ScottFPG

updated

9 years ago

S

ScottFPG

4 Posts

0

3728

August 29th, 2017 15:00

iDRAC6 SSL key upload

Hello,

I am trying to configure SSL for iDRAC6 and the command to upload the SSL key to the DRAC is not available.  I have updated the firmware walking it all the way from 3.33 to 3.85 for the iDRAC.  I am a configured admin, I am using a remote RACADM console, and I have reset the RAC numerous times.  I have tried it remotely, and locally but the command is not available.  Lastly, I configured the SSL key upload for all of my other servers using iDRAC 7 and 8 without an issue.  Please help.

Thanks,


Scott

  • Daniel My

    12 Elder

    6205 Posts

    3060

    0

    Posted August 31st, 2017 16:00

    Once I roll the firmware back to 3.33, do I have to complete all patches up to the current version 3.85 or can I jump from 3.33 to 3.85?  Just don't know if the updates are cumulative or not.

    I'm guessing that you are talking about a modular iDRAC6. That is the only version of the iDRAC I can think of that has revisions that high.

    Stepping is not required unless explicitly stated in release notes. If stepping is required or backflashing is limited then it should be listed in the important information section of the download page, but you should always check the release notes as well. It is not always in the important information section, and the important information section is not present on all download pages.

    The release notes state that when upgrading from 2.1 or 2.2 you must first upgrade to 2.30 or 2.31 before installing anything later. It also warns about using Internet Explorer when performing updates older than 3.4.

    Regarding backflashing, the release notes state that backflashing is limited by your hardware configuration. The general rule is to not backflash beyond a revision that has been installed and functioning on the system.

    Thanks

  • Daniel My

    12 Elder

    6205 Posts

    3060

    0

    Posted August 29th, 2017 17:00

    Hello

    The iDRAC6 does not support the cert upload feature. It was first introduced with firmware 1.30.30 on the iDRAC7.

    http://en.community.dell.com/techcenter/b/techcenter/archive/2013/08/20/idrac7-now-support-signing-certificate

    Thanks

  • ScottFPG

    4 Posts

    3060

    0

    Posted August 29th, 2017 18:00

    Thanks for the quick response, so there is no way to configure SSL for iDRAC6?

  • Daniel My

    12 Elder

    6205 Posts

    3060

    0

    Posted August 30th, 2017 10:00

    so there is no way to configure SSL for iDRAC6?

    You can't upload a cert, but you can configure the cert. There is a section in this article that discusses the available options if you have an iDRAC6 or iDRAC7 running firmware older than 1.30.30.

    http://en.community.dell.com/techcenter/systems-management/w/wiki/11443.idrac-web-server-certificate-management

    Thanks

  • ScottFPG

    4 Posts

    3060

    0

    Posted August 31st, 2017 11:00

    Thanks again, I finally uploaded a cert after doing a CSR generation and submitting that to my cert authority.  Next problem I am having is firmware related I think.  After uploading the cert, ports 80 and 443 close.  The only way to re-establish connectivity it resetting the RAC to factory defaults and installing the earliest firmware.  I can then upload the cert and walk the firmware back up 8 steps.  Question I have is: Once I roll the firmware back to 3.33, do I have to complete all patches up to the current version 3.85 or can I jump from 3.33 to 3.85?  Just don't know if the updates are cumulative or not.