Reference Guide

• racadm sslcsrgen [-g] [-f <filename>]
• racadm sslcsrgen -s
Input
• -g — Generates a new CSR.
• -s — Returns the status of a CSR generation process (generation in progress, active,
or none).
• -f — Specifies the filename of the location, <filename>, where the CSR is
downloaded.
NOTE:
• If the -f option is not specified, the filename defaults to sslcsr in your current
directory.
• The -f option is only supported on the remote interface(s).
Output If no options are specified, a CSR is generated and downloaded to the local file system
as sslcsr by default. The -g option cannot be used with the -s option, and the -f option
can only be used with the -g option.
The sslcsrgen -s subcommand returns one of the following status codes:
• CSR was generated successfully.
• CSR does not exist.
Example
• Display current status of CSR operation:
racadm sslcsrgen -s
or
racadm sslcsrgen -g -f c:\csr\csrtest.txt
• Generate and download a CSR to local filesystem:
racadm -r 192.168.0.120 -u root -p calvin sslcsrgen -g -f
csrtest.txt
NOTE: Before a CSR can be generated, the CSR fields must be configured in the RACADM config
—g cfgracsecurity group. For example:
racadm config -g cfgracsecurity -o cfgRacSecCsrCommonName cmc-
effort.cmc.com
NOTE: In Telnet or SSH console, you can only generate and not download the CSR file.
sslkeyupload
Description Uploads SSL key from the client to iDRAC.
To run this subcommand, you must have the Server Control privilege.
NOTE: This option is only supported on the remote interface (s).
Synopsis
racadm sslkeyupload -t <type> -f <filename>
Input
• -t — Specifies the key to upload. The value is:
– 1 — SSL key used to generate the server certificate.
• -f — Specifies the filename of the SSL key that must be uploaded.
96