Reference Guide

sslcsrgen
Description Generates and downloads a CSR file to the client’s local file
system. The CSR can be used for creating a custom SSL
certificate that can be used for SSL transactions on iDRAC.
Synopsis
racadm sslcsrgen [-g] [-f <filename>]
racadm sslcsrgen -s
Input
• -g — Generates a new CSR.
• -s — Returns the status of a CSR generation process
(generation in progress, active, or none).
• -f — Specifies the filename of the location, <filename>,
where the CSR is downloaded.
NOTE: If the -f option is not specified, the filename
defaults to sslcsr in your current directory.
Output If no options are specified, a CSR is generated and downloaded
to the local file system as sslcsr by default. The -g option cannot
be used with the -s option, and the -f option can only be used
with the -g option.
The sslcsrgen -s subcommand returns one of the following
status codes:
• CSR was generated successfully.
• CSR does not exist.
Example
racadm sslcsrgen -s
or
racadm sslcsrgen -g -f c:\csr\csrtest.txt
NOTE: Before a CSR can be generated, the CSR fields must be configured in the RACADM cfgRacSecurity group. For
example: racadm config -g cfgRacSecurity -o cfgRacSecCsrCommonName MyCompany
NOTE: In telnet/ssh console, you can only generate and not download the CSR file.
NOTE: The duration for generating a CSR key depends on the length specified for the key.
sslresetcfg
Description
Restores the web-server certificate to factory default and
restarts web-server. The certificate takes effect 30 seconds
after the command is entered.
To use this subcommand, you must have the Chassis
Configuration Administrator privilege for CMC.
Synopsis
racadm sslresetcfg
Example
$ racadm sslresetcfg
Certificate generated successfully and
webserver restarted.
97