CLI Guide
Example Use Remote RACADM to delete the custom signing certificate.
$ racadm -r 192.168.0 -u root -p xxx sslcertdelete -t 3
sslcsrgen
Table 89. Details of sslcsrgen attribute
Description Generates and downloads a certificate signing request (CSR) file to the client’s local file system. The CSR can be
used for creating a custom SSL certificate that can be used for SSL transactions on iDRACCMC.
To run this subcommand, you must have the Configure iDRACchassis administrator privilege.
Synopsis
• racadm sslcsrgen -g
• racadm sslcsrgen [-g] [-f <filename>]
• racadm sslcsrgen -s
Input
• -g — Generates a new CSR.
• -s — Returns the status of a CSR generation process (generation in progress, active, or none).
• -f — Specifies the filename of the location, <filename>, where the CSR is downloaded.
NOTE:
• If the -f option is not specified, the filename defaults to sslcsr in your current directory.
• The -f option is only supported on the remote interface(s).
Output If no options are specified, a CSR is generated and downloaded to the local file system as sslcsr by default. The -
g option cannot be used with the -s option, and the -f option can only be used with the -g option.
The sslcsrgen -s subcommand returns one of the following status codes:
• CSR was generated successfully.
• CSR does not exist.
Example
• Display current status of CSR operation:
racadm sslcsrgen -s
or
racadm sslcsrgen -g -f c:\csr\csrtest.txt
• Generate and download a CSR to local file system:
racadm -r 192.168.0.120 -u root -p calvin sslcsrgen -g -f csrtest.txt
NOTE: Before a CSR can be generated, the CSR fields must be configured in the RACADM iDRAC.Security group. For
example:
racadm set iDRAC.security.commonname MyCompany
NOTE: Before a CSR can be generated, the CSR fields must be configured in the RACADM config —g
cfgracsecurity group. For example:
racadm config -g cfgracsecurity -o cfgRacSecCsrCommonName cmc-effort.cmc.com
NOTE: In Telnet or SSH console, you can only generate and not download the CSR file.
118 RACADM Subcommand Details