Thanks, I followed the instructions in the manual. The problem was that the dns rac name and common name weren't the same. The dns rac name was hostname and the common name was fqdn. After I set my common name to hostname I could generate and download the CSR. Then I bumped into the next problem. Generating the CSR, requesting the certificate from the CA and uploading it to the idrac all went fine. But when I access the idrac with a browser the certificate is invalid. The error is "name on security certificate is invalid or does not match site name".  Because I use the hostname for the common name and I access the idrac with a browser on the fqdn it doesn't match. I also couldn't use the fqdn for common name and dns rac name because that wasn't allowed for the dns rac name. As to my knowledge the idrac doesn't allow me to specify subjectAltName, So I ended up using openssl to generating an CSR and a private key with hostname and fqdn. Requesting a certificate from the CA and uploading both the certificate and the key file.    
Hi, I'm trying to generate a CSR through RACADM but it's driving me crazy. First I made sure all certificate properties where set with RACADM and verified it with: racadm -r myserver -u root -p calvin get idrac.security Output:Key=iDRAC.Embedded.1#Security.1]CsrCommonName=myserver.mycompany.comCsrCountryCode=NLCsrEmailAddr=someone[NAME].comCsrKeySize=2048CsrLocalityName=BigCityCsrOrganizationName=MyCompanyCsrOrganizationUnit=MyDeptCsrStateName=NY Then I run:racadm -r myserver -u root -p calvin sslcsrgen -g -f myserver.csr Output:CSR generated and downloaded from RAC successfully But the myserver.csr file that is downloaded only contains "ERROR: Unable to read CSR." If I try to generate a CSR with the webserver of the iDRAC all goes well and it generates a CSR file without any errors. Am I missing something here? Why does it fail to generate a CSR with RACADM? I tried this on an iDRAC7 and an iDRAC8, with same results.    
Trouble generating CSR with racadm