CLI Guide

sslcsrgen
Table 87. Details of sslcsrgen attribute
Description Generates and downloads a certicate signing request (CSR) le to the client’s local le system. The CSR can be
used for creating a custom SSL certicate that can be used for SSL transactions on iDRAC.
To run this subcommand, you must have the Congure iDRAC privilege.
Synopsis
• racadm sslcsrgen -g
• racadm sslcsrgen [-g] [-f <filename>]
• racadm sslcsrgen -s
Input
• -g — Generates a new CSR.
• -s — Returns the status of a CSR generation process (generation in progress, active, or none).
• -f — Species the lename of the location, <filename>, where the CSR is downloaded.
NOTE:
• If the -f option is not specied, the lename defaults to sslcsr in your current
directory.
• The -f option is only supported on the remote interface(s).
Output If no options are specied, a CSR is generated and downloaded to the local le system as sslcsr by default. The -g
option cannot be used with the -s option, and the -f option can only be used with the -g option.
The sslcsrgen -s subcommand returns one of the following status codes:
• CSR was generated successfully.
• CSR does not exist.
Example
• Display current status of CSR operation:
racadm sslcsrgen -s
or
racadm sslcsrgen -g -f c:\csr\csrtest.txt
• Generate and download a CSR to local le system:
racadm -r 192.168.0.120 -u root -p calvin sslcsrgen -g -f csrtest.txt
NOTE: Before a CSR can be generated, the CSR elds must be congured in the RACADM iDRAC.Security group. For
example:
racadm set iDRAC.security.commonname MyCompany
NOTE: In Telnet or SSH console, you can only generate and not download the CSR le.
sslkeyupload
Table 88. Details of sslkeyupload
Description Uploads SSL key from the client to iDRAC.
To run this subcommand, you must have the Server Control privilege.
Synopsis
racadm sslkeyupload -t <type> -f <filename>
106 RACADM Subcommand Details