diff --git a/datacenter/ucp/2.0/guides/content-trust/index.md b/datacenter/ucp/2.0/guides/content-trust/index.md index 576d73a154..e43ecb22e2 100644 --- a/datacenter/ucp/2.0/guides/content-trust/index.md +++ b/datacenter/ucp/2.0/guides/content-trust/index.md @@ -160,6 +160,12 @@ trusted repository. Valid delegation roles take the form of `targets/`, where `` does not include further slashes. +You will need to add the key to at least one other delegation in order for UCP to honor the signed content: + +```bash +$ notary delegation add -p // targets/devops --all-paths user1.pem user2.pem +``` + Before delegation role users can publish signed content with Notary or Docker Content Trust, they must import the private key associated with the user certificate: