OK, you have to use the iDRAC website to create the CSR. But you don't appear to be able to add additional SANs. You just upload the .cer - without the private key, which is presumably still on the iDRAC - to the iDRAC. I just need to figure out a way of has hacking the CSR to add SANs
We would like to replace the self-signed Dell iDRAC certificate with one signed by our pki infrastructure. I have been using the DigiCertUtil application to create a certificate signing request (CRS). This will contain the fully qualified common name as well as the unqualified name as a subject alternative name (SAN). I use this CRS to create a valid certificate then use DigiCertUtil to export this to a pfx. If I upload this pfx (using a password) to the iDRAC through the iDRAC website, the certificate gets uploaded but then on a racrestart, the certificate has become corrupted. Looking at the certificate, the original certificate contains our valid certificate root and issuing CA and the correct certificate. But iDRAC has tagged on an invalid self-signed bit which, of course, is not trusted by anyone. I was following this:  [URL]  I have created the CRS using the iDRAC web interface with the same results. Am I missing something?
Problems with certificate for iDRAC 7