CLI Guide

Table 133. Details of sslcsrgen (continued)

Output If no options are specified, a CSR is generated and downloaded to

the local file system as sslcsr by default. The -g option cannot be

used with the -s option, and the -f option can only be used with

the -g option.

The sslcsrgen -s subcommand returns one of the following status

codes:

• CSR was generated successfully.

• CSR does not exist.

Example

racadm sslcsrgen -s

racadm sslcsrgen -g -f c:\csr\csrtest.txt

NOTE: Before a CSR can be generated, the CSR fields must be configured in the RACADM cfgRacSecurity group. For

example: racadm config -g cfgRacSecurity -o cfgRacSecCsrCommonName MyCompany

NOTE: In telnet/ssh console, you can only generate and not download the CSR file.

NOTE: The duration for generating a CSR key depends on the length specified for the key.

sslresetcfg

Table 134. Details of sslresetcfg

Description Restores the web-server certificate to factory default and restarts

web-server. The certificate takes effect 30 seconds after the

command is entered.

To use this subcommand, you must have the Chassis

Configuration Administrator privilege for CMC.

Synopsis

racadm sslresetcfg

Example

$ racadm sslresetcfg

Certificate generated successfully and

webserver restarted.

sslsshresetcfg

Description

Generates self-signed SSH SSL keys.

To run this command, you must have the Chassis Configuration Administrator privilege.

Synopsis

racadm sslsshresetcfg

NOTE: For IOMs, you can only configure SNMPv2 community strings.

RACADM Subcommand Details 115