
Input
• -g — Generates a new CSR.
• -s — Returns the status of a CSR generation process (generation in progress, active, or none).
• -f — Specifies the filename of the location, <filename>, where the CSR is downloaded.
NOTE: If the -f option is not specified, the filename defaults to sslcsr in your current directory.
Output If no options are specified, a CSR is generated and downloaded to the local file system as sslcsr by
default. The -g option cannot be used with the -s option, and the -f option can only be used with
the -g option.
The sslcsrgen -s subcommand returns one of the following status codes:
• CSR was generated successfully.
• CSR does not exist.
Example
racadm sslcsrgen -s
or
racadm sslcsrgen -g -f c:\csr\csrtest.txt
NOTE: Before a CSR can be generated, the CSR fields must be configured in the RACADM cfgRacSecurity
group. For example:
racadm config -g cfgRacSecurity -o cfgRacSecCsrCommonName MyCompany
NOTE: In Telnet/SSH console, you can only generate and not download the CSR file.
sslkeyupload
Description Uploads SSL key from the client to iDRAC.
To run this subcommand, you must have the Configure iDRACpermission.
Synopsis
racadm sslkeyupload -t <type> -f <filename>
Input
• -t — Specifies the key to upload.
– 1=SSL key used to generate the server certificate
• -f — Specifies the filename of the SSL key that must be uploaded.
Output Returns 0 when successful and nonzero number when unsuccessful.
Example
racadm sslkeyupload -t 1 -f c:\sslkey.txt
sslresetcfg
Description Restores the web-server certificate to factory default and restarts web-server. The certificate takes
effect 30 seconds after the command is entered.
To run this subcommand, for CMC you must have the Chassis Configuration Administrator privilege.
For iDRAC, you must have the Configure iDRAC privilege.
Synopsis
racadm sslresetcfg
132
Comentarios a estos manuales