CLI Guide

Table 88. Details of sslcertdelete (continued)
● The iDRAC resets and may be offline temporarily.
Example Use Remote RACADM to delete the custom signing certificate.
$ racadm -r 192.168.0 -u root -p xxx sslcertdelete -t 3
sslcsrgen
Table 89. Details of sslcsrgen attribute
Description Generates and downloads a certificate signing request (CSR) file to the client’s local file system. The CSR
can be used for creating a custom SSL certificate that can be used for SSL transactions on iDRACCMC.
To run this subcommand, you must have the Configure iDRACchassis administrator privilege.
Synopsis
● racadm sslcsrgen -g
●
racadm sslcsrgen [-g] [-f <filename>]
● racadm sslcsrgen -s
Input
● -g — Generates a new CSR.
● -s — Returns the status of a CSR generation process (generation in progress, active, or none).
● -f — Specifies the filename of the location, <filename>, where the CSR is downloaded.
NOTE:
● If the -f option is not specified, the filename defaults to sslcsr in your current directory.
● The -f option is only supported on the remote interface(s).
Output If no options are specified, a CSR is generated and downloaded to the local file system as sslcsr by
default. The -g option cannot be used with the -s option, and the -f option can only be used with the -g
option.
The sslcsrgen -s subcommand returns one of the following status codes:
● CSR was generated successfully.
● CSR does not exist.
Example
● Display current status of CSR operation:
racadm sslcsrgen -s
or
racadm sslcsrgen -g -f c:\csr\csrtest.txt
● Generate and download a CSR to local file system:
racadm -r 192.168.0.120 -u root -p calvin sslcsrgen -g -f csrtest.txt
NOTE: Before a CSR can be generated, the CSR fields must be configured in the RACADM iDRAC.Security group. For
example:
racadm set iDRAC.security.commonname MyCompany
RACADM Subcommand Details 121