Users Guide

● If you are using a third party CA to sign the iDRAC CSR, ensure that the third party CA supports the value UID for

User Name field in Client certificate. If it is not supported, use Common Name as the value for User Name field.

● If you are using Username and Password fields, ensure that KMS server supports those attributes.

NOTE: For KeySecure key management server,

● while creating an SSL certificate request, you must include the IP address of the key management server in Subject

Alternative Name field

● the IP address must be in the following format: IP:xxx.xxx.xxx.xxx.

Configuring services using RACADM

To enable and configure services using RACADM, use the set command with the objects in the following object groups:

● iDRAC.LocalSecurity

● iDRAC.SSH

● iDRAC.Webserver

● iDRAC.Racadm

● iDRAC.SNMP

For more information about these objects, see iDRAC RACADM CLI Guide available at https://www.dell.com/idracmanuals.

Enabling or disabling HTTPS redirection

If you do not want automatic redirection from HTTP to HTTPs due to certificate warning issue with default iDRAC certificate or

as a temporary setting for debugging purpose, you can configure iDRAC such that redirection from http port (default is 80) to

https port (default is 443) is disabled. By default, it is enabled. You have to log out and log in to iDRAC for this setting to take

effect. When you disable this feature, a warning message is displayed.

You must have Configure iDRAC privilege to enable or disable HTTPS redirection.

An event is recorded in the Lifecycle Controller log file when this feature is enabled or disabled.

To disable the HTTP to HTTPS redirection:

racadm set iDRAC.Webserver.HttpsRedirection Disabled

To enable HTTP to HTTPS redirection:

racadm set iDRAC.Webserver.HttpsRedirection Enabled

To view the status of the HTTP to HTTPS redirection:

racadm get iDRAC.Webserver.HttpsRedirection

Using VNC client to manage remote server

You can use a standard open VNC client to manage the remote server using both desktop and mobile devices such as Dell Wyse

PocketCloud. When servers in data centers stop functioning, the iDRAC or the operating system sends an alert to the console

on the management station. The console sends an email or SMS to a mobile device with required information and launches VNC

viewer application on the management station. This VNC viewer can connect to OS/Hypervisor on the server and provide

access to keyboard, video and mouse of the host server to perform the necessary remediation. Before launching the VNC client,

you must enable the VNC server and configure the VNC server settings in iDRAC such as password, VNC port number, SSL

encryption, and the time out value. You can configure these settings using iDRAC Web interface or RACADM.

NOTE: VNC feature is licensed and is available in the iDRAC Enterprise license.

You can choose from many VNC applications or Desktop clients such as the ones from RealVNC or Dell Wyse PocketCloud.

2 VNC client sessions can be activated at the same time. Second one is in Read-Only mode.

Configuring iDRAC