Manage an AD Server's Certificate (Oracle ILOM CLI)

Managing an AD server's certificate involves uploading a certificate if one is not present, or deleting a certificate when needed.

• If strict certificate mode is required, you must upload the switch's certificate.

• Some situations might require you to remove an existing certificate. For example, if the switch is no longer using strict certificate mode, or if a certificate expires and must be replaced with a new one, you must remove the existing certificate.

• Do one of the following:
  • Remove an existing certificate.

    -> set /SP/clients/activedirectory/cert/ clear_action=true
    Are you sure you want to remove the cert (y/n)? y
    ->
    

  • Load a certificate file onto the switch's AD server.

    -> load /SP/clients/activedirectory/cert/ load_uri=URI
    ->
    

  where URI is the uniform resource indicator for the certificate file.

  For example, to load the certificate file 112115.cert, type:

  -> load /SP/clients/activedirectory/cert/ load_uri=ftp://root:changeme@123.45.67.89/privkeystore/112115.cert
  Load Successful.
  ->
  

Related Information

• Enable the AD Client (Oracle ILOM CLI)

• Configure AD Properties (Oracle ILOM CLI)

• Configure DNS Locator Queries (Oracle ILOM CLI)

• Configure an Alternate AD Server (Oracle ILOM CLI)

• Manage Certificates for Alternate AD Servers (Oracle ILOM CLI)

• AD Groups (Oracle ILOM CLI)

• Configure an AD Administrator Group (Oracle ILOM CLI)

• Configure an AD Custom Group (Oracle ILOM CLI)

• Configure an AD Operator Group (Oracle ILOM CLI)

• Configure an AD User Domain (Oracle ILOM CLI)

• Disable the AD Client (Oracle ILOM CLI)

• Display the Switch's AD Client Information (Oracle ILOM CLI)