Setup Guide

ManualsBrandsDell ManualsConverged InfrastructureSystems Management Solution Resources

Table Of Contents

1 Getting Started
- 1.1 What are Server Configuration Profiles?
- 1.2 Important Terms and Acronyms
- 1.3 CSIOR
- 1.4 SCP Export
- 1.5 SCP Import
- 1.6 SCP Import Preview
- 1.7 Jobs
- 1.8 iDRAC Lifecycle Logs
- 1.9 SCP Import / Preview Configuration Results
- 1.10 Available Interfaces
2 Template
- 2.1 Structure
- 2.2 XML Layout
- 2.3 JSON Layout
- 2.4 Golden Template (One to Many)
  - 2.4.1 Recommendations
  - 2.4.2 Active Directory Example
- 2.5 General Compatibility
3 SCP Export
- 3.1 Selective Export
- 3.2 Read Only Attributes
- 3.3 Include Password Hashes
  - 3.3.1 iDRAC User Passwords
  - 3.3.2 BIOS Password SHAs
- 3.4 Export Type - Clone and Replace
  - 3.4.1 Clone and Replace with passwords
  - 3.4.2 Clone and Replace with storage devices
- 3.5 Include Custom Telemetry
- 3.6 Available Interfaces
4 SCP Import
- 4.1 Host Reboot
  - 4.1.1 What will trigger a reboot?
- 4.2 Shutdown Type
- 4.3 End Host Power State
- 4.4 Dependencies
- 4.5 Backwards Compatibility
- 4.6 Selective Import
- 4.7 Available Interfaces
5 SCP Import Preview
- 5.1 Available Interfaces
6 iDRAC Configuration
- 6.1 Template Example
- 6.2 Creating and configuring an iDRAC User
- 6.3 Clearing an iDRAC User
- 6.4 SSHPublicKey
- 6.5 Certificates
- 6.6 Password Settings
- 6.7 AutoUpdate
7 LifecycleController
8 EventFilters
9 RAID / Storage Configuration and Operations
- 9.1 Create and initialize a virtual disk
- 9.2 RAIDresetConfig
- 9.3 RAIDdedicatedSpare
- 9.4 Cryptographic Erase
10 BIOS Configuration
- 10.1 Workload profiles
- 10.2 F1 / F2 Error Prompt
- 10.3 Changing the Boot Order
- 10.4 Enable or disable a boot order entry
- 10.5 System and setup passwords
- 10.6 PXE (Preboot Execution Environment)
11 NIC / FiberChannel / InfiniBand Configuration
- 11.1 LegacyBootProto and PXE
- 11.2 VirtualizationMode
- 11.3 InfiniBand modes
12 SupportAssist Operations
- 12.1 Registration
- 12.2 Configuration
13 RepositoryUpdates
- 13.1 Workflow
14 iDRAC Direct (SCP via USB)
- 14.1 Setup
- 14.2 Execution
15 OS Deployment
- 15.1 Attributes
- 15.2 Example
- 15.3 OS Deployment via USB
16 Telemetry Operations
- 16.1 Example
- 16.2 Custom Metric Report Definitions
- 16.3 Troubleshooting
17 Secure Enterprise Key Management Operations
- 17.1 Prerequisites
- 17.2 Example XML
- 17.3 Enabling SEKM settings on the iDRAC
- 17.4 Enable SEKM on a PERC device with a locked RAID volume
18 Auto Config – DHCP Provisioning
19 Troubleshooting
- 19.1 Configuration results and LCL
- 19.2 Known Limitations
- 19.3 Common Issues
20 Additional Resources
- 20.1 User’s Guides, Release Notes, API Guides
- 20.2 White Papers
  - 20.2.1 Using Server Configuration Profiles to Deploy Operating Systems to Dell EMC PowerEdge Servers:
  - 20.2.2 Server cloning by using Server Configuration Profiles on PowerEdge servers:
- 20.3 Default, Clone & Replace Tables

Server Configuration Profiles: User’s Guide

30 Server Configuration Profiles: Reference Guide | 456

<Attribute Name="SecurityCertificate.1#CertData">-----BEGIN CERTIFICATE-----

MIIDazCCAlOgAwIBAgIQd3Kt+V8JUYdGdoqfwI4pJDANBgkqhkiG9w0BAQsFADBI

MRUwEwYKCZImiZPyLGQBGRYFbG9jYWwxFDASBgoJkiaJk/IsZAEZFgRla21zMRkw

FwYDVQQDExBla21zLUVLTVMtUkNBLUNBMB4XDTE5MDMxMzE2NDAwNFoXDTI0MDMx

MzE2NTAwNFowSDEVMBMGCgmSJomT8ixkARkWBWxvY2FsMRQwEgYKCZImiZPyLGQB

GRYEZWttczEZMBcGA1UEAxMQZWttcy1FS01TLVJDQS1DQTCCASIwDQYJKoZIhvcN

AQEBBQADggEPADCCAQoCggEBAKVcwkh6Iz8FIXBQXHK931SB0abutzsBjB/zdwoP

zoYZUmsBUl16oNsD31/pLHi1rR9K4+VRLizkPmcdipc/u04VxrOeDTX8/1XlWc2V

r4F9vngLKz6Uo0+BYaCKu3A0gCdfT9/sJYDv1T+PE64h2CnQqnspsRPvtbNgpOQG

NnQy5wQuDYK/6Ri4h6xBF7VSwUsY/qiO/zBqRXlCLrPO1GtrHqG8aNzQpBjPAb13

tTwFrua9FgRL6xtr6ZpSaPMxGhkceAfT4s299915ehyrLvyRfYM05TPkgYkGlEif

8yvXVaoO2tEUkCAomFdpdXAraW1CuaosfMUfOk5Z49jr/LUCAwEAAaNRME8wCwYD

VR0PBAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFFdRsjlhMKU7cz0E

I89BTtLtaPGOMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEBCwUAA4IBAQBn

dzOBezSW0P01loC6S82sIIkT4Ls87Pp6VhTjVPc01ybTNVpYS6yKlWVbi7CCuh9j

O7bZbvs45mpvCBmCCsRl4opUmwMJi57qCPjRRdOWqZCrHDh80LJDSR5EM2175fd2

yRarDwDsSUp4DDfYJFWWMqv3TiRQPGAizoidJokjXFjO6Y5ZKFSl9ps0+uiQPo3G

ytUTam6xjBHO+eH2hpZiNMU4FR/c4pB4cnXYY+s28JTvBAhKtYmJhs1IPsz+s4iu

N3m41Or+6qmIvsFl2FnQa8NEOqXO18H+Npp9gZwT1NNDn/ZhH3JAZm0Wi3QtKLhJ

dvYaLy2hqa1PcWvQmS5G

-----END CERTIFICATE-----</Attribute>

<Attribute Name="SecurityCertificate.1#CertType">KMS_SERVER_CA</Attribute>

In the example above, the CertType indicates that this is a Key Management System (KMS) Server Certificate

Authority (CA). The CertData field contains the actual data for the certificate. The iDRAC uses the CertType

attribute to determine how to interpret the data.

The available CertTypes are:

• KMS_SERVER_CA

• SEKM_SSL_CERT

• RSYSLOG_1

• RSYSLOG_2

• DEL_AUTH_HTTPS_1

• DEL_AUTH_HTTPS_2

Types ending with _1 or _2 refer to the instance of the certificate. There can be 2 instances of RSys Log and

Delegated Authorization HTTPs certificates.

The successful installation of certificates via SCP can be confirmed via configuration results.

racadm>>lclog viewconfigresult -j JID_581182121065

SeqNumber = 5963

FQDD = iDRAC.Embedded.1

Job Name = Import Configuration

DisplayValue = Certificate Data

Name = SecurityCertificate.1#CertData