UNSOLVED
racadm cfg syntax issues with set -f (file).cfg
My Microsoft CA script has stopped working with newer idrac versions, and I'm wondering if it's an issue with our FQDNs - throwing it out to anyone who might have ideas.
I'm getting this:
Configuring: [iDRAC.Security]ERROR: RAC917 : The syntax of the specified command is not correct.
See the command help text. To see the help text, run
"racadm help
This is the command being run:
#Build Filenames and have the idrac Generate the Cert
$csrPath = Join-Path "c:\idracssl\PowerShellSSL\" -ChildPath ("$hostname-" + $( Get-Date -f "yyyyMMdd") + ".csr" )
$outCert = Join-Path "c:\idracssl\PowerShellSSL\" -ChildPath ("$hostname-" + $( Get-Date -f "yyyyMMdd") + ".cer" )
& racadm -r $FQDN -u $idracuser -p $idracpass sslcsrgen -g -f $csrPath --nocertwarn
I think the main issue is that the cfg file looks like this:
[iDRAC.Security]
CsrCommonName=idrac-hostname.contoso.local
And that it doesn't like either the hyphen in the fqdn, or else the cfg has changed in a newer version. Oddly, i also can't set this manually which boggles my mind:
racadm.exe -r $FQDN -u $idracuser -p $idracpass set iDRAC.Security.CsrCommonName $hostname.$domName
So... What changed?
Edit:
I'm also running - before this section - this:
& racadm.exe -r $FQDN -u $idracuser -p $idracpass set iDRAC.NIC.DNSRacName $hostname --nocertwarn
& racadm.exe -r $FQDN -u $idracuser -p $idracpass set iDRAC.NIC.DNSDomainName $domName --nocertwarnSo it's using the same hostname/domain name - I saw another post of someone having this issue trying to use a different DNS name than the cert.
Digging in more, I think the issue is that previous versions you could import a .cfg file of the config data you wanted.. Now however that doesn't seem to work, it only allows -f to be done with a -t of xml or json.
Though that doesn't explain why I also can't update it manually, but I'd rather use a dynamically created cfg file vs a bunch of commands anyways.
Anyone doing this currently without issue?
DELL-Shine K
6 Operator
•
3042 Posts
876
0
Posted March 24th, 2021 21:00
Are you trying with commonname or "CsrCommonName". Actual command is
racadm set iDRAC.Security.CsrCommonName MyCompany
Can you also try with xml/json format and see whether it works? If it is not working with these can you share the server model and iDRAC FW version you have on the server
I can no longer run racadm with a config file on a brand new Server (R740):
racadm -r "iloname" -u root -p "pwd" set -f "idrac.txt"
reports ERROR: RAC917
idrac.txt sample:
[iDRAC.IPv4]
DHCPEnable=Enabled
DNSFromDHCP=Enabled
Enable=EnabledHow can I import a file now
DELL-Shine K
6 Operator
•
3042 Posts
572
0
Posted August 27th, 2021 08:00
Can you share the iDRAC FW version.
You can also try the xml or json option to download and upload configuration to iDRAC.
You can run below command to get help of get and set command
racadm -r "ip" -u root -p "pwd" help get
racadm -r "ip" -u root -p "pwd" help set
DELL-Shine K
6 Operator
•
3042 Posts
562
1
Posted August 27th, 2021 09:00
you can run below command to get xml file with current iDRAC configuration.
racadm -r "ip" -u root -p "pwd" get -t xml -c iDRAC.Embedded.1 -f idrac.xml
You can make necessary change on the config file by editing the file. Once you done with the changes you can save the file and run below command to upload the configuration to iDRAC
racadm -r "ip" -u root -p "pwd" set -t xml -c iDRAC.Embedded.1 -f idrac.xml
JRRW
1 Rookie
•
3 Posts
932
0
Posted March 24th, 2021 10:00
Even in their newest racadm they don't do a good job on clarifying things - i.e. they say to run
racadm set iDRAC.security.commonname MyCompany
Yet that command doesn't actually work in that syntax.
Really frustrating to not have better or more accurate guides.