Description of problem: Customers using third party tools for Red Hat repository management need a reliable way to entitle those tools like JFrog Artifactory. JFrog currently instructs users to download the entitlement certificate from a system registered to the Red Hat Customer Portal[1]. The problem with this method is that the entitlement certificates are periodically revoked (for reasons like new content being added or during yum/dnf operations). What JFrog is doing is: • creating a stub host record in RHSM. • attaching a sub to it. • downloading the entitlement certificate and using that for authorization/authentication to cdn.redhat.com Expected results: Build an interface that can properly handle the lifecycle of the entitlement certificates similar to subscription-manager and Satellite's manifest system for use with third party tools. Additional info: [1] https://jfrog.com/knowledge-base/how-to-mirror-a-red-hat-network-rhn-repository/