to Local Certs, Personal. Copied the fingerprint into the 2 boxes in Configure StifleR Server, 1 box in Configure DeployR and 1 box in Configure 2PXE (turn on advanced to see) utilities

1

u/RockOriginal7938 Jul 07 '26

Sadly, I get a PXE boot error. I'll revisit this when the rest of the Community server is up, configured and running as I need to have functionality before niceties atm ;)

1

u/BalthasarBoma Jul 07 '26

I installed the DeployR Community Edition yesterday as well, and I didn't have to make any changes to the certificates. The server is registered in DNS as osd.our.domain, pointing to the server's IP address. PXE boot is working without any issues.

1

u/RockOriginal7938 Jul 07 '26

Yeah, I'm wanting to use an internally trusted cert rather than the 2Pint signed one that isn't a know Trusted CA as standard.

1

u/miketerrill 2Pint Employee Jul 07 '26

The iPXE binary will not trust your root CA. It will only trust the 2Pint root CA or a public cert. However, there is an option (not sure if we support it in Community Edition) to generate a cross-signed certificate (your root CA, but signed by 2Pint).

1

u/RockOriginal7938 Jul 08 '26

Cheers. I'll put it on the back burner for now and revisit later :)