Foreman » Installer

When specifying custom server certificates, the following options can be used:

    --foreman-server-ssl-ca /path/to/cacert.crt \
    --foreman-server-ssl-chain /path/to/cacert.crt \
    --foreman-server-ssl-cert /path/to/foreman.example.com.crt \
    --foreman-server-ssl-key /path/to/foreman.example.com.key \
    --foreman-server-ssl-crl "" \
    --foreman-websockets-ssl-cert /path/to/foreman.example.com.crt \
    --foreman-websockets-ssl-key /path/to/foreman.example.com.key \

In practice you almost always want the websockets cert + key to match the server cert + key. It would be easier for the user if this didn't need to be specified.