UNSOLVED

SeanDonaghey

updated

4 years ago

0

6466

December 7th, 2016 11:00

iDRAC 6/7/8 AD Authentication Setup Problem

I am trying to get AD authentication configured on my 11/12/13 gen systems and I am having issues uploading the certificate to the iDRAc's.  I generated the cert from our domain controller and exported it correctly as a Base-64 encoded X.509 certificate.  When I go to the iDRAC and try to upload the certificate, I receive an error: RAC0180: Certificate upload failed.  Unable to get local issuer certificate.

I have no idea what this means and searching for this message, do not provide me with any clues.  The certificate date is valid on it and the date/time/timezone on the iDRAC is correct also.

Anyone know what I am missing?

  • Daniel My

    12 Elder

    •

    6205 Posts

    4798

    0

    Posted December 7th, 2016 15:00

    Hello

    Update to the latest firmware on the iDRAC if you are not already up-to-date. Make sure the date and time on the iDRAC are correct.

    RAC0180

    Message
    Certificate upload failed: Unable to get local issuer certificate from the Certification Authority (CA) for confirming the CA is legitimate.
    Detailed Description
    Certificate upload failed. Unable to get local issuer certificate. The local issuer certificate is the certificate for the Certificate Authority (CA) that has signed the certificate for the Active Directory (AD) server, unless it is self signed. The iDRAC needs to verify that the CA is legitimate.
    Recommended Response Action
    Certificate has expired. Try creating a new CSR and then upload the certificate.
    Category
    Audit
    Subcategory
    RAC = RAC Event
    Severity
    Severity 3 (Informational)
    LCD Message
    No LCD message display defined.
    Initial Default
    None
    Server Administrator Event ID
    Not Applicable
    Server Administrator Trap ID
    Not Applicable

    Thanks

  • 4798

    0

    Posted December 8th, 2016 08:00

    iDRAC is running the latest firmware (iDRAC8 v2.41.40.40).  iDRAC date/time/timezone are correct.

    I still get the RAC0180 error though.

  • 4798

    0

    Posted December 15th, 2016 08:00

    So I guess no more help from Dell on this problem?

  • Daniel My

    12 Elder

    •

    6205 Posts

    4798

    0

    Posted December 15th, 2016 09:00

    So I guess no more help from Dell on this problem?

    This is a community forum. We monitor, moderate, and engage on this forum at our discretion. Please contact warranty support if you are not looking for support from the community.

    The certificate you are trying to upload is not likely the proper type for the method. The method you are using is designed for use with a certificate signed by a trusted source like VeriSign. If you want to use an active directory certificate then go to iDRAC settings>user authentication>directory services. That is where you manage directory services and upload certificates for it.

    Thanks

  • Rameses78

    1 Message

    4512

    0

    Posted June 15th, 2018 12:00

    Doesn't work adding the Certificate in iDRAC either, so I am afraid that is not the solution to this seemingly common issue.

  • DELL-Shine K

    6 Operator

    •

    3042 Posts

    4504

    0

    Posted June 15th, 2018 18:00

    Which certificate are you uploading to iDRAC. You need to upload Root Certificate Authority certificate to iDRAC.

  • 1060

    0

    Posted May 27th, 2022 19:00

    I know this is an old post but I was having the same issue, and thought I would add this for OP and anyone else.  I came across this How to whitepaper on Dell's enterprise solution page.  It shows steps on Config iDRAC to use AD Auth.   It goes over cert generating, plus more.  

    Configure iDRAC to use Active Directory Authentication (dell.com)

    Hope it helps.