Importing The Idrac6 Firmware Ssl Certificate - Dell IDRAC6 User Manual

Directory With Standard Schema Using the iDRAC6 Web-Based
Interface" on page 170.

Importing the iDRAC6 Firmware SSL Certificate

NOTE:
If the Active Directory Server is set to authenticate the client during an SSL
session initialization phase, you need to upload the iDRAC6 Server certificate to the
Active Directory Domain controller as well. This additional step is not required if the
Active Directory does not perform a client authentication during an SSL session's
initialization phase.
Use the following procedure to import the iDRAC6 firmware SSL certificate
to all domain controller trusted certificate lists.
NOTE:
If your system is running Windows 2000, the following steps may vary.
NOTE:
If the iDRAC6 firmware SSL certificate is signed by a well-known CA and the
certificate of that CA is already in the domain controller's Trusted Root Certificate
Authority list, you are not required to perform the steps in this section.
The iDRAC6 SSL certificate is the identical certificate used for the
iDRAC6 Web server. All iDRAC controllers are shipped with a default
self-signed certificate.
To download the iDRAC6 SSL certificate, run the following RACADM
command:
racadm sslcertdownload -t 0x1 -f <RAC SSL certificate>
1 On the domain controller, open an MMC Console window and select
Certificates Trusted Root Certification Authorities.
2 Right-click Certificates, select All Tasks and click Import.
3 Click Next and browse to the SSL certificate file.
4 Install the iDRAC6 SSL Certificate in each domain controller's Trusted
Root Certification Authority.
If you have installed your own certificate, ensure that the CA signing your
certificate is in the Trusted Root Certification Authority list. If the
Authority is not in the list, you must install it on all your domain controllers.
5 Click Next and select whether you would like Windows to automatically
select the certificate store based on the type of certificate, or browse to a
store of your choice.
6 Click Finish and click OK.
Using the iDRAC6 Directory Service
147