Hi all,

We have already uploaded signed certificate from private CA.
We are having our iDRAC scanned for security vulnerabilities by Qualys.
Our iDRAC is on a network segregated from the production network by ACLs.

We granted Qualys access to scan iDRAC in order to keep compliant with PCI-DSS and FIPS requirements.
Qualys is reporting the certificate is not trusted.

Our browsers trust our private CA, but PCI requirements won't allow Qualys to trust our private CA.
Our only solution is to upload our CA bundle to the iDRAC.

 

As per TLS spec, server certificates can include the CA bundle in the same file in the following format:
server certificate, then intermediate CA, then root CA.

So there would be 3 BEGIN CERTIFICATE lines and 3 END CERTIFICATE lines.

I did successfully integrate the 3 certificates into one file in the above format. But the iDRAC indicates that the certificate is invalid and to check it in OpenSSL. I was able to verify the certificate in OpenSSL without issues.

Please advise how we can upload all 3 certificates.