docs: restructur/expand offline key chapter

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

docs/offline-keys.rst

@@ -5,6 +5,14 @@ When using ``proxmox-offline-mirror`` with a corresponding Proxmox Offline Mirro
 it is possible to update subscription information for air-gapped systems, or those without access
 to the public internet.
 
+The offline mirror tool will take care of registering the subscription keys in the Proxmox shop,
+which then responds with a signed data blob, if the key is valid. The signed response can then get
+exported to a offline medium and used to set the subscription key in a Proxmox project, without any
+need for an internet connection on the host itself.
+
+Setup Offline Mirror Key
+------------------------
+
 First, add the `pom-<keyid>` mirror key using ``proxmox-offline-mirror key add-mirror-key <key>``.
 This command will activate the subscription of the mirroring system.
 
@@ -13,16 +21,41 @@ This command will activate the subscription of the mirroring system.
    Proxmox Mail Gateway hosts got standard or premium subscriptions you may be elligible for free
    offline mirroring subscription, in that case also write a mail to <sales@proxmox.com> for details.
 
-Next, gather the server IDs of the systems that shall be set up for offline keys, and add them
+Gather Server IDs
-together with the system's subscription key using ``proxmox-offline-mirror key add``. By default,
+-----------------
-this command will fetch updated subscription information from Proxmox licensing servers.
 
-You can refresh the subscription information for a single (``--key XX``) or all configured keys
+Next, gather the server IDs of the systems that shall be set up for offline keys. That information
-using ``proxmox-offline-mirror key refresh``. The subscription information is transferred to a
+is visible in the subscription panel of each host, or using the CLI like:
-medium (see below) and can then be activated on the offline system with either
+
-``proxmox-apt-repo offline-key`` or ``proxmox-apt-repo setup``. This process must be repeated at least
+- ``pvesubscription get`` for Proxmox VE
-once a year or before the nextduedate of the subscription key is reached, whichever comes first.
+
+- ``proxmox-backup-manager subscription get`` for Proxmox Backup server
+
+- ``pmgsubscription get`` for Proxmox Mail Gateway
+
+Register & Refresh Keys
+-----------------------
 
 .. note:: Configuring an active product subscription key (*as well as* a Proxmox Offline Mirror
    subscription) is required for ``proxmox-offline-mirror`` to be able to access and mirror a
    product's enterprise repository.
+
+Register the hosts with the systems's server IDs and subscription keys using
+``proxmox-offline-mirror key add``, for example:
+
+.. code-block:: console
+
+  proxmox-offline-mirror key add pve2p-12345... ABCDEF0123...
+
+By default, this command will fetch updated subscription information from Proxmox licensing servers.
+
+You can refresh the subscription information for a single (``--key XX``) or all configured keys
+using ``proxmox-offline-mirror key refresh``.
+
+Deploy Keys
+-----------
+
+The subscription information is transferred to a medium (see :ref:`sync_medium`) and can then be
+activated on the offline system with either ``proxmox-apt-repo offline-key`` or ``proxmox-apt-repo
+setup``. This process must be repeated at least once a year or before the nextduedate of the
+subscription key is reached, whichever comes first.

docs/offline-media.rst

@@ -19,6 +19,8 @@ following command:
    --verify true \
    --mountpoint /path/where/medium/is/mounted
 
+.. _sync_medium:
+
 Syncing a Medium
 ----------------