Reference Guide

Example
• Display current status of CSR operation:
racadm sslcsrgen -s
• Generate and download a CSR to local file system using remote RACADM
racadm -r 192.168.0.120 -u <username> -p <password> sslcsrgen -g -f
csrtest.txt
• Generate and download a CSR to local file system using local RACADM
racadm sslcsrgen -g -f c:\csr\csrtest.txt
• Generate a new certificate signing request for Factory Identity type
racadm sslcsrgen -g -t 2
• Display the status of the current CSR operation for Factory Identity type
racadm sslcsrgen -s -t 2
• Generate and download a CSR for Factory Identity type to local file system using remote RACADM
racadm -r 192.168.0.120 -u root -p calvin sslcsrgen -g -f csrtest.txt –t 2
• Generate and download a CSR for Factory Identity type to local file system using local RACADM
racadm sslcsrgen -g -f c:\csr\csrtest.txt -t 2
NOTE:
Before a CSR can be generated, the CSR fields must be configured in the RACADM iDRAC.Security group. For
example:
racadm set iDRAC.security.commonname MyCompany
NOTE: In Telnet or SSH console, you can only generate and not download the CSR file.
sslkeyupload
Description
Uploads SSL key from the client to iDRAC.
To run this subcommand, you must have the Server Control privilege.
Synopsis
racadm sslkeyupload -t <type> -f <filename>
Input
• -t — Specifies the key to upload. The value is:
• 1 — SSL key used to generate the server certificate.
• -f — Specifies the filename of the SSL key that must be uploaded.
Output If upload is successful, the message SSL key successfully uploaded to the RAC is displayed. if upload
is unsuccessful, error message is displayed.
Example
racadm sslkeyupload -t 1 -f c:\sslkey.txt
sslresetcfg
Description
Restores the web-server certificate to factory default and restarts web-server. The certificate takes effect 30
seconds after the command is entered.
To run this subcommand, you must have the Configure iDRAC privilege.
Synopsis
racadm sslresetcfg
114 RACADM Subcommand Details