iSM: SSL certificates in the Windows Personal Store disappear on iSM 5.4.0 service start
Summary: SSL certificates disappear in the Personal certificate store of Windows Server when iDRAC Service Module 5.4.0 service is started. This occurs if the iDRAC hostname is the exact same as the hostname set in Windows. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
When the DSM iDRAC Service Module (iSM) service in Windows Server is started, it may be noticed that an SSL certificate has unexpectedly disappeared from the Personal store as seen in the Certificates management console. This removed certificate could have been installed and needed by other third-party applications or services that could fail.
Cause
This issue occurs when the iDRAC is configured with the exact same hostname string as the hostname set in Windows. On service start, iSM queries the Integrated Dell Remote Access Controller (iDRAC) for its SSL certificate and creates an iSM web certificate in the Personal store to share with iDRAC to establish a secure communication channel. Once iSM service is stopped, it removes the iDRAC certificate but then copies it again on the next service start. The issue is that iSM might accidentally delete a different certificate created locally that must use the Windows hostname. This is regardless if the domain names appending the iDRAC or Windows hostnames are different.
Resolution
Dell Engineering will address this issue in a future iSM release.
Meanwhile, it is suggested to rename the iDRAC hostname to something slightly different than the Windows hostname. This is done in the iDRAC web user interface by first going to iDRAC Settings > Connectivity > Network > Common Settings. Change the DNS iDRAC Name and click the Apply button.
SSL certificates only in the Personal store are affected. Any certificates created by a Certificate Authority and moved into the Personal store are not affected.
Meanwhile, it is suggested to rename the iDRAC hostname to something slightly different than the Windows hostname. This is done in the iDRAC web user interface by first going to iDRAC Settings > Connectivity > Network > Common Settings. Change the DNS iDRAC Name and click the Apply button.
SSL certificates only in the Personal store are affected. Any certificates created by a Certificate Authority and moved into the Personal store are not affected.
Affected Products
iDRAC Service Module, iDRAC Service Module 5.xArticle Properties
Article Number: 000232069
Article Type: Solution
Last Modified: 04 Sep 2025
Version: 2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.