remotectl - Man Page

Remote Access Configuration


remotectl {COMMAND} [Options...]


The remotectl program will configure remote access to the system. Currently it manages cockpit's SSL certificate.



Manage Cockpit's SSL certificate. If used without options will check if cockpit has a valid certificate without making any changes.

--ensure Ensure that a certificate exists and can be loaded. If none exists, create a 0-self-signed.cert certificate, using sscg[1] (if available) or openssl[2]. That self-signed default certificate will be automatically renewed when it expires.

--user username The unix user that should own the certificate. Only takes effect if used with --ensure.

--group groupname The unix group that should read the certificate. Only takes effect if used with --ensure.

If any additional arguments are given, they are treated as files that should be combined to create a certificate file. If the combined files validate, they will be saved in the appropriate location using the name of the first file given with the extension changed to .cert. For example:

remotectl certificate server.pem chain.pem key.pem

will result in server.cert. If server.cert already exists it will be overwritten.



Show help options.


Print verbose messages about the task


Please send bug reports to either the distribution bug tracker or the upstream bug tracker[3].


Cockpit has been written by many contributors[4].

See Also



  1. sscg
  2. openssl
  3. upstream bug tracker
  4. contributors


03/31/2021 cockpit