Administrator Guide

Table Of Contents
Table 11. Details of the bioscert subcommand (continued)
To view installes DBX certificate of HASH type SHA-256
racadm bioscert view -t 3 -k 1 -v
416e3e4a6722a534afba9040b6d6a69cc313f1e48e7959f57bf248d543d00245
Export the KEK certificate to a remote CIFS share
racadm bioscert export -t 1 -k 0 -v
AB:A8:F8:BD:17:1E:35:12:90:67:CD:0E:69:66:79:9B:BE:64:52:0E
-f kek_cert.der -l //10.94.161.103/share -u admin -p mypass
Export the DBX (Hash Type SHA-256) to a remote NFS share
racadm bioscert export -t 3 -k 1 -v
416e3e4a6722a534afba9040b6d6a69cc313f1e48e7959f57bf248d543d00245
-f kek_cert.der -l 192.168.2.14:/share
Export the KEK certificate to a local share using the local racadm
racadm bioscert export -t 1 -k 0 -v
AB:A8:F8:BD:17:1E:35:12:90:67:CD:0E:69:66:79:9B:BE:64:52:0E -f
kek_cert.der
Export the KEK certificate to a local share using remote racadm
racadm -r 10.94.161.119 -u root -p calvin bioscert export -t 1
-k 0 -v AB:A8:F8:BD:17:1E:35:12:90:67:CD:0E:69:66:79:9B:BE:64:52:0E -f
kek_cert.der
Import the KEK certificate from the CIFS share to the embedded iDRAC
racadm bioscert import -t 1 -k 0 -f kek_cert.der -l //10.94.161.103/
share -u admin -p mypass
Import KEK (Hash Type SHA-256) from a CIFS share to the embedded iDRAC
racadm bioscert import -t 1 -k 1 -f kek_cert.der -l //192.168.2.140/
licshare -u admin -p passwd
Import KEK certificate from a NFS share to the embedded iDRAC
racadm bioscert import -t 1 -k 0 -f kek_cert.der -l 192.168.2.14:/share
Import KEK certificate from a local share using Local RACADM
racadm bioscert import -t 1 -k 0 -f kek_cert.der
Import KEK certificate from a local share using remote RACADM
racadm -r 10.94.161.119 -u root -p calvin bioscert import -t 1 -k 0 -f
kek_cert.der
To delete an installed KEK Secure Boot Certificate
racadm bioscert delete -t 3 -k 0 -v
416e3e4a6722a534afba9040b6d6a69cc313f1e48e7959f57bf248d543d00245
To delete an installed DBX Secure Boot Certificate of HASH type SHA-256
racadm bioscert delete -t 3 -k 1 -v
416e3e4a6722a534afba9040b6d6a69cc313f1e48e7959f57bf248d543d00245
To delete all the installed KEK Secure Boot Certificates
racadm bioscert delete --all
RACADM Subcommand Details
37