Reference Guide

242 Lifecycle Controller Web Services Interface Guide for Linux
<p: IPAddress>ShareIP</p:IPAddress>
</p:exportbootcertificate_INPUT>
OUTPUT:
<n1:ExportBootCertificate_OUTPUT>
<n1:Message>The SecureBoot Certificate Export operation is successfully
completed</n1:Message>
<n1:MessageID>SWC9011</n1:MessageID>
<n1:ReturnValue>0</n1:ReturnValue>
</n1:ExportBootCertificate_OUTPUT>
27.5 Delete Secure boot Certificate
The Dell BIOS and Boot Management Profile describes the secure boot configuration.
DeleteBootCertificate method used to delete the secure boot certificate stored in iDRAC.
Invoke DeleteBootCertificate() with the following parameters and syntax:
CertificateType: It Specifies the Certificate Type.
0 – ALL, 1 = PK, 2 = KeK, 3=DB, 4 = DBX.
CertificateSubType: It specifies the Certificate sub type.
1 = Certificate, 2 = SHA256, 3 = SHA384, 4 = SHA512.
CertificateIdentifier: Unique identifier of the certificate.
EXAMPLE:
wsman invoke -a DeleteBootCertificate
"http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/root/dcim/DCIM_BiosCertServ
ice?SystemCreationClassName=DCIM_ComputerSystem,CreationClassName=DCIM_BiosCer
tService,SystemName=DCIM:ComputerSystem,Name=DCIM:BiosCertService"
-h $IPADDRESS -V -v -c dummy.cert -P 443
-u $USERNAME -p $PASSWORD
-J delete_boot_cert.xml -j utf-8 -y basic
The input file delete_boot_cert.xml is shown below:
<p:Deletebootcertificate_INPUT
xmlns:p="http://schemas.dmtf.org/wbem/wscim/1/cimschema/2/root/dcim/DCIM_BIOSC
ertService">
<p: Certificatetype>0</p: Certificatetype >
</p:Deletebootcertificate_INPUT>
OUTPUT:
<n1:DeleteBootCertificate_OUTPUT>
<n1:Message>The SecureBoot Certificate Delete operation is successfully
scheduled. Restart the host server for the changes to take
effect.</n1:Message>
<n1:MessageID>SWC9012</n1:MessageID>
<n1:ReturnValue>0</n1:ReturnValue>
</n1:DeleteBootCertificate_OUTPUT>
27.6 Reset Secure boot Certificate
The Dell BIOS and Boot Management Profile describes the secure boot configuration.
ResetBootCertificate method used to reset the secure boot certificate stored in iDRAC, mean it will copy
all the certificate from standard mode to custom mode.