This seems to be working now with rpms from git 97855d37beebcc600aeb3c9b8627ae484c2f8f67.
Verifying Version... [root@jsefler-onprem-5server ~]# rpm -q subscription-manager subscription-manager-0.95.5.8-1.git.4.6f97c81.el5 Here is how i tested it... 1. I put only the 37060.pem product cert into /etc/pki/product from my onpremises candlpin server. 2. I killed all rhsm* processes 3. in first terminal, run # /usr/libexec/rhsmd -k -d ^^^ note no output yet in first terminal 4. in second terminal, run # rhsm-icon -d ** (rhsm-icon:14938): DEBUG: Running entitlement status check ** (rhsm-icon:14938): DEBUG: in callback, received value: 1 ** (rhsm-icon:14938): DEBUG: Icon already visible ^^^ VERIFIED this output in second terminal and the icon displays System has one or more certificates that are not valid ['37060'] [] Validity status changed, fire signal signal fired! code is 1 ^^^ also VERIFIED this output in first terminal 5. in third terminal, run # subscription-manager register --username=testuser1 --password=password --autosubscribe 68bfffa0-c5ba-4e6e-923b-e0e6ff6c8735 jsefler-onprem-5server.usersys.redhat.com Installed Products: Awesome OS Server Bits - Subscribed [root@jsefler-onprem-5server ~]# ^^^ VERIFIED icon goes away System entitlements appear valid Validity status changed, fire signal signal fired! code is 0 ^^^ VERIFIED this output in first terminal ** (rhsm-icon:14996): DEBUG: in callback, received value: 0 ^^^ VERIFIED this output in second terminal 6. in third terminal, run # subscription-manager unsubscribe --all ^^^ VERIFIED icon returns System has one or more certificates that are not valid ['37060'] [] Validity status changed, fire signal signal fired! code is 1 ^^^ VERIFIED this output in first terminal ** (rhsm-icon:14996): DEBUG: in callback, received value: 1 ^^^ VERIFIED this output in second terminal DBUS messages are now being sent by rhsmd and received by the rhsm-icon