iDRAC7 - CSR is empty

Support-Anfragen für Server ohne Service

Support-Anfragen für Server ohne Service
Sie haben einen defekten Dell PowerEdge Server - dann sind Sie hier genau richtig!

iDRAC7 - CSR is empty

This question has been answered by DELL-Tom G

Hi,

on my iDrac7 with the last firmware i cannot create a certificate-request. The delivered file ist always empty.

How can i create a CSR?

bye akela68

Verified Answer
  • Hi Andreas,

    Maybe you have an special character anywhere? Like `´ or ß? 

    I think otherwhise you need open a ticket directly via phone to resolve that issue. I have no further ideas about. :(

    Tom

All Replies
  • Hi,

    Please follow this article here and it should work.

    kind regards

    Tom

  • Hi Tom,

    thank you for the link, but this can't resolve my problem.

    The csr-download-size from the iDRAC7-Website is 0kB!

    When i connect over ssh to the iDRAC and set the params with racadm set ... then the last command

    sslcertgen -g

    failed with an error without detailed information.

    How can i do more?

    Bye Andreas

  • Hi Andreas,

    Maybe you have an special character anywhere? Like `´ or ß? 

    I think otherwhise you need open a ticket directly via phone to resolve that issue. I have no further ideas about. :(

    Tom

  • Hi Tom,

    that's the reason. I use a + in Organisationsname. In OpenSSL this is a valid character but the iDrac can't work with this!

    So i cannot use our internal PKI, while the Organisationsname includes the + in the name. IMHO this is a bug in the firmware. In an older version of iDrac-firmware i use the same Organisationsname and i export the csr successfully.

    Thank's for your help.

    Bye Andreas

  • Hi Andreas,

    Oh! Thanks for your feedback. I think you need to quote these special chars. Can you checkout this manual at page 23 please. Maybe this can help for the + character too.

    cheers

    Tom

  • Hi Tom,

    no, it doesn't work with \ ' or " - quotation. This escapes only characters in the command-line but not the arguments of the parameter for csr-generation.

    Bye Andreas

  • Sorry, than we have no solution for that at the moment. :(

    Tom