CLI Guide

Table 84. Details of sslcertdownload attribute (continued)
● Download Active Directory certificate:
racadm -r 192.168.0 -u root -p xxx sslcertdownload -t 2 -f ad_cert.txt
NOTE: This command is not supported in the firmware RACADM interface as it is not a file system.
sslcertupload
Table 85. Details of sslcertupload attribute
Description
Uploads a custom SSL server or CA certificate for Directory Service from the client to iDRAC.
To run this subcommand, you must have the Server Control privilege.
Synopsis
racadm sslcertupload -t <type> -f <filename> -p <passphrase> [-k <key
file>]
Input
● -t <type>—Specifies the type of certificate to upload. The type of certificate must be:
○ 1—Server Certificate
○ 2—Active Directory
○ 3—Public Key Cryptography Standards (PKCS) format
○ 4—Client Trust certificate for SSL
● -f—Specifies the source filename in the local file system of the certificate uploaded.
● -p—Pass phrase for decrypting the PKCS12 file uploaded.
● -k—Filename of the private key file while using type 6 The private key is generated when the CSR is
generated. If the CSR is generated on another server, then it is necessary to upload the private key
with the certificate.
● -k—Specifies optional source filename for private key when using type 6.
Output
racadm -r 192.168.0.2 -u root -p xxx sslcertupload -t 2 -f cert.txt
Certificate successfully uploaded to the RAC.
Example
● Uploading a server certificate.
racadm -r 192.168.0.2 -u root -p xxx sslcertupload -t 1 -f cert.txt
● Upload web server certificate and key
racadm -r 192.168.0.2 -u root -p xxx sslcertupload -t 6 -f cert.txt -k
key.txt
● Uploading Active Directory Certificate
racadm -r 192.168.0.2 -u root -p xxx sslcertupload -t 2 -f ad_cert.txt
sslcertview
Table 86. Details of sslcertview attribute
Description Displays the SSL server or CA certificate that exists on iDRACCMC.
Synopsis
racadm sslcertview -t <type> [-A]
Input
● -t — Specifies the type of certificate to view, either the CA certificate or server certificate.
118 RACADM Subcommand Details