Filter
Top Products
Using the iDRAC6 Directory Service 147
Directory With Standard Schema Using the iDRAC6 Web-Based
Interface" on page 170.
Importing the iDRAC6 Firmware SSL Certificate
NOTE: If the Active Directory Server is set to authenticate the client during an SSL
session initialization phase, you need to upload the iDRAC6 Server certificate to the
Active Directory Domain controller as well. This additional step is not required if the
Active Directory does not perform a client authentication during an SSL session’s
initialization phase.
Use the following procedure to import the iDRAC6 firmware SSL certificate
to all domain controller trusted certificate lists.
NOTE: If your system is running Windows 2000, the following steps may vary.
NOTE: If the iDRAC6 firmware SSL certificate is signed by a well-known CA and the
certificate of that CA is already in the domain controller's Trusted Root Certificate
Authority list, you are not required to perform the steps in this section.
The iDRAC6 SSL certificate is the identical certificate used for the
iDRAC6 Web server. All iDRAC controllers are shipped with a default
self-signed certificate.
To download the iDRAC6 SSL certificate, run the following RACADM
command:
racadm sslcertdownload -t 0x1 -f <RAC SSL certificate>
1
On the domain controller, open an
MMC Console
window and select
Certificates
Trusted Root Certification Authorities
.
2
Right-click
Certificates
, select
All Tasks
and click
Import
.
3
Click
Next
and browse to the SSL certificate file.
4
Install the iDRAC6 SSL Certificate in each domain controller’s
Trusted
Root Certification Authority
.
If you have installed your own certificate, ensure that the CA signing your
certificate is in the
Trusted Root Certification Authority
list. If the
Authority is not in the list, you must install it on all your domain controllers.
5
Click
Next
and select whether you would like Windows to automatically
select the certificate store based on the type of certificate, or browse to a
store of your choice.
6
Click
Finish
and click
OK
.