iDRAC 8: Invalid certificate is uploaded

Question

Hello,   we would like to replace the idrac certificate by an own certificate signed by our pki. So I create a private key: openssl genrsa -des3 -out idrac-private.key 2048 and a csr prompt = no default_md = sha256 req_extensions = req_ext distinguished_name = dn [ dn ] C = MyCountry ST= MyState L = MyCity O = MyCompany OU = MyDepartment CN = idrac.mydomain.com [ req_ext ] subjectAltName = @alt_names [ alt_names ] DNS.1 = idrac.mydomain.com IP.1 = 10.11.12.13 openssl req -new -config /etc/ssl/zertifikat.conf -key idrac-private.key -out idrac.csr Our PKI signed the certificate with SHA2.   Import key racadm -r 10.11.12.13 -i sslkeyupload -t 1 -f C:\service\idrac-private.key SSL key successfully uploaded to the RAC Import certificate racadm -r 10.11.12.13 -i sslcertupload -t 1 -f C:\service\idrac.crt ERROR: An invalid certificate is uploaded Whats the problem of the import and how can I import the Root-CA and the intermediate CAs?   BR Christian

christianmolecki · Accepted Answer

Hello Stefan, i got it. The certification file (doesn't matter if cer or crt) must NOT end with an empty line. correct: -----END CERTIFICATE-----EOF wrong: -----END CERTIFICATE----- EOF BR Christian

DELL-Stefan R · Answer

Hi Christian,

is this due to a wrong file type maybe?

I found this instruction on how to create and how to upload the certificate. The ending there is .cer instead of .crt - could this be the issue?

Dell PowerEdge: How to import an externally created custom certificate and private key into the iDRAC

Just an idea, maybe it helps.

Cheers
Stefan

DELL-Stefan R · Answer

Hi Christian, that's good news :) Best solution is always the own one :D Cheers for sharing! Stefan

PowerEdge Server

War dieser Beitrag hilfreich?