Enable Satellite servers to synchronize content over a network using certificates (such as organization debug certificates or ueber certs) instead of requiring admin user credentials.

Problem Statement

Currently, configuring a Satellite to synchronize content over a network requires creating an upstream user with admin privileges or specific permissions (view_organizations, view_products, export_content, view_lifecycle_environments, view_content_views). This approach has security concerns as it enables administrators outside of the upstream server organization to potentially make changes to the server.

Solution

Implement certificate-based authentication for inter-satellite content synchronization that:

• Uses organization debug certificates or ueber certs for authentication
• Grants access to upstream server content without requiring admin credentials
• Minimizes security risks by avoiding the need to share privileged credentials

Business Impact

High - High-level administrators may not be able to provide admin access to distribute content, blocking critical content synchronization workflows.

Related Issues