Hi,

Until now, to set up a Raft Fabric network, I had a batch in charge of registering and enrolling all the identities (admin, orderers and peers), creating the system and application channel genesis blocks.
What I'd like to do is to move the enrollment part to each component (peers and orderers) when they start up so that the batch is now only in charge of the enrolling of admins and creating the genesis blocks.
But the issue is that with Raft as the genesis block must contain each orderer TLS certificate. So the orderer can't enroll itself before startup because it will need the system channel genesis block to start and I can't create this genesis block without having the TLS certificates.

So it's a vicious circle and I don't see a nice way to fix this.

Any idea of how to do that? In your cases, how did you automate this part (generation of certificates and genesis blocks creation) in a nice way?

Thanks

JG