Querying and Uploading the Local Certificate (syslog -d clientcertificate)
Function
The syslog -d clientcertificate command is used to upload the syslog client (local) certificate to iBMC or query the current local certificate information.
Format
ipmcget -t syslog -d clientcertificate
ipmcset -t syslog -d clientcertificate -v <filepath> <password>
Parameters
Parameter |
Description |
Value |
|---|---|---|
filepath |
Specifies the absolute path of the client certificate on the iBMC. |
For example, /tmp/rootcertificate.cer |
password |
Specifies the password used to decrypt the client certificate. |
The password is automatically generated when the certificate server is used to generate a local certificate. |
Usage Guidelines
Before running this command, use a file transfer tool that supports SFTP, for example WinSCP, to transfer the local certificate to the specified directory (for example /tmp) of the iBMC file system.
For security purposes, periodically update the certificate.
Example
# Upload the local certificate.
iBMC:/-> ipmcset -t syslog -d client -v /tmp/clientcertificate.pfx syslogpw
Set syslog client certificate successfully.
# Query local certificate information.
iBMC:/-> ipmcget -t syslog -d clientcertificate
Syslog Client Certificate Information:
Issued To: CN=Server, OU=IT, O=Mytest, L=ShenZhen, S=GuangDong, C=CN
Issued By: CN=Administrator, OU=it3, O=ts3, L=, S=guangdong2, C=cn
Valid From : Feb 17 2015 UTC
Valid To: Feb 17 2016 UTC
Serial Number: 25