Reference Guide

For DSA keys greater than 2048, use the following racadm command. CMC
accepts RSA keys up to key strength 4096, but the recommended key strength is
1024.
racadm -r 192.168.8.14 -u root -p calvin sshpkauth -i
svcacct -k 1 -p 0xfff -f dsa_2048.pub
Synopsis
racadm sshpkauth
Input
• -i Index for the user. <svcacct> is the Index for CMC.
• -k index from 1-6 (or all for -v / -d options) to assign the PK key being
uploaded.
• -p privilege level to give to user for this PK key.
• -t Key text for the PK key.
• -r Species the controller’s remote IP address.
• -u Species the user name.
• -f le containing key text to upload.
NOTE: This option is supported only on the remote interface(s).
• -v - View privilege and key text.
• -d - Delete key and privilege for the index provided.
Examples :
• View all keys
racadm sshpkauth -i svcacct -k all -v
• Delete all keys
racadm sshpkauth -i svcacct -k all -d
• Upload key at index 2 using text option
racadm sshpkauth -i svcacct -k 2 -p 0xfff -t "key text"
• Upload key at index 1 using le upload option.
racadm sshpkauth -i svcacct -k 1 -p 0xfff -f idrsa.pub
sslcertupload
Description
Uploads a custom SSL server or CA certicate for Directory
Service from the client to iDRAC.
To use this subcommand, you must have the CMC
Conguration permission.
Synopsis
racadm sslcertupload -t <type> [-f
<filename>]
Input
• -t — Species the type of certicate to upload, either the
CA certicate for Directory Service or the server certicate.
— 1 = server certicate.
— 2 = CA certicate for Directory Service
— 5 = Kerberos keytab
— 6 = Server certicate and key
• -f — Species the le name of the certicate to be
uploaded.
• -k — Species the optional source lename for private key
when uploading type 6.
97