CLI Guide

Output If no options are specified, a CSR is generated and downloaded to the local file system as sslcsr by default. The -
g option cannot be used with the -s option, and the -f option can only be used with the -g option.
The sslcsrgen -s subcommand returns one of the following status codes:
• CSR was generated successfully.
• CSR does not exist.
Example
• Display current status of CSR operation:
racadm sslcsrgen -s
or
racadm sslcsrgen -g -f c:\csr\csrtest.txt
• Generate and download a CSR to local file system:
racadm -r 192.168.0.120 -u root -p calvin sslcsrgen -g -f csrtest.txt
NOTE: Before a CSR can be generated, the CSR fields must be configured in the RACADM config —g
cfgracsecurity group. For example:
racadm config -g cfgracsecurity -o cfgRacSecCsrCommonName cmc-effort.cmc.com
NOTE: In Telnet or SSH console, you can only generate and not download the CSR file.
NOTE: The duration for generating a CSR key depends on the length specified for the key.
sslresetcfg
Table 121. Details of sslresetcfg attribute
Description Restores the web-server certificate to factory default and restarts web-server. The certificate takes effect 30
seconds after the command is entered.
To run this subcommand,you must have the Chassis Configuration Administrator privilege.
Synopsis
racadm sslresetcfg
Input N/A
Example
racadm sslresetcfg
Certificate generated successfully and webserver restarted.
sslsshresetcfg
Description
Generates self-signed SSH SSL keys.
To run this command, you must have the Chassis Configuration Administrator privilege.
Synopsis
racadm sslsshresetcfg
NOTE: For IOMs, you can only configure SNMPv2 community strings.
RACADM Subcommand Details 89