[Linux] Change iDRAC Self-Signed Certificate

December 6, 2022 Andrei Rachita Linux 0

So, your Dell iDrac certificate expired.

So let’ update it by creating a new self-signed certificate:

  1. openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes -subj /CN=idrac.pbnet.local
  2. openssl pkcs12 -export -in cert.pem -inkey key.pem -out myfile.p12 -name “Alias of cert”

Then upload it to your iDrac via the web interface:

  1. Go to Overview > iDRAC Settings > Network > SSL . The SSL page is displayed.
  2. Under Custom SSL Certificate Signing Certificate, select Upload Custom SSL Certificate Signing Certificate and click Next. The Upload Custom SSL Certificate Signing Certificate page is displayed.
  3. Click Browse and select the custom SSL certificate signing certificate file. Only Public-Key Cryptography Standards #12 (PKCS #12) compliant certificate is supported.
  4. If the certificate is password protected, in the PKCS#12 Password field, enter the password.
  5. Click Apply. The certificate is uploaded to iDRAC.
  6. A pop-up message is displayed asking you to reset iDRAC immediately or at a later time. Click Reset iDRAC or Reset iDRAC Later as required. After iDRAC resets, the new certificate is applied. The iDRAC is not available for a few minutes during the reset.

Enjoy!