Dell POWEREDGE M1000E - Manual (Page 91)

CAUTION: When a new CSR is generated, it overwrites any previous CSR on CMC. If a pending CSR is overwritten
before its server certificate is granted from a certificate authority, CMC does not accept the server certificate
because the information it uses to authenticate the certificate has been lost. Take caution when generating a CSR
to prevent overwriting any pending CSR.
Generating a New Certificate Signing Request Using Web Interface
To generate a CSR using the CMC Web interface:
1. In the system tree, go to Chassis Overview, and then click Network → SSL. The SSL Main Menu is displayed.
2. Select Generate a New Certificate Signing Request (CSR) and click Next. The Generate Certificate Signing Request
(CSR) page is displayed.
3. Type a value for each CSR attribute value.
4. Click Generate. A File Download dialog box appears.
5. Save the csr.txt file to your management station or shared network. (You may also open the file at this time and
save it later.) You must later submit this file to a certificate authority.
Generating CSR Using RACADM
To generate a CSR, use the objects in cfgRacSecurityData group to specify the values and use the sslcsrgen
command to generate the CSR. For more information, see the
RACADM Command Line Reference Guide for iDRAC7 and
CMC available at dell.com/support/manuals.
Uploading Server Certificate
After generating a CSR, you can upload the signed SSL server certificate to the CMC firmware. CMC resets after the
certificate is uploaded. CMC accepts only X509, Base 64 encoded Web server certificates.
CAUTION: During the certificate upload process, CMC is not available.
Uploading Server Certificate Using CMC Web Interface
To upload a server certificate using the CMC Web interface:
1. In the system tree, go to Chassis Overview, and then click Network → SSL. The SSL Main Menu is displayed.
2. Select Upload Server Certificate Based on Generated CSR option and click Next.
3. Click Choose File and specify the certificate file.
4. Click Apply. If the certificate is invalid, an error message is displayed.
NOTE: The File Path value displays the relative file path of the certificate you are uploading. You must type the
absolute file path, which includes the full path and the complete file name and file extension.
Uploading Server Certificate Using RACADM
To upload the SSL server certificate, use the sslcertupload command. For more information, see the RACADM
Command Line Reference Guide for iDRAC7 and CMC available at dell.com/support/manuals.
Uploading Webserver Key and Certificate
You can upload a Web server key and a server certificate for the Web server key. The server certificate is issued by the
Certificate Authority (CA).
The Web server certificate is an essential component used by the SSL encryption process. It authenticates itself to an
SSL-enabled client, and allows the client to authenticate itself to the server, thereby enabling both the systems to
establish an encrypted connection.
91