Users Guide

Uploading server certificate
After generating a CSR, you can upload the signed SSL server certificate to the iDRAC firmware. iDRAC must be reset to apply
the certificate. iDRAC accepts only X509, Base 64 encoded Web server certificates. SHA-2 certificates are also supported.
CAUTION: During reset, iDRAC is not available for a few minutes.
Uploading server certificate using web interface
To upload the SSL server certificate:
1. In the iDRAC Web interface, go to iDRAC Settings > Connectivity > SSL > SSL certificate, select Upload Server
Certificate and click Next.
The Certificate Upload page is displayed.
2. Under File Path, click Browse and select the certificate on the management station.
3. Click Apply.
The SSL server certificate is uploaded to iDRAC.
4. A pop-up message is displayed asking you to reset iDRAC immediately or at a later time. Click Reset iDRAC or Reset
iDRAC Later as required.
iDRAC resets and the new certificate is applied. The iDRAC is not available for a few minutes during the reset.
NOTE: You must reset iDRAC to apply the new certificate. Until iDRAC is reset, the existing certificate is active.
Uploading server certificate using RACADM
To upload the SSL server certificate, use the sslcertupload command. For more information, see the iDRAC RACADM CLI
Guide available at https://www.dell.com/idracmanuals.
If the CSR is generated outside of iDRAC with a private key available, then to upload the certificate to iDRAC:
1. Send the CSR to a well-known root CA. CA signs the CSR and the CSR becomes a valid certificate.
2. Upload the private key using the remote racadm sslkeyupload command.
3. Upload the signed certificate to iDRAC using the remote racadm sslcertupload command.
The new certificate is uploaded iDRAC. A message is displayed asking you to reset iDRAC.
4. Run the racadm racreset command to reset iDRAC.
iDRAC resets and the new certificate is applied. The iDRAC is not available for a few minutes during the reset.
NOTE: You must reset iDRAC to apply the new certificate. Until iDRAC is reset, the existing certificate is active.
Viewing server certificate
You can view the SSL server certificate that is currently being used in iDRAC.
Viewing server certificate using web interface
In the iDRAC Web interface, go to iDRAC Settings > Services > Web Server > SSL certificate. The SSL page displays the
SSL server certificate that is currently in use at the top of the page.
Viewing server certificate using RACADM
To view the SSL server certificate, use the sslcertview command.
For more information, see the iDRAC RACADM CLI Guide available at https://www.dell.com/idracmanuals.
Uploading custom signing certificate
You can upload a custom signing certificate to sign the SSL certificate. SHA-2 certificates are also supported.
108
Configuring iDRAC