If the CSR is generated outside of iDRAC with a private key available, then to upload the certificate to iDRAC:
1.
Send the CSR to a well-known root CA. CA signs the CSR and the CSR becomes a valid certificate.
2.
Upload the private key using the remote racadm
sslkeyupload
command.
3.
Upload the signed certificate to iDRAC using the remote racadm
sslcertupload
command.
iDRAC reboots and the newly uploaded certificate takes effect.
Viewing Server Certificate
You can view the SSL server certificate that is currently being used in iDRAC7.
Related Links
Viewing Server Certificate Using Web Interface
In the iDRAC7 Web interface, go to Overview
→
iDRAC Settings
→
Network
→
SSL. The SSL page displays the SSL
server certificate that is currently in use at the top of the page.
Viewing Server Certificate Using RACADM
To view the SSL server certificate, use the sslcertview command. For more information, see the
RACADM Command
Line Reference Guide for iDRAC7 and CMC
available at dell.com/support/manuals.
Uploading Custom Signing Certificate
You can upload a custom signing certificate to sign the SSL certificate. SHA-2 certificates are also supported.
Uploading Custom Signing Certificate Using Web Interface
To upload the custom signing certificate using iDRAC7 Web interface:
1.
Go to Overview
→
iDRAC Settings
→
Network
→
SSL.
The SSL page is displayed.
2.
Under Custom SSL Certificate Signing Certificate, select Upload Custom SSL Certificate Signing Certificate and
click Next.
The Upload Custom SSL Certificate Signing Certificate page is displayed.
3.
Click Browse and select the custom SSL certificate signing certificate file.
Only Public-Key Cryptography Standards #12 (PKCS #12) compliant certificate is supported.
4.
If the certificate is password protected, in the PKCS#12 Password field, enter the password.
5.
Click Apply.
The certificate is uploaded to iDRAC and iDRAC resets. The iDRAC is not available for a few minutes during the
reset.
Uploading Custom SSL Certificate Signing Certificate Using RACADM
To upload the custom SSL certificate signing certificate using RACADM, use the sslcertupload subcommand. For more
information, see the
RACADM Command Line Reference Guide for iDRAC7 and CMC
available at dell.com/support/
manuals.
Downloading Custom SSL Certificate Signing Certificate
You can download the custom signing certificate using iDRAC7 Web interface or RACADM.
86
Содержание iDRAC7
Страница 1: ...Integrated Dell Remote Access Controller 7 iDRAC7 Version 1 50 50 User s Guide ...
Страница 14: ...14 ...
Страница 36: ...36 ...
Страница 66: ...66 ...
Страница 92: ...92 ...
Страница 144: ...144 ...
Страница 165: ...165 ...
Страница 166: ...166 ...
Страница 172: ...172 ...
Страница 184: ...184 ...
Страница 196: ...196 ...
Страница 208: ...208 ...
Страница 216: ...216 ...
Страница 220: ...220 ...
Страница 234: ...234 ...
Страница 248: ...248 ...