User's Manual

26 Remote Services Operations
Creating Custom Trusted Root Client Certificates for the Provisioning Server
The DownloadClientCerts() method on the DCIM_LCService class can
be called to generate a custom signed Auto-Discovery client certificate. The
method takes as input a Certificate Authority generated key certificate and
related hash and password parameters. The key certificate provided is used to
sign a certificate containing the system service tag as the Common
Name(CN). The method returns a job ID that can be used to check the
success of the download, generation, and installation of the Auto-Discovery
client certificate. For examples of command line invocations using WinRM
and WSMANCLI see the Lifecycle Controller 1.4 Web Services Interface
Guide.
Providing Custom Server Certificates using WS-Management
The DownloadServerPublicKey() method on the DCIM_LCService class
can be called to transfer a Provisioning Server public key certificate. The
Provisioning Server public key can be used as part of mutual authentication
between the Auto-Discovery client and the provisioning server. The method
takes as input a Provisioning Server public key certificate and related hash and
hash type parameters. The method returns a job ID that can be used to check
the success of the processing and installation of the Provisioning Server
public key. For examples of command line invocations using see the Lifecycle
Controller 1.4 Web Services Interface Guide. DCIM Profile specification and
related MOF files are available at Dell TechCenter wiki in the DCIM
Extension Library area (delltechcenter.com/page/DCIM.Library.)
Deleting the Custom Certificates Using WS-Management
You can delete the custom certificate that is part of the managed server
supplied from the factory. Using this feature, you can wipe all the custom
signed certificates from the server, whenever required.
NOTE: This feature does not delete the factory certificates.
Custom Server Public Key Deletion using WS-Management
Use the DeleteAutoDiscoveryServerPublicKey() method on the
DCIM_LCService class to delete the CA certificate that is used to validate
or authenticate server certificates.
Custom Client Certificate Deletion using WS-Management
RemoteServices1_4.book Page 26 Thursday, October 21, 2010 5:05 PM