import command

Use the import command to import a certificate into an IMM. You can only import a CA-signed certificate into the HTTPS Server Certificate Management section.

A CA-signed certificate differs from a self-signed certificate. In the SSL Client Certificate Management section for a CA-signed certificate, only CA-signed certificates can be imported. There are two settings:

SSL_LDAP_CLIENT_CERT
SSL_LDAP_CLIENT_CSR

For a self-signed certificate there are three settings:

SSL_CLIENT_TRUSTED_CERT1
SSL_CLIENT_TRUSTED_CERT2
SSL_CLIENT_TRUSTED_CERT3

Both self-signed and CA-signed certificates can be imported. If a certificate already exists, you must delete it before importing another certificate. The certificate to be imported should be in DER format.

import command syntax

OneCli.exe config import<setting> --file<importfilename>[--output<folder>]
[connection option]

Table 1. import command parameters
Parameter	Required/Optional	Notes
setting	Required	Certificate management setting
--file	Required	Import file name
--output	Optional	By default, the log file output is saved to: ../Onecli-%PID%-%date%-%time%/.
connection option	Optional	--imm <user:pwd@ip> Use for OOB. Use for in-band, if you know the LAN over USB IP of the target IMM. Use to specify the target IMM. --node <x> Use for inband cases on a multinode system. Where x is a numeric value that indicates the node number. For example, if "--node 2" the target IMM is in the second node of a multinode system.

Additional information

The import command is used for certificate management. The supported settings are certificate manage settings.

Use the showvalues command with the * value to get the settings list. The values after the * are for the supported certificate management settings:

IMM.SSH_SERVER_KEY=*generate
IMM.SSL_HTTPS_SERVER_CERT=*generate=import=export
IMM.SSL_HTTPS_SERVER_CSR=*generate=export
IMM.SSL_LDAP_CLIENT_CERT=*generate=import=export
IMM.SSL_LDAP_CLIENT_CSR=*generate=export
IMM.SSL_SERVER_DIRECTOR_CERT=*generate=import=export
IMM.SSL_SERVER_DIRECTOR_CSR=*generate=export
IMM.SSL_CLIENT_TRUSTED_CERT1=*import=export=deletecert
IMM.SSL_CLIENT_TRUSTED_CERT2=*import=export=deletecert
IMM.SSL_CLIENT_TRUSTED_CERT3=*import=export=deletecert

Example of the import command

OneCli.exe config import IMM.SSL_HTTPS_SERVER_CERT --file temp.cert
--imm USERID:PASSW0RD@10.240.252.102

This is the output generated from this example:

Lenovo ToolsCenterSuite CLI tcliXXX-X.X.X
Based on module version X.X.X
Licensed Materials - Property of Lenovo
(C) Copyright Lenovo Corp. 2013-2016 All Rights Reserved
Invoking SHOW command ...
Connected to IMM by IP address 10.240.252.102
Waiting for command completion status.
 Certificate was imported successfully!