Other nedded information :

- System Model            = PowerEdge R740xd

- Firmware Version = 3.21.21.21
- Firmware Build = 30
- Last Firmware Update = 06/14/2018 09:07:38
- Hardware Version = 0.01

- System BIOS Version     = 1.4.5

While uploading LDAP SSL certificate to iDRAC you need to upload Root CA Certificate from where certificate is created for LDAP server. You also need to use Base64 format for certificate while trying to upload certificate to iDRAC

Yes keep it on same folder where racadm commands are executed. You can also provide absolute path of certificate file in racadm command

Thank you DELL-Shine K for you answer.

I have question about your answer.

---

@DELL-Shine K wrote:

While uploading LDAP SSL certificate to iDRAC you need to upload Root CA Certificate from where certificate is created for LDAP server.

---

Where upload this certificat, in the same folder as this of the script containing the "racadm sslcertupload ..." command ?

---

@DELL-Shine K wrote:

You also need to use Base64 format for certificate while trying to upload certificate to iDRAC 

---

I think that it's the cas because it contains some characteres as = / and +.

I have copied the CA cert to my current directory and run the racadm command but it gave me the same error: 

cp /etc/openldap/certs/my_ca_certificat.pem  .
sudo /opt/dell/srvadmin/sbin/racadm sslcertupload -t2 -f My_cert_file
ERROR: An invalid certificate is uploaded.

For the second suggestion, can you give me please the syntaxe to use to provide an absolute path of CA cert. I have used the -k but it doesn't work.

sudo /opt/dell/srvadmin/sbin/racadm sslcertupload -t2 -f My_cert_file -k /etc/openldap/cacerts/my_ca_certificat.pem
ERROR: The syntax of the command specified is not correct. 

Can you check below points

cp /etc/openldap/certs/my_ca_certificat.pem  .
sudo /opt/dell/srvadmin/sbin/racadm sslcertupload -t2 -f My_cert_file
ERROR: An invalid certificate is uploaded.

• On first command filename is "my_ca_certificat.pem" and in racadm command you used "My_cert_file"
• There need to be a space between -t2. Not sure this is a typo here

You can try below command with correct option and filename

"sudo /opt/dell/srvadmin/sbin/racadm sslcertupload -t 2 -f my_ca_certificat.pem"

For obsolete path you need to mention "-f /etc/openldap/cacerts/my_ca_certificat.pem". There is no need to have -k option 

Good morning DELL-Shine K

• On first command filename is "my_ca_certificat.pem" and in racadm command you used "My_cert_file" 

---

Yes I used "My_cert_file" because it is the certificate that I want to upload.  

"my_ca_certificat.pem" is the certificate used to certify "My_cert_file" .

• There need to be a space between -t2. Not sure this is a typo here 

---

I think that we can use "-t2" with or without space.

You can try below command with correct option and filename

"sudo /opt/dell/srvadmin/sbin/racadm sslcertupload -t 2 -f my_ca_certificat.pem"

For obsolete path you need to mention "-f /etc/openldap/cacerts/my_ca_certificat.pem". There is no need to have -k option 

---

So after "-f" I think that it is not "my_ca_certificat.pem" that must be used but "My_cert_file".

But, as  I said in my previous post,  when I use the following command "sudo /opt/dell/srvadmin/sbin/racadm sslcertupload -t 2 -f My_cert_file" it generate an error.

ERROR: An invalid certificate is uploaded.

-t 2 option is for uploading certificate to iDRAC for AD/LDAP authentication. Here you need to upload root CA certificate which is used to sign AD/LDAP Server certificate. For AD/LDAP login there is no need to create a certificate for iDRAC and upload.