Setup Guide

ManualsBrandsDell ManualsConverged InfrastructureSystems Management Solution Resources

Table Of Contents

1 Getting Started
- 1.1 What are Server Configuration Profiles?
- 1.2 Important Terms and Acronyms
- 1.3 CSIOR
- 1.4 SCP Export
- 1.5 SCP Import
- 1.6 SCP Import Preview
- 1.7 Jobs
- 1.8 iDRAC Lifecycle Logs
- 1.9 SCP Import / Preview Configuration Results
- 1.10 Available Interfaces
2 Template
- 2.1 Structure
- 2.2 XML Layout
- 2.3 JSON Layout
- 2.4 Golden Template (One to Many)
  - 2.4.1 Recommendations
  - 2.4.2 Active Directory Example
- 2.5 General Compatibility
3 SCP Export
- 3.1 Selective Export
- 3.2 Read Only Attributes
- 3.3 Include Password Hashes
  - 3.3.1 iDRAC User Passwords
  - 3.3.2 BIOS Password SHAs
- 3.4 Export Type - Clone and Replace
  - 3.4.1 Clone and Replace with passwords
  - 3.4.2 Clone and Replace with storage devices
- 3.5 Include Custom Telemetry
- 3.6 Available Interfaces
4 SCP Import
- 4.1 Host Reboot
  - 4.1.1 What will trigger a reboot?
- 4.2 Shutdown Type
- 4.3 End Host Power State
- 4.4 Dependencies
- 4.5 Backwards Compatibility
- 4.6 Selective Import
- 4.7 Available Interfaces
5 SCP Import Preview
- 5.1 Available Interfaces
6 iDRAC Configuration
- 6.1 Template Example
- 6.2 Creating and configuring an iDRAC User
- 6.3 Clearing an iDRAC User
- 6.4 SSHPublicKey
- 6.5 Certificates
- 6.6 Password Settings
- 6.7 AutoUpdate
7 LifecycleController
8 EventFilters
9 RAID / Storage Configuration and Operations
- 9.1 Create and initialize a virtual disk
- 9.2 RAIDresetConfig
- 9.3 RAIDdedicatedSpare
- 9.4 Cryptographic Erase
10 BIOS Configuration
- 10.1 Workload profiles
- 10.2 F1 / F2 Error Prompt
- 10.3 Changing the Boot Order
- 10.4 Enable or disable a boot order entry
- 10.5 System and setup passwords
- 10.6 PXE (Preboot Execution Environment)
11 NIC / FiberChannel / InfiniBand Configuration
- 11.1 LegacyBootProto and PXE
- 11.2 VirtualizationMode
- 11.3 InfiniBand modes
12 SupportAssist Operations
- 12.1 Registration
- 12.2 Configuration
13 RepositoryUpdates
- 13.1 Workflow
14 iDRAC Direct (SCP via USB)
- 14.1 Setup
- 14.2 Execution
15 OS Deployment
- 15.1 Attributes
- 15.2 Example
- 15.3 OS Deployment via USB
16 Telemetry Operations
- 16.1 Example
- 16.2 Custom Metric Report Definitions
- 16.3 Troubleshooting
17 Secure Enterprise Key Management Operations
- 17.1 Prerequisites
- 17.2 Example XML
- 17.3 Enabling SEKM settings on the iDRAC
- 17.4 Enable SEKM on a PERC device with a locked RAID volume
18 Auto Config – DHCP Provisioning
19 Troubleshooting
- 19.1 Configuration results and LCL
- 19.2 Known Limitations
- 19.3 Common Issues
20 Additional Resources
- 20.1 User’s Guides, Release Notes, API Guides
- 20.2 White Papers
  - 20.2.1 Using Server Configuration Profiles to Deploy Operating Systems to Dell EMC PowerEdge Servers:
  - 20.2.2 Server cloning by using Server Configuration Profiles on PowerEdge servers:
- 20.3 Default, Clone & Replace Tables

Server Configuration Profiles: User’s Guide

58 Server Configuration Profiles: Reference Guide | 456

50icshUAsy5sCo5quisNLZZmJefREPxlx7ih/NtMGe5lEiZGyHIf91Ucf5L2vP6J

lYKLZL7AqvJioHSSxD8nvP7naxKmIL3d1zohV8V+8DMc1UabDLhgUek/UX+jqSQ3

cuCY6LhLAgMBAAGjggEAMIH9MB0GA1UdDgQWBBQEk+OPdA03pnzCGUBnUK5a2Z/v

hzCBzQYDVR0jBIHFMIHCgBQEk+OPdA03pnzCGUBnUK5a2Z/vh6GBpqSBozCBoDEL

MAkGA1UEBhMCVVMxDjAMBgNVBAgTBVRleGFzMRMwEQYDVQQHEwpSb3VuZCBSb2Nr

MREwDwYDVQQKEwhEZWxsIEVNQzEhMB8GA1UECxMYUHJvZHVjdCBHcm91cCBWYWxp

ZGF0aW9uMRAwDgYDVQQDEwdEZWxsIENBMSQwIgYJKoZIhvcNAQkBFhV0ZXhhc19y

b2VtZXJAZGVsbC5jb22CAQAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOC

AQEAgumRcKE3+dbYgNRNeYbvKH29B1NI0l/PIP2V6he4/rDLYgyBLqNmtvRCUvu9

DnZczchZoGIdWm0j/1gW21O8nptDM+R3olMEwNGdl+ZQNLUdMKdzKJbji8IaSxun

B4Y21uLvykGm0Ts+X2/R84RAFHgDrRrentaM2WyJ7GCT470CDdUIg7NApxm8WoSA

EQrt6RGJYQlRZTFTW12f9+2K7CifHvNnth0zLjaK+vK4bTwhaPhkbM/OO/qE1vaH

zgwN+ZaVbl+amGabZdMvQbtDRgNoS+hQ7T91kbJjPJfza4frrxDzZyhxEN2H99pt

zIto472w7hLB56tRjHfA6Vnh4w==

-----END CERTIFICATE-----</Attribute>

<Attribute Name="SecurityCertificate.1#CertType">KMS_SERVER_CA</Attribute>

<Attribute Name="SecurityCertificate.2#CertData">-----BEGIN CERTIFICATE-----

MIID2zCCAsOgAwIBAgIDAmNQMA0GCSqGSIb3DQEBCwUAMIGgMQswCQYDVQQGEwJV

UzEOMAwGA1UECBMFVGV4YXMxEzARBgNVBAcTClJvdW5kIFJvY2sxETAPBgNVBAoT

CERlbGwgRU1DMSEwHwYDVQQLExhQcm9kdWN0IEdyb3VwIFZhbGlkYXRpb24xEDAO

BgNVBAMTB0RlbGwgQ0ExJDAiBgkqhkiG9w0BCQEWFXRleGFzX3JvZW1lckBkZWxs

LmNvbTAeFw0xOTA1MTYxODMyMzlaFw0yOTAyMTIxODMyMzlaMIGPMQswCQYDVQQG

EwJVUzEOMAwGA1UECAwFVGV4YXMxEzARBgNVBAcMClJvdW5kIFJvY2sxETAPBgNV

BAoMCERlbGwgRU1DMQ0wCwYDVQQLDARUZXN0MRkwFwYDVQQDDBBpZHJhY3VzZXJH

MUZXSFEyMR4wHAYJKoZIhvcNAQkBFg90ZXN0ZXJAZGVsbC5jb20wggEiMA0GCSqG

SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2WXSI3N9OEXmbCxwylhkk2g/OYyvupwg

nL5uEF4TF8+BKjc3hw1PryzK+vPMPSv7J9fX4Ropy5bjsLXL7ZUdKTYMrhSlZ/13

v7qdZkBInHJfpHTiXbKQwvaMryPedToLNTWdG0Mr+ni05Ebzx/eG+x3LJQsbkxwX

f5NQGVZNtZnYzdTCkQnwmfseBRfJSzbxTm8HpoT9KGchVsYZDpPSz54ZIRlbqRmz

wJBlcyEPq63CjFp4RxfmZW0IPOGbmmcnGy3Rd4YFBmiC75pR3Wx+J1Xzr3inyRJ2

/XWpgm4XYfGSbyQ2in6Kzwf8CA3hTdsdx20FGJ0j3EUnj1PpOOq1AgMBAAGjLTAr

MAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgeAMAsGA1UdDwQEAwIF4DANBgkq

hkiG9w0BAQsFAAOCAQEAVJdEgKMfmhjrRulC/f7SZjy6pDhLSGM5KwJjQm/8fSjm

lfEyVTbD/eedWo6U6cah2uZrY0jD6SN17CAGMU/J6r4jkhZMrmB/cr3HXiCDQd/x

ReqmjVWOCJDb/tStOkWAS3VFuRZzXfkO83Kp6Zzak4Ue3mwJywThklOsoyXx1XEs

esNFxcsAGL9ABcuGUShpdKtYYwWo98og6P1w1aiWRnaZQ6HP4To3tfmnQ9QKUeZ1

i3QsZ5Q6l86dBZjaaoKSWp5y1fph2ciV//SoOtPhNHXYP5H/3AUQoEqNw7lSX2H/

w9TJtElsc2htmbp6bHudrVIlB80lehk6IE4UxAEO/w==

-----END CERTIFICATE-----</Attribute>

</Component>

17.3 Enabling SEKM settings on the iDRAC

The two prerequisites can be found in SecurityCertificate.1#CertType, SecurityCertificate.1#CertData for the

Server CA (KMS_SERVER_CA), and SecurityCertificate.2#CertType, SecurityCertificate.2#CertData for the

CSR (SEKM_SSL_CERT).

The configuration results for the SCP Import operation will confirm the successful enablement of SEKM via

the SKEM.1#SEKMStatus attribute.