Users Guide

108 Configuring iDRAC6 Enterprise Using the Web Interface
signed certificate, you can use iDRAC6 Web interface to generate a
Certificate Signing Request (CSR) with your company’s information. You
can then submit the generated CSR to a CA such as VeriSign or Thawte.
Certificate Signing Request (CSR)
A CSR is a digital request to a Certificate Authority (CA) for a secure server
certificate. Secure server certificates allow clients of the server to trust the
identity of the server and to negotiate an encrypted session with the server.
After the CA receives a CSR, they review and verify the information the CSR
contains. If the applicant meets the CA’s security standards, the CA issues a
digitally-signed certificate that uniquely identifies that applicant for
transactions over networks and on the Internet.
After the CA approves the CSR and sends the certificate, upload the
certificate to iDRAC6 firmware. The CSR information stored on iDRAC6
firmware must match the information contained in the certificate, that is, the
certificate must have been generated in response to the CSR created by
iDRAC6.
Accessing the SSL Main Menu
1 Click System  iDRAC Settings  Network/Security tab.
2 Click SSL to open the SSL screen.
Table 5-15 describes the options available when generating a CSR.
Table 5-15. SSL Main Menu Options
Field Description
Generate a New
Certificate Signing
Request (CSR)
Select the option and click Next to open the Generate
Certificate Signing Request (CSR) screen. See
"Generating a New Certificate Signing Request" on
page 109 for more information.
NOTE: Each new CSR overwrites any previous CSR data
stored in the firmware. The information in the CSR should
match the information in the certificate. Otherwise, iDRAC6
will not accept the certificate.