CLI Guide

Table 10. Details of the bioscert subcommand (continued)
● Import KEK (Hash Type SHA-256) from a CIFS share to the embedded iDRAC
racadm bioscert import -t 1 -k 1 -f kek_cert.der -l //192.168.2.140/
licshare -u admin -p passwd
● Import KEK certificate from a NFS share to the embedded iDRAC
racadm bioscert import -t 1 -k 0 -f kek_cert.der -l 192.168.2.14:/share
● Import KEK certificate from a local share using Local RACADM
racadm bioscert import -t 1 -k 0 -f kek_cert.der
● Import KEK certificate from a local share using remote RACADM
racadm -r 10.94.161.119 -u root -p calvin bioscert import -t 1 -k 0 -f
kek_cert.der
● To delete an installed KEK Secure Boot Certificate
racadm bioscert delete -t 3 -k 0 -v
416e3e4a6722a534afba9040b6d6a69cc313f1e48e7959f57bf248d543d00245
● To delete an installed DBX Secure Boot Certificate of HASH type SHA-256
racadm bioscert delete -t 3 -k 1 -v
416e3e4a6722a534afba9040b6d6a69cc313f1e48e7959f57bf248d543d00245
● To delete all the installed KEK Secure Boot Certificates
racadm bioscert delete --all
● To restore the installed KEK Secure Boot Certificates
racadm bioscert restore -t 1
● To restore all the installed Secure Boot Certificates
racadm bioscert restore --all
biosscan
Table 11. Details of the biosscan subcommand
Description Allows iDRAC to scan the BIOS on scheduled intervals or as requested by the user.
Synopsis To schedule BIOS scanning
racadm biosscan -s <Start Time Type>
Input
● -s— Specifies the type of schedule for BIOS scan.
○ 0—Never schedule for BIOS scan and deletes existing schedules
○ 1—Schedule now
○ 2—Schedule daily
○ 3—Schedule weekly
○ 4—Schedule monthly
○ 5—Schedule yearly
Example
● To perform the BIOS Scan immediately:
racadm biosscan -s 1
RACADM Subcommand Details 37