Skip to content

Commit

Permalink
Update cadeploy.md
Browse files Browse the repository at this point in the history
fix:  command registers the organization CA bootstrap identity rcaadmin with password rcaadminpw with the TLS CA.

Signed-off-by: kanta.sasaki <[email protected]>
  • Loading branch information
atomic-kanta-sasaki authored Jul 1, 2024
1 parent 493a48a commit bbfd856
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docs/source/deployguide/cadeploy.md
Original file line number Diff line number Diff line change
Expand Up @@ -230,7 +230,7 @@ The following diagram is a conceptual summary of the steps you perform to create
The TLS CA server was started with a bootstrap admin identity (tlsadmin) which has full admin privileges for the server. One of the key abilities of the admin is the ability to register new identities. Each node in the organization (orderers, peers, organization CAs) that will transact on the network needs to be registered with the TLS CA, so that each node can then enroll to get their TLS certificate. Therefore, before we set up the organization CA, we need to use the TLS CA to register and enroll the organization CA bootstrap identity to get its TLS certificate and private key. The organization CA bootstrap admin user will be named `rcaadmin` in the next step, therefore we will generate the TLS identity for the organization CA using the same name. The following command registers the organization CA bootstrap identity `rcaadmin` with password `rcaadminpw` with the TLS CA.

```
./fabric-ca-client register -d --id.name rcaadmin --id.secret rcaadminpw -u https://my-machine.example.com:7054 --tls.certfiles tls-root-cert/tls-ca-cert.pem --mspdir tls-ca/tlsadmin/msp
./fabric-ca-client register -d --id.name rcaadmin --id.secret rcaadminpw -u https://tls-admin:tls-adminpw@my-machine.example.com:7054 --tls.certfiles tls-root-cert/tls-ca-cert.pem --mspdir tls-ca/tlsadmin/msp
```

Notice that the `--mspdir` flag on the command points to the location of TLS CA admin msp certificates that we generated in the previous step. This crypto material is required to be able to register nodes with the TLS CA.
Expand Down

0 comments on commit bbfd856

Please sign in to comment.