{"id":486,"date":"2017-10-05T14:28:53","date_gmt":"2017-10-05T14:28:53","guid":{"rendered":"http:\/\/nyacom.net\/?p=486"},"modified":"2017-10-05T14:28:53","modified_gmt":"2017-10-05T14:28:53","slug":"idrac6%e3%81%aekvm%e3%81%8c-connection-failed-%e3%81%a7%e7%b9%8b%e3%81%8c%e3%82%89%e3%81%aa%e3%81%84%e3%81%a8%e3%81%8d","status":"publish","type":"post","link":"https:\/\/nyacom.net\/?p=486","title":{"rendered":"iDRAC6\u306eKVM\u304c &#8220;Connection Failed&#8221; \u3067\u7e4b\u304c\u3089\u306a\u3044\u3068\u304d"},"content":{"rendered":"<p>\u7ba1\u7406\u3057\u3066\u3044\u308bDELL PowerEdge R710\u306b\u8f09\u3063\u3066\u308bBMC(iDRAC6)\u306eKVM\u6a5f\u80fd\u304cJava8\u306b\u306a\u3063\u3066\u304b\u3089\u5b8c\u5168\u306b\u7e4b\u304c\u3089\u306a\u304f\u306a\u3063\u305f\u306e\u3067\u5bfe\u51e6\u3057\u3066\u307f\u305f\u3002<br \/>\n<!--more--><\/p>\n<p>\u5143\u30cd\u30bf\u306f<a href=\"https:\/\/blog.workinghardinit.work\/2017\/07\/25\/dell-idrac-6-remote-console-connection-failed\/\">\u3053\u3053<\/a>\u3002<br \/>\n\u8abf\u3079\u305f\u611f\u3058\u3060\u3068\uff0c\u540c\u69d8\u306e\u73fe\u8c61\u3067\u56f0\u3063\u3066\u3044\u308b\u4eba\u304c\u3061\u3089\u307b\u3089\u5c45\u308b\u3063\u307d\u3044\u3002<\/p>\n<p>\u7e4b\u304c\u3089\u306a\u304f\u306a\u3063\u305f\u306e\u304cKVM\u6a5f\u80fd\u3060\u3051\u3060\u3063\u305f\u306e\u3067\uff0c\u3066\u3063\u304d\u308aJava\u5074\u3060\u3051\u306e\u554f\u984c\u3060\u3068\u601d\u3063\u3066\u3044\u305f\u3089\uff0c\u539f\u56e0\u306f\uff0c\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u3066\u3044\u308b\u8a3c\u660e\u66f8\u304cSHA-1\u3067\u7f72\u540d\u3055\u308c\u3066\u3044\u3066\uff0c\u6700\u8fd1\u306e\u30d6\u30e9\u30a6\u30b6\u3068Java\u3060\u3068\u305d\u3082\u305d\u3082SHA-1\u8a3c\u660e\u66f8\u3092\u53d7\u3051\u4ed8\u3051\u3066\u304f\u308c\u306a\u3044\u304b\u3089\u3089\u3057\u3044\u3002\u3002<\/p>\n<p><a href=\"http:\/\/media.community.dell.com\/en\/dtc\/attach\/idrac6_security_v1.pdf\">iDRAC6\u306e\u30de\u30cb\u30e5\u30a2\u30eb<\/a>\u306b\u3082\u66f8\u3044\u3066\u3042\u308b\u3051\u3069\uff0c<\/p>\n<blockquote>\n<ol>\n<li>A user logs into the main web GUI then clicks the \u201cOpen Consoles\u201d tab.<\/li>\n<li>The Web GUI sends a pre -authentication request to the i DRAC6 web server via the HTTPS channel (SSL encrypted).<\/li>\n<li>The iDRAC6 web server returns a set of secret data (including an encryption key) via the SSL channel. The console redirection authentication key (32 bytes long) is dynamically generated to prevent replay attack.<\/li>\n<li>The Console redirection client sends a login command with an authentication key to a console redirection server keyboard\/mouse port for authentication via SSL channel.<\/li>\n<li>If authentication is successful, a console redirection session and two console redirection pipes (one for keyboard\/mouse and one for video) ar e established. The keyboard\/mouse pipe is always SSL encrypted.  The video pipe encryption is optional.  (Users can choose to encrypt or not to encrypt the video pipe before they start their console redirection session).<\/li>\n<\/ol>\n<\/blockquote>\n<p>KVM\u3067\u3064\u306a\u3050\u6642\u306f\u3053\u3093\u306a\u624b\u9806\u3067\u8a8d\u8a3c\u3059\u308b\u3089\u3057\u304f\uff0c<br \/>\n\u304a\u305d\u3089\u304fJava\u304cSHA-1\u8a3c\u660e\u66f8\u3092\u5f3e\u304f\u3088\u3046\u306b\u306a\u3063\u305f\u306e\u3067\uff0c\u4e0a\u8a18\u306e4\u3067\u5931\u6557\u3059\u308b\u3063\u307d\u3044\u3002<\/p>\n<h3>\u5bfe\u7b56<\/h3>\n<hr \/>\n<p>\u8981\u3059\u308b\u306b\uff0c\u8a3c\u660e\u66f8\u3092SHA1\u3067\u306a\u304fSHA2\u8a3c\u660e\u66f8\u306b\u5207\u308a\u66ff\u3048\u3066\u3084\u308c\u3070\u826f\u3044\u3089\u3057\u3044\u3002<\/p>\n<p>iDRAC\u306e[iDRAC Settings]->[Network\/Security]->[SSL] \u3068\u8fbf\u3063\u3066\u3086\u304f\u3068\uff0c<br \/>\nCSR\u3092\u751f\u6210\u3059\u308b\u6a5f\u80fd\u304c\u3042\u308b\u306e\u3067\uff0c\u3053\u306eCSR\u306b\u5bfe\u3057\u3066\u30aa\u30ec\u30aa\u30ec\u7f72\u540d\u3057\u305f\u8a3c\u660e\u66f8\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3066\u308c\u3070\u826f\u3044\u3063\u307d\u3044\u3002<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png\" rel=\"lightbox[486]\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"491\" data-permalink=\"https:\/\/nyacom.net\/?attachment_id=491\" data-orig-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png?fit=1410%2C844&amp;ssl=1\" data-orig-size=\"1410,844\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"Screenshot at 2017-10-04 23-23-08\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png?fit=300%2C180&amp;ssl=1\" data-large-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png?fit=800%2C479&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png?resize=300%2C180\" alt=\"\" width=\"300\" height=\"180\" class=\"alignnone size-medium wp-image-491\" srcset=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png?resize=300%2C180&amp;ssl=1 300w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png?resize=768%2C460&amp;ssl=1 768w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png?resize=1024%2C613&amp;ssl=1 1024w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-23-08.png?w=1410&amp;ssl=1 1410w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>\u3061\u306a\u307f\u306b\uff0c\u30c7\u30d5\u30a9\u30eb\u30c8\u306eCSR\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u611f\u3058\u306b\u306a\u3063\u3066\u3044\u308b\u3002<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png\" rel=\"lightbox[486]\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"490\" data-permalink=\"https:\/\/nyacom.net\/?attachment_id=490\" data-orig-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png?fit=1410%2C842&amp;ssl=1\" data-orig-size=\"1410,842\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"Screenshot at 2017-10-04 23-24-07\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png?fit=300%2C179&amp;ssl=1\" data-large-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png?fit=800%2C477&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png?resize=300%2C179\" alt=\"\" width=\"300\" height=\"179\" class=\"alignnone size-medium wp-image-490\" srcset=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png?resize=300%2C179&amp;ssl=1 300w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png?resize=768%2C459&amp;ssl=1 768w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png?resize=1024%2C611&amp;ssl=1 1024w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-04-23-24-07.png?w=1410&amp;ssl=1 1410w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<h3>\u6d41\u308c<\/h3>\n<hr \/>\n<ol>\n<li>\u30aa\u30ec\u30aa\u30ec\u8a8d\u8a3c\u5c40\u3092\u5efa\u3066\u308b (\u9762\u5012\u304f\u3055\u3044\u5834\u5408\u4ee5\u4e0b\u3092\u5168\u90e8\u3059\u3063\u98db\u3070\u3057\u3066\uff0c\u7121\u6599\u306e\u8a3c\u660e\u5c40\u3092\u4f7f\u3046\u624b\u3082\u3042\u308b\u3002\uff09<\/li>\n<li>iDRAC\u3067\u9069\u5f53\u306b\u57cb\u3081\u305fCSR\u751f\u6210\u3057\u3066\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9<\/li>\n<li>2.\u3067\u4f5c\u3063\u305fCSR\u306b1.\u306e\u8a8d\u8a3c\u5c40(CA)\u3068\u3057\u3066\u7f72\u540d\u3057\u305f\u8a3c\u660e\u66f8\u3092\u767a\u884c<\/li>\n<li>3.\u306e\u8a3c\u660e\u66f8\u3092iDRAC\u304b\u3089\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9<\/li>\n<li>iDRAC\u3092\u30ea\u30d6\u30fc\u30c8(\u3053\u308c\u5927\u4e8b\uff09<\/li>\n<\/ol>\n<h3>\u30aa\u30ec\u30aa\u30ec\u8a3c\u660e\u5c40\u3092\u5efa\u3066\u308b<\/h3>\n<hr \/>\n<p>\u9069\u5f53\u306aLinux\u30de\u30b7\u30f3\u306e\u4e0a\u3067\u30aa\u30ec\u30aa\u30ec\u8a8d\u8a3c\u5c40(CA)\u3092\u5efa\u3066\u308b\u3002<br \/>\n(\u4ee5\u964d\uff0cDebian9\u4e0a\u3067\u3084\u308b\u3053\u3068\u3092\u60f3\u5b9a)<\/p>\n<p>Debian\u306e\u5834\u5408demoCA\u3068\u3044\u3046\u30c0\u30df\u30fcCA\u306e\u8a2d\u5b9a\u304c \/etc\/ssl\/openssl.cnf \u3067\u3055\u308c\u3066\u3044\u308b\u306e\u3067\uff0c<br \/>\n\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u30aa\u30ec\u30aa\u30ecCA\u306e\u79d8\u5bc6\u9375\u3092\u4f5c\u308b\u3002<\/p>\n<h4>CA\u306e\u79d8\u5bc6\u9375\u3092\u751f\u6210\u3059\u308b<\/h4>\n<hr \/>\n<p><code><br \/>\n$ mkdir -p demoCA\/private<br \/>\n$ mkdir demoCA\/newcerts<br \/>\n$ openssl genrsa -aes256 -out .\/demoCA\/private\/cakey.pem 2048<br \/>\nGenerating RSA private key, 2048 bit long modulus<br \/>\n..............................................+++<br \/>\n...........................................+++<br \/>\ne is 65537 (0x010001)<br \/>\nEnter pass phrase for .\/demoCA\/private\/cakey.pem:<br \/>\nVerifying - Enter pass phrase for .\/demoCA\/private\/cakey.pem:<br \/>\n<\/code><\/p>\n<p>\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\uff12\u56de\u805e\u304b\u308c\u308b\u306e\u3067\uff0c\u9069\u5f53\u306b\u8a2d\u5b9a\u3057\u3066\u304a\u304f\u3002<br \/>\n\u3053\u308c\u3067 .\/demoCA\/private\/cakey.pem \u306b\u30aa\u30ec\u30aa\u30ecCA\u306e\u79d8\u5bc6\u9375\u304c\u3067\u304d\u308b\u3002<\/p>\n<h4>CA\u306e\u30aa\u30ec\u30aa\u30ec\u8a3c\u660e\u66f8\u306e\u767a\u884c\u8981\u6c42CSR\u3092\u751f\u6210\u3059\u308b<\/h4>\n<hr \/>\n<p><code><br \/>\n$ openssl req -new -key .\/demoCA\/private\/cakey.pem -out .\/demoCA\/cacert.csr<br \/>\nEnter pass phrase for .\/demoCA\/private\/cakey.pem:<br \/>\nYou are about to be asked to enter information that will be incorporated<br \/>\ninto your certificate request.<br \/>\nWhat you are about to enter is what is called a Distinguished Name or a DN.<br \/>\nThere are quite a few fields but you can leave some blank<br \/>\nFor some fields there will be a default value,<br \/>\nIf you enter '.', the field will be left blank.<\/p>\n<p>Country Name (2 letter code) [AU]:JP<br \/>\nState or Province Name (full name) [Some-State]:Kanagawa<br \/>\nLocality Name (eg, city) []:Fujisawa<br \/>\nOrganization Name (eg, company) [Internet Widgits Pty Ltd]:nyacom.net<br \/>\nOrganizational Unit Name (eg, section) []:Admin<br \/>\nCommon Name (e.g. server FQDN or YOUR name) []:nyacom.net<br \/>\nEmail Address []:webmaster@nyacom.net<br \/>\n<\/code><\/p>\n<p>\u30aa\u30ec\u30aa\u30ecCA\u306e\u8a3c\u660e\u66f8\u306a\u306e\u3067\u5185\u5bb9\u306f\u9069\u5f53\u3002\u3002<br \/>\n\u3053\u308c\u3067 .\/demoCA\/cacert.csr \u306bCSR\u304c\u3067\u304d\u308b\u306e\u3067\uff0c<br \/>\n\u3053\u308c\u306b\u3055\u3063\u304d\u4f5c\u3063\u305fCA\u79d8\u5bc6\u9375\u3067\u81ea\u5df1\u7f72\u540d\u3057\u3066\u8a3c\u660e\u66f8\u3092\u767a\u884c\u3059\u308b\u3002<\/p>\n<h4>\u30aa\u30ec\u30aa\u30ecCA\u306e\u8a3c\u660e\u66f8\u3092\u767a\u884c<\/h4>\n<hr \/>\n<p><code><br \/>\n$ openssl x509 -days 3650 -in .\/demoCA\/cacert.csr -req -signkey .\/demoCA\/private\/cakey.pem -out .\/demoCA\/cacert.pem<br \/>\nSignature ok<br \/>\nsubject=C = JP, ST = Kanagawa, L = Fujisawa, O = nyacom.net, OU = Admin, CN = nyacom.net, emailAddress = webmaster@nyacom.net<br \/>\nGetting Private key<br \/>\nEnter pass phrase for .\/demoCA\/private\/cakey.pem:<br \/>\n<\/code><\/p>\n<p>\u6709\u52b9\u671f\u9650(days)\u306f\u9069\u5f53\u306b10\u5e74(3650\u65e5)\u3068\u304b\u306b\u3057\u3068\u304f\u3002<\/p>\n<h4>CA\u3067\u7f72\u540d\u306b\u5fc5\u8981\u306a\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u308b<\/h4>\n<hr \/>\n<p><code><br \/>\n$ touch .\/demoCA\/index.txt<br \/>\n$ touch .\/demoCA\/index.txt.attr<br \/>\n$ echo 00 > .\/demoCA\/serial<br \/>\n<\/code><\/p>\n<p>\u4e0a\u306e3\u3064\u306e\u30d5\u30a1\u30a4\u30eb\u304c\u3044\u308b\u3063\u307d\u3044\u3002<\/p>\n<h3>iDRAC\u4e0a\u3067CSR\u3092\u751f\u6210<\/h3>\n<hr \/>\n<p>iDRAC\u306b\u30ed\u30b0\u30a4\u30f3\u3057\uff0c[iDRAC Settings]->[Network\/Security]->[SSL] \u3068\u8fbf\u3063\u3066\u3044\u304f\u3068<br \/>\n&#8220;Generate Certificate Signing Request (CSR) &#8221; \u3068\u3044\u3046\u9805\u76ee\u304b\u3089\u751f\u6210\u3067\u304d\u308b\u3002<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png\" rel=\"lightbox[486]\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"493\" data-permalink=\"https:\/\/nyacom.net\/?attachment_id=493\" data-orig-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png?fit=1398%2C831&amp;ssl=1\" data-orig-size=\"1398,831\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"idrac-GQDVNBX &amp;#8211; iDRAC6 &amp;#8211; SSL &amp;#8211; Mozilla Firefox_516\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png?fit=300%2C178&amp;ssl=1\" data-large-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png?fit=800%2C476&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png?resize=300%2C178\" alt=\"\" width=\"300\" height=\"178\" class=\"alignnone size-medium wp-image-493\" srcset=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png?resize=300%2C178&amp;ssl=1 300w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png?resize=768%2C457&amp;ssl=1 768w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png?resize=1024%2C609&amp;ssl=1 1024w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/idrac-GQDVNBX-iDRAC6-SSL-Mozilla-Firefox_516.png?w=1398&amp;ssl=1 1398w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>\u9069\u5f53\u306bCSR\u306e\u60c5\u5831\u3092\u57cb\u3081\u3066[Generate]\u3092\u62bc\u3059\u3053\u3068\u3067\uff0cCSR\u304c\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3067\u304d\u308b\u3002<\/p>\n<h3>\u30aa\u30ec\u30aa\u30ecCA\u3067iDRAC\u306eCSA\u3092\u7f72\u540d\u3057\u3066\u8a3c\u660e\u66f8\u3092\u767a\u884c\u3059\u308b<\/h3>\n<hr \/>\n<p><code><br \/>\n$ openssl ca -in nyacom6-bmc.csr -out idrac.crt -days 3650<br \/>\nUsing configuration from \/usr\/lib\/ssl\/openssl.cnf<br \/>\nEnter pass phrase for .\/demoCA\/private\/cakey.pem:<br \/>\nCheck that the request matches the signature<br \/>\nSignature ok<br \/>\nCertificate Details:<br \/>\n        Serial Number: 0 (0x0)<br \/>\n        Validity<br \/>\n            Not Before: Oct  5 13:52:51 2017 GMT<br \/>\n            Not After : Oct  3 13:52:51 2027 GMT<br \/>\n        Subject:<br \/>\n            countryName               = JP<br \/>\n            stateOrProvinceName       = Kanagawa<br \/>\n            organizationName          = nyacom.net<br \/>\n            organizationalUnitName    = Admin<br \/>\n            commonName                = nyacom6-bmc.nyacom.net<br \/>\n            emailAddress              = webmaster@nyacom.net<br \/>\n        X509v3 extensions:<br \/>\n            X509v3 Basic Constraints:<br \/>\n                CA:FALSE<br \/>\n            Netscape Comment:<br \/>\n                OpenSSL Generated Certificate<br \/>\n            X509v3 Subject Key Identifier:<br \/>\n                F3:7A:C1:93:F6:8B:BE:06:B8:9D:1B:A5:91:11:47:30:03:35:7F:D9<br \/>\n            X509v3 Authority Key Identifier:<br \/>\n                DirName:\/C=JP\/ST=Kanagawa\/L=Fujisawa\/O=nyacom.net\/OU=Admin\/CN=nyacom.net\/emailAddress=webmaster@nyacom.net<br \/>\n                serial:A6:AE:3B:E7:1E:41:44:72<\/p>\n<p>Certificate is to be certified until Oct  3 13:52:51 2027 GMT (3650 days)<br \/>\nSign the certificate? [y\/n]:yes<\/p>\n<p>1 out of 1 certificate requests certified, commit? [y\/n]y<br \/>\nWrite out database with 1 new entries<br \/>\nData Base Updated<br \/>\n<\/code><\/p>\n<p>\u30dd\u30a4\u30f3\u30c8\u306f\u81ea\u5df1\u7f72\u540d\u3067\u306f\u306a\u304f\u3066 ca \u3068\u3057\u3066\u7f72\u540d\u3059\u308b\u3053\u3068\u3068\uff0c<br \/>\n\u6709\u52b9\u671f\u9650\u3092\u9069\u5f53\u306b\u4f38\u3070\u3057\u3066\u304a\u304b\u306a\u3044\u3068\u6709\u52b9\u671f\u9650\u304c\u77ed\u3044\u8a3c\u660e\u66f8\u304c\u767a\u884c\u3055\u308c\u3066\u3057\u307e\u3046\u3002<\/p>\n<h3>iDRAC\u306b\u30aa\u30ec\u30aa\u30ecCA\u3067\u7f72\u540d\u3057\u305f\u8a3c\u660e\u66f8\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9<\/h3>\n<p>iDRAC\u306b\u30ed\u30b0\u30a4\u30f3\u3057\uff0c[iDRAC Settings]->[Network\/Security]->[SSL] \u3068\u8fbf\u3063\u3066\u3044\u304f\u3068<br \/>\n&#8220;Upload Server Certificate&#8221; \u3068\u3044\u3046\u9805\u76ee\u304b\u3089\u5148\u7a0b\u751f\u6210\u3057\u305f idrac.crt \u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3059\u308b\u3002<br \/>\n\u6210\u529f\u3059\u308b\u3068 &#8220;Upload Complete&#8221; \u3068\u3067\u3066BMC\u304c\u30ea\u30bb\u30c3\u30c8\u3055\u308c\u308b\u3002<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png\" rel=\"lightbox[486]\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"494\" data-permalink=\"https:\/\/nyacom.net\/?attachment_id=494\" data-orig-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png?fit=1410%2C848&amp;ssl=1\" data-orig-size=\"1410,848\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"Screenshot at 2017-10-05 23-08-46\" data-image-description=\"\" data-image-caption=\"\" data-medium-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png?fit=300%2C180&amp;ssl=1\" data-large-file=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png?fit=800%2C481&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png?resize=300%2C180\" alt=\"\" width=\"300\" height=\"180\" class=\"alignnone size-medium wp-image-494\" srcset=\"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png?resize=300%2C180&amp;ssl=1 300w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png?resize=768%2C462&amp;ssl=1 768w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png?resize=1024%2C616&amp;ssl=1 1024w, https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Screenshot-at-2017-10-05-23-08-46.png?w=1410&amp;ssl=1 1410w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<h3>\u6700\u5f8c\u306biDRAC\u3092\u30ea\u30d6\u30fc\u30c8<\/h3>\n<hr \/>\n<p>\u8a3c\u660e\u66f8\u66f4\u65b0\u3067iDRAC\u304c\u30ea\u30bb\u30c3\u30c8\u3055\u308c\u305f\u3089\uff0ciDRAC\u306b\u518d\u30ed\u30b0\u30a4\u30f3\u3057\u3066 [Reset iDRAC] \u304b\u3089BMC\u3092\u518d\u30ea\u30d6\u30fc\u30c8\u3059\u308b\u3002<br \/>\n\u3053\u3046\u3057\u306a\u3044\u3068KVM\u30bb\u30c3\u30b7\u30e7\u30f3\u306e\u8a3c\u660e\u66f8\u304c\u66f4\u65b0\u3055\u308c\u306a\u3044\uff08\uff1f\uff09\u3063\u307d\u3044\u3002<\/p>\n<p>\u3068\u308a\u3042\u3048\u305a\u8a3c\u660e\u66f8\u3092\u66f4\u65b0\u5f8c\u306f<br \/>\nopenjdk-8\u306eicedtea\u3067\u3082\u554f\u984c\u306a\u304fKVM\u30bb\u30c3\u30b7\u30e7\u30f3\u306b\u7e4b\u304c\u308b\u3088\u3046\u306b\u306a\u3063\u305f\u306e\u3067\u826f\u304b\u3063\u305f\u3002\u3002<\/p>\n<h2>FAQ<\/h2>\n<hr \/>\n<p>\u3068\u308a\u3042\u3048\u305a\u3076\u3061\u5f53\u305f\u3063\u305f\u30c8\u30e9\u30d6\u30eb\u30b7\u30e5\u30fc\u30c8\u3060\u3051\u30e1\u30e2\u3057\u3066\u304a\u304f\u3002<\/p>\n<h4>ca\u7f72\u540d\u6642\u306bfailed to update database, TXT_DB error number 2 \u3068\u304b\u51fa\u308b<\/h4>\n<ul>\n<li>\u4e00\u5ea6\u7f72\u540d\u3057\u305f\u8a3c\u660e\u66f8\u3092\u518d\u5ea6\u7f72\u540d\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u306e\u304c\u539f\u56e0<\/li>\n<li>\u524d\u306e\u8a3c\u660e\u66f8\u3092\u4e00\u5ea6\u7121\u52b9(revoke)\u306b\u3059\u308b\u304b\uff0c.\/demoCA\/index.txt \u6d88\u3057\u3066\u518d\u5ea6\u751f\u6210\u3059\u308b\u304b\u3059\u308c\u3070\u7f72\u540d\u3067\u304d\u308b<\/li>\n<\/ul>\n<h4>iDRAC\u304c\u4f5c\u3063\u305f\u8a3c\u660e\u66f8\u3092\u53d7\u3051\u4ed8\u3051\u3066\u304f\u308c\u306a\u3044\u3093\u3060\u3051\u3069?<\/h4>\n<ul>\n<li>\u304a\u305d\u3089\u304fiDRAC\u3067\u767a\u884c\u3057\u305fCSR\u3068\u7f72\u540d\u3057\u305f\u8a3c\u660e\u66f8\u304c\u3042\u3063\u3066\u306a\u3044<\/li>\n<li>iDRAC\u3067\u8a3c\u660e\u66f8\u3092\u518d\u5ea6\u767a\u884c\u3057\u3066\uff0c\u7f72\u540d\u5f8c\u306b\u518d\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u7ba1\u7406\u3057\u3066\u3044\u308bDELL PowerEdge R710\u306b\u8f09\u3063\u3066\u308bBMC(iDRAC6)\u306eKVM\u6a5f\u80fd\u304cJava8\u306b\u306a\u3063\u3066\u304b\u3089\u5b8c\u5168\u306b\u7e4b\u304c\u3089\u306a\u304f\u306a\u3063\u305f\u306e\u3067\u5bfe\u51e6\u3057\u3066\u307f\u305f\u3002<\/p>\n","protected":false},"author":1,"featured_media":495,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[12,1],"tags":[23,22,24],"class_list":["post-486","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","category-uncategorized","tag-dell","tag-idrac","tag-server"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/nyacom.net\/wp-content\/uploads\/2017\/10\/Selection_516.png?fit=681%2C573&ssl=1","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6V68f-7Q","jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/nyacom.net\/index.php?rest_route=\/wp\/v2\/posts\/486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nyacom.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nyacom.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nyacom.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nyacom.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=486"}],"version-history":[{"count":3,"href":"https:\/\/nyacom.net\/index.php?rest_route=\/wp\/v2\/posts\/486\/revisions"}],"predecessor-version":[{"id":497,"href":"https:\/\/nyacom.net\/index.php?rest_route=\/wp\/v2\/posts\/486\/revisions\/497"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nyacom.net\/index.php?rest_route=\/wp\/v2\/media\/495"}],"wp:attachment":[{"href":"https:\/\/nyacom.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nyacom.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nyacom.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}