Reference Guide
• -f — Species the lename of the location, <filename>, where the CSR is downloaded.
NOTE:
• If the -f option is not specied, the lename defaults to sslcsr in your current directory.
• The -f option is only supported on the remote interface(s).
Output If no options are specied, a CSR is generated and downloaded to the local le system as sslcsr by default. The
-g option cannot be used with the -s option, and the -f option can only be used with the -g option.
The sslcsrgen -s subcommand returns one of the following status codes:
• CSR was generated successfully.
• CSR does not exist.
Example
• Display current status of CSR operation:
racadm sslcsrgen -s
or
racadm sslcsrgen -g -f c:\csr\csrtest.txt
• Generate and download a CSR to local le system:
racadm -r 192.168.0.120 -u root -p calvin sslcsrgen -g -f csrtest.txt
NOTE: Before a CSR can be generated, the CSR elds must be congured in the RACADM iDRAC.Security group.
For example:
racadm set iDRAC.security.commonname MyCompany
NOTE: In Telnet or SSH console, you can only generate and not download the CSR le.
sslkeyupload
Description
Uploads SSL key from the client to iDRAC.
To run this subcommand, you must have the Server Control privilege.
Synopsis
racadm sslkeyupload -t <type> -f <filename>
Input
• -t — Species the key to upload. The value is:
– 1 — SSL key used to generate the server certicate.
• -f — Species the lename of the SSL key that must be uploaded.
Output If upload is successful, the message SSL key successfully uploaded to the RAC is displayed. if
upload is unsuccessful, error message is displayed.
Example
racadm sslkeyupload -t 1 -f c:\sslkey.txt
sslresetcfg
Description
Restores the web-server certicate to factory default and restarts web-server. The certicate takes eect 30
seconds after the command is entered.
To run this subcommand, you must have the Congure iDRAC privilege.
Synopsis
racadm sslresetcfg
Input N/A
73