Not able to execute some Certificate related cases on Dell R470 Servers

[myoscodeRahul]

Hi team,

We are trying to test below cases on Dell R470 servers,

It's not happening, because these cases are asking to Replace Https certificate. So, it needs debugger credentials to login to iDRAC and then store default certificate.

I tried but not able to proceed. Can you please give your analysis if these cases are supported on Dell R470 Servers or not.

RA_CM10080_Succeed_to_replace_https_certificate_with_2048_via_redfish
RA_CM10190_Succeed_to_replace_https_certificate_with_different_key_length_via_redfish
RA_CM10320_Succeed_to_upload_CA_bundle_with_different_key_length_via_redfish
RA_CM10360_Fail_to_upload_CA_bundle_with_unsupported_file_length_via_redfish
RA_CM10350_Succeed_to_upload_CA_bundle_with_sha1_or_md5_algorithm_via_redfish
RA_CM10370_Fail_to_upload_CA_bundle_with_modified_file_via_redfish
RA_CM10330_Succeed_to_replace_CA_bundle_via_redfish
RA_CM10340_Succeed_to_replace_CA_via_redfish

Regards
Rahul

[texroemer]

Hi @myoscodeRahul

Based off the use case descriptions most of these should be supported (i would need to confirm with internal team if uploading CA bundle is allowed) but can you share the error you're receiving when you try to replace a cert (POST call with JSON error response).

Thanks
Tex

[myoscodeRahul]

rkumardu@C-JSP16J3:~$ redfishtool -sssss -W 1:30 -r 1.1.1.1 -u admin1111 -p admin1111 raw POST "/redfish/v1/CertificateService/Actions/CertificateService.ReplaceCertificate" -d "{"CertificateType": "PEM", "CertificateUri": {"@odata.id": "/redfish/v1/Managers/iDRAC.Embedded.1/NetworkProtocol/HTTPS/Certificates/SecurityCertificate.2"}, "CertificateString": "${CERT_AND_KEY_CONTENT}"}"
num: 1, time: 30
#REQUEST: POST https://1.1.1.1/redfish/v1/CertificateService/Actions/CertificateService.ReplaceCertificate
#__Request.Headers: {'User-Agent': 'python-requests/2.27.1', 'Accept': 'application/json', 'Connection': 'keep-alive', 'OData-Version': '4.0', 'Content-Type': 'application/json', 'Content-Length': '182', 'Authorization': 'Basic cm9vdDpkZWxsX2hlbHBfMTIz'}
#__Request AuthType: Basic
#__Request Data: {"CertificateType": "PEM", "CertificateUri": {"@odata.id": "/redfish/v1/Managers/iDRAC.Embedded.1/NetworkProtocol/HTTPS/Certificates/SecurityCertificate.2"}, "CertificateString": ""}
#__Response.status_code: 400, r.url: https://1.1.1.1/redfish/v1/CertificateService/Actions/CertificateService.ReplaceCertificate
#__Response.elapsed(responseTime): 1.27 sec
#__Response.Headers: {'Date': 'Fri, 12 Dec 2025 10:42:59 GMT', 'Server': 'apache', 'X-Frame-Options': 'DENY', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload', 'Access-Control-Allow-Origin': '*', 'Cache-Control': 'no-store; no-cache', 'Content-Type': 'application/json;odata.metadata=minimal;charset=utf-8', 'Odata-Version': '4.0', 'Pragma': 'no-cache', 'X-Content-Security-Policy': "default-src 'self'", 'X-Content-Type-Options': 'nosniff', 'X-Ua-Compatible': 'IE=11', 'X-Xss-Protection': '1;mode=block', 'Content-Length': '1110', 'Connection': 'close'}
#__Response. Data: {"error":{"@Message.ExtendedInfo":[{"Message":"Unable to complete the operation because the value entered for the property is not in the list of acceptable values.","MessageArgs":["","CertificateString"],"MessageArgs@odata.count":2,"MessageId":"IDRAC.2.13.SYS426","RelatedProperties":[],"RelatedProperties@odata.count":0,"Resolution":"Enter a valid value from the enumeration list that Redfish service supports and retry the operation.For information about valid values, see the iDRAC User's Guide available on the support site.","Severity":"Warning"},{"Message":"The value 'empty' for the property CertificateString is not in the list of acceptable values.","MessageArgs":["","CertificateString"],"MessageArgs@odata.count":2,"MessageId":"Base.1.18.PropertyValueNotInList","RelatedProperties":[],"RelatedProperties@odata.count":0,"Resolution":"Choose a value from the enumeration list that the implementation can support and resubmit the request if the operation failed.","Severity":"Warning"}],"code":"Base.1.18.GeneralError","message":"A general error has occurred. See ExtendedInfo for more information"}}
redfishtool: Transport: Response Error: status_code: 400 -- Bad Request
redfishtool: raw: Error sending POST to resource, aborting
rkumardu@C-JSP16J3:

[texroemer]

For CertificateString property are you passing in the complete cert string including newline characters? See example below of the correct string value to pass in.

[root@localhost]# curl -X POST https://192.168.0.120/redfish/v1/CertificateService/Actions/CertificateService.ReplaceCertificate -u root:calvin --insecure -H "Content-Type: application/json"  -d '{"CertificateType": "PEM", "CertificateUri": {"@odata.id": "/redfish/v1/Managers/iDRAC.Embedded.1/NetworkProtocol/HTTPS/Certificates/WEBSERVER_SSL"}, "CertificateString": "-----BEGIN CERTIFICATE-----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\nQE58+PhcYyhj\n-----END CERTIFICATE-----\n"}'

{"error":{"@Message.ExtendedInfo":[{"MessageId":"Base.1.18.Success","MessageArgs":[],"RelatedProperties":[],"Message":"The request completed successfully.","Severity":"OK","Resolution":"None."},{"MessageId":"IDRAC.2.15.SYS413","MessageArgs":[],"RelatedProperties":[],"Message":"The operation successfully completed.","Severity":"Informational","Resolution":"No response action is required."},{"MessageId":"IDRAC.2.15.SWC1956","MessageArgs":[],"RelatedProperties":[],"Message":"The Transport Layer Security(TLS) certificate has been updated. The webservices are restarting which may end the current web session.","Severity":"Informational","Resolution":"No response action is required."}]}}

Thanks
Tex