Bug 807433

Description of problem:

NOTE: analysis on this bug is inprogress, the component is likely not correct at the time of filing.

When building and deploying RHEL-6 images from katello hosted CDN content, the deployed images are missing a product cert (/etc/pki/product/69.pem).  Because this file is missing, the images are unable to download RHEL content.  My understanding is that the product cert (/etc/pki/product/69.pem) file is expected to be missing on ec2 deployments, since ec2 deployments should be using RHUI for content.  However, for private cloud deployments (RHEV or vSphere), the lack of a product cert (/etc/pki/product/69.pem) means that deployments cannot consume updates/errata from katello.

Version-Release number of selected component (if applicable):
 * katello-0.1.306-1.el6.src.rpm
 * katello-candlepin-cert-key-pair-1.0-1.src.rpm
 * katello-certs-tools-1.0.4-1.el6.src.rpm
 * katello-cli-0.1.107-1.el6.src.rpm
 * katello-configure-0.1.104-1.el6.src.rpm
 * katello-qpid-broker-key-pair-1.0-1.src.rpm
 * katello-qpid-client-key-pair-1.0-1.src.rpm
 * katello-selinux-0.1.8-1.el6.src.rpm
 * pulp-1.0.0-8.el6.src.rpm

How reproducible:
 * All RHEL6 deployments using CDN content are unable to receive content updates

Steps to Reproduce:
1. Prepare a system engine environment
   * Import access.qa.redhat.com MANIFEST
   * Sync
   * Promote content to 'Dev' environment
2. Create, promote and export a RHEL6 x86_64 system template
3. Import, build and deploy an image using a system template through Cloud Engine to RHEV or vSphere
  
Actual results:

There is no /etc/pki/product/69.pem file on installed system.  Therefore, while the system can register and subscribe to katello repos, it *cannot* consume content from them.

Expected results:

/etc/pki/product/69.pem needs to be a valid RHEL product cert

Additional info:

 * I see /mnt/sysimage/etc/pki/product/69.pem exists after the image is build/installed
 * I see /etc/pki/product/69.pem exists when the image is booted for customization
 * After deployment, /etc/pki/product/69.pem does not exist on the system

 * Somewhere between image push and deployment, the product cert is being removed.