Reference Guide

NOTE: This subcommand is only supported on the remote interfaces.

Synopsis

racadm sslcertupload -t <type> -f <filename> -p <passphrase> [-k

<key file>]

racadm sslcertupload -f <filename> -t <type>

Input

• -t <type> — Specifies the type of certificate to upload. The type of certificate must

be:

– 1 — server certificate

– 2 — Active Directory

– 5 — Kerberos Keytab

– 6 — Server certificate and key

– 3 — Public Key Cryptography Standards (PKCS) format

• -f — Specifies the source filename in the local file system of the certificate

uploaded.

• -k — Specifies optional source filename for private key when using type 6.

• -p — Pass phrase for decrypting the PKCS12 file uploaded.

• -k — Filename of the private key file while using type 6. The private key is generated

when the CSR is generated. If the CSR is generated on another server, then it is

necessary to upload the private key with the certificate.

Output

racadm -r 192.168.0 -u root -p xxx sslcertupload -t 2 -f cert.txt

Certificate successfully uploaded to the RAC.

Example

• Uploading a server certificate.

racadm -r 192.168.0 -u root -p xxx sslcertupload -t 1 -f

cert.txt

• Upload web server certificate and key

racadm -r 192.168.0 -u root -p xxx sslcertupload -t 6 -f

cert.txt -k key.txt

• Uploading Active Directory Certificate

racadm -r 192.168.0 -u root -p xxx sslcertupload -t 2 -f

ad_cert.txt

sslcertview

Description Displays the SSL server or CA certificate that exists on CMC.

Synopsis

racadm sslcertview -t <type> [-A]

Input

• -t — Specifies the type of certificate to view, either the CA certificate or server

certificate.

– 1=server certificate

– 2=Active Directory

• -A — Prevents printing headers or labels.