racadm cfg syntax issues with set -f (file).cfg

Question

My Microsoft CA script has stopped working with newer idrac versions, and I'm wondering if it's an issue with our FQDNs - throwing it out to anyone who might have ideas.

I'm getting this:

Configuring: [iDRAC.Security]ERROR: RAC917 : The syntax of the specified command is not correct.
See the command help text. To see the help text, run
"racadm help ".

This is the command being run:

#Build Filenames and have the idrac Generate the Cert
$csrPath = Join-Path "c:\idracssl\PowerShellSSL\" -ChildPath ("$hostname-" + $( Get-Date -f "yyyyMMdd") + ".csr" ) 
$outCert = Join-Path "c:\idracssl\PowerShellSSL\" -ChildPath ("$hostname-" + $( Get-Date -f "yyyyMMdd") + ".cer" ) 
& racadm -r $FQDN -u $idracuser -p $idracpass sslcsrgen -g -f $csrPath --nocertwarn

I think the main issue is that the cfg file looks like this:
[iDRAC.Security]
CsrCommonName=idrac-hostname.contoso.local

And that it doesn't like either the hyphen in the fqdn, or else the cfg has changed in a newer version. Oddly, i also can't set this manually which boggles my mind:
racadm.exe -r $FQDN -u $idracuser -p $idracpass set iDRAC.Security.CsrCommonName $hostname.$domName

So... What changed?

Edit:
I'm also running - before this section - this:

& racadm.exe -r $FQDN -u $idracuser -p $idracpass set iDRAC.NIC.DNSRacName $hostname --nocertwarn
& racadm.exe -r $FQDN -u $idracuser -p $idracpass set iDRAC.NIC.DNSDomainName $domName --nocertwarn

So it's using the same hostname/domain name - I saw another post of someone having this issue trying to use a different DNS name than the cert.

JRRW · Answer

Even in their newest racadm they don't do a good job on clarifying things - i.e. they say to run

racadm set iDRAC.security.commonname MyCompany

Yet that command doesn't actually work in that syntax.

Really frustrating to not have better or more accurate guides.

JRRW · Answer

Digging in more, I think the issue is that previous versions you could import a .cfg file of the config data you wanted.. Now however that doesn't seem to work, it only allows -f to be done with a -t of xml or json.

Though that doesn't explain why I also can't update it manually, but I'd rather use a dynamically created cfg file vs a bunch of commands anyways.

Anyone doing this currently without issue?

DELL-Shine K · Answer

Are you trying with commonname or 'CsrCommonName'. Actual command is        racadm set iDRAC.Security.CsrCommonName MyCompany Can you also try with xml/json format and see whether it works? If it is not working with these can you share the server model and iDRAC FW version you have on the server

Pavlos34G · Answer

I can no longer run racadm with a config file on a brand new Server (R740):

racadm -r "iloname" -u root -p "pwd" set -f "idrac.txt"

reports ERROR: RAC917

idrac.txt sample:

[iDRAC.IPv4]
DHCPEnable=Enabled
DNSFromDHCP=Enabled
Enable=Enabled

How can I import a file now

DELL-Shine K · Answer

Can you share the iDRAC FW version.

You can also try the xml or json option to download and upload configuration to iDRAC.

You can run below command to get help of get and set command

racadm -r "ip" -u root -p "pwd" help get

racadm -r "ip" -u root -p "pwd" help set

DELL-Shine K · Answer

you can run below command to get xml file with current iDRAC configuration.

racadm -r "ip" -u root -p "pwd" get -t xml -c iDRAC.Embedded.1 -f idrac.xml

You can make necessary change on the config file by editing the file. Once you done with the changes you can save the file and run below command to upload the configuration to iDRAC

racadm -r "ip" -u root -p "pwd" set -t xml -c iDRAC.Embedded.1 -f idrac.xml

Pavlos34G · Answer

FW is Version 5.00.00.00(Build 52)

When did the change from -r using a text file happen?

Can you please supply me with link to the release notes, command line notes and how do I convert my text files to xml for this purpose?

Systems Management General

racadm cfg syntax issues with set -f (file).cfg

Was this post helpful?