iDRAC10 Security Configuration Guide

Automatic Certificate Enrollment

iDRAC offers two protocol standards - ACME (Automated Certificate Management Environment) and SCEP (Simple Certificate Enrollment Protocol). ACME and SCEP are used for managing certificates to large number of network devices using an automatic enrollment process. iDRAC can now integrate with SCEP-compatible servers like Microsoft Server's NDES service to maintain SSL/TLS Certificates automatically. This feature can be used to enroll and refresh a soon-to-be-expired web server certificate.

With a Datacenter license, iDRAC offers Automatic Certificate Enrollment.

iDRAC's Automatic Certificate enrollment feature automatically assures SSL/TLS certificates are in place and up to date for both bare-metal and previously installed systems. This security feature keeps iDRAC SSL/TLS certificates current.

iDRAC Web User Interface can be reached with any supported browser. It uses an SSL/TLS certificate to authenticate itself to web browsers and command-line utilities running on management stations thereby establishing an encrypted link. If the Certificate Authority that issued the certificate is not trusted by the management station, warning messages are displayed on the management station. Having an iDRAC SSL/TLS certificate in place ensures a validated and secure connection.