Dell Technologies – Resources

V1.6.2: redfish_bios resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_bios (Resource)

This Terraform resource is used to configure Bios attributes of the iDRAC Server. We can Read the existing configurations or modify them using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_bios" "bios" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  // Bios attributes to be altered
  attributes = {
    "NumLock" = "On"
  }

  /* Reset parameters to be applied after bios settings are applied
     list of possible value:
      [ ForceRestart, GracefulRestart, PowerCycle]
  */
  reset_type    = "ForceRestart"
  reset_timeout = "120"
  // The maximum amount of time to wait for the bios job to be completed
  bios_job_timeout = "1200"

  // by default, the resource uses the first system
  # system_id = "System.Embedded.1"
}

After the successful execution of the above resource block, Bios configuration would have been altered. It can be verified through state file.

Schema

Optional

attributes (Map of String) The Bios attribute map.
bios_job_timeout (Number) bios_job_timeout is the time in seconds that the provider waits for the bios update job to becompleted before timing out.
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
reset_timeout (Number) reset_timeout is the time in seconds that the provider waits for the server to be reset before timing out.
reset_type (String) Reset type to apply on the computer system after the BIOS settings are applied. Applicable values are ‘ForceRestart’, ‘GracefulRestart’, and ‘PowerCycle’.Default = “GracefulRestart”.
settings_apply_time (String) The time when the BIOS settings can be applied. Applicable value is ‘OnReset’ only. In upcoming releases other apply time values will be supported. Default is “OnReset”.
system_id (String) System ID of the system

Read-Only

id (String) The ID of the resource.

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform import redfish_bios.bios "{\"username\":\"<username>\",\"password\":\"<password>\",\"endpoint\":\"<endpoint>\",\"ssl_insecure\":<true/false>}"

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_bios.bios "{\"redfish_alias\":\"<redfish_alias>\"}"

This will import the storage volume instance with specified ID into your Terraform state.
After successful import, you can run terraform state list to ensure the resource has been imported successfully.
Now, you can fill in the resource block with the appropriate arguments and settings that match the imported resource’s real-world configuration.
Execute terraform plan to see if your configuration and the imported resource are in sync. Make adjustments if needed.
Finally, execute terraform apply to bring the resource fully under Terraform’s management.
Now, the resource which was not part of terraform became part of Terraform managed infrastructure.

V1.6.2: redfish_boot_order resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_boot_order (Resource)

This Terraform resource is used to configure Boot Order and enable/disable Boot Options of the iDRAC Server. We can Read the existing configurations or modify them using this resource.

~> Note: boot_order and boot_options are mutually exclusive.

Example Usage

variables.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_boot_order" "boot" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }
  // sets the boot devices in the required boot order sequences
  boot_order = ["Boot0001", "Boot0000", "Boot0002", "Boot0003"]

  // Options to enable or disable the boot device. Uncomment the same and comment the boot_order to use this.
  // boot_options = [{boot_option_reference= "Boot0000", boot_option_enabled= false}]

  /* Reset parameters to be applied after bios settings are applied
     list of possible value:
      [ ForceRestart, GracefulRestart, PowerCycle]
  */
  reset_type    = "ForceRestart"
  reset_timeout = "120"
  // The maximum amount of time to wait for the bios job to be completed
  boot_order_job_timeout = "1200"

  // by default, the resource uses the first system
  # system_id = "System.Embedded.1"
}

After the successful execution of the above resource block, the boot order would have been configured. More details can be verified through state file.

Schema

Required

reset_type (String) Reset type allows to choose the type of restart to apply when firmware upgrade is scheduled. Possible values are: “ForceRestart”, “GracefulRestart” or “PowerCycle”

Optional

boot_options (Attributes List) Options to enable or disable the boot device. (see below for nested schema)
boot_order (List of String) sets the boot devices in the required boot order sequences.
boot_order_job_timeout (Number) Time in seconds that the provider waits for the BootSource override job to be completed before timing out.
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
reset_timeout (Number) Time in seconds that the provider waits for the server to be reset before timing out.
system_id (String) System ID of the system

Read-Only

id (String) ID of the Boot Order Resource

Nested Schema for `boot_options`

Required:

boot_option_enabled (Boolean) Enable or disable the boot device.

Optional:

boot_option_reference (String) FQDD of the boot device.

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# The synatx is:
# terraform import redfish_boot_order.boot "{\"username\":\"<username>\",\"password\":\"<password>\",\"endpoint\":\"<endpoint>\",\"ssl_insecure\":<true/false>}"

terraform import redfish_boot_order.boot '{"username":"admin","password":"passw0rd","endpoint":"https://my-server-1.myawesomecompany.org","ssl_insecure":true}'

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_boot_order.boot '{"redfish_alias":"<redfish_alias>"}'

This will import the boot order instance into your Terraform state.
After successful import, you can run terraform state list to ensure the resource has been imported successfully.
Now, you can fill in the resource block with the appropriate arguments and settings that match the imported resource’s real-world configuration.
Execute terraform plan to see if your configuration and the imported resource are in sync. Make adjustments if needed.
Finally, execute terraform apply to bring the resource fully under Terraform’s management.
Now, the resource which was not part of terraform became part of Terraform managed infrastructure.

V1.6.2: redfish_boot_source_override resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_boot_source_override (Resource)

This Terraform resource is used to configure Boot sources of the iDRAC Server.

~> Note: If the state in boot_source_override_enabled is set once or continuous, the value is reset to disabled after the boot_source_override_target actions have completed successfully.

~> Note: Changes to these options do not alter the BIOS persistent boot order configuration.

Example Usage

variables.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_boot_source_override" "boot" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  // boot source override parameters
  boot_source_override_enabled = "Once"
  /* list of possible boot source override targets : 
      [ None, Pxe, Floppy, Cd, Usb, Hdd, 
        BiosSetup, Utilities, Diags, UefiShell,UefiTarget
        SDCard, UefiHttp, RemoteDrive, UefiBootNext]
  */
  boot_source_override_target = "UefiTarget"

  # 17G device has only one boot_source_override_mode i.e UEFI and this is non modifiable 
  # boot_source_override_mode can be modified for below 17G device only
  boot_source_override_mode = "UEFI"

  /* Reset parameters to be applied after bios settings are applied
     list of possible value:
      [ ForceRestart, GracefulRestart, PowerCycle]
  */
  reset_type    = "GracefulRestart"
  reset_timeout = "120"
  # // The maximum amount of time to wait for the bios job to be completed
  boot_source_job_timeout = "1200"

  // by default, the resource uses the first system
  # system_id = "System.Embedded.1"
}

After the successful execution of the above resource block, the boot source overrides would have been configured. More details can be verified through state file.

Schema

Required

reset_type (String) Reset type allows to choose the type of restart to apply when firmware upgrade is scheduled. Possible values are: “ForceRestart”, “GracefulRestart” or “PowerCycle”

Optional

boot_source_job_timeout (Number) Time in seconds that the provider waits for the BootSource override job to be completed before timing out.
boot_source_override_enabled (String) The state of the Boot Source Override feature.
boot_source_override_mode (String) The BIOS boot mode to be used when boot source is booted from.
boot_source_override_target (String) The boot source override target device to use during the next boot instead of the normal boot device.
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
reset_timeout (Number) Time in seconds that the provider waits for the server to be reset before timing out.
system_id (String) System ID of the system
uefi_target_boot_source_override (String) The UEFI device path of the device from which to boot when boot_source_override_target is UefiTarget

Read-Only

id (String) ID of the Boot Source Override Resource

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

V1.6.2: redfish_certificate resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_certificate (Resource)

Resource for import the ssl certificate to iDRAC, on the basis of input parameter Type. After importing the certificate, the iDRAC will automatically restart.

~> Note: By default, the iDRAC comes with a self-signed certificate for its web server. If user wants to replace with her own server certificate (signed by Trusted CA). We support two kinds of SSL certificates (1) Server certificate (2) Custom certificate

~> Note: Server Certificate: Steps:- (1) Generate the CSR from iDrac. (2) Create the certificate using CSR and sign with trusted CA. (3) The certificate should be signed with hashing algorithm equivalent to sha256

~> Note: Custom Certificate: Steps:- (1) An externally created custom certificate which can be imported into the iDRAC. (2) Convert the external custom certificate into PKCS#12 format and should be encoded via base64. The converion will require passphrase which should be provided in ‘passphrase’ attribute."

Example Usage

variables.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

data "local_file" "cert" {
  # this is the path to the certificate that we want to upload.
  filename = "/root/certificate/new/terraform-provider-redfish/test-data/valid-cert.txt"
}

resource "redfish_certificate" "cert" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  /* Type of the certificate to be imported
   List of possible values: [CustomCertificate, Server]
  */
  certificate_type        = "CustomCertificate"
  passphrase              = "12345"
  ssl_certificate_content = data.local_file.cert.content
}

After the successful execution of the above resource block, the iDRAC web server would have been configured with the provided SSL certificate. More details can be verified through state file.

Schema

Required

certificate_type (String) Type of the certificate to be imported.
ssl_certificate_content (String) SSLCertificate File require content of certificate supported certificate type: “CustomCertificate” - The certificate must be converted pkcs#12 format to encoded in Base64 and entire Base64 Content is required. The passphrase that was used to convert the certificate to pkcs#12 format must also be provided in “passphrase” attribute. “Server” - Certificate Content is required. Note - The certificate should be signed with hashing algorithm equivalent to sha256.

Optional

passphrase (String, Sensitive) A passphrase for certificate file. Note: This is optional parameter for CSC certificate, and not required for Server and CA certificates.
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)

Read-Only

id (String) ID

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

V1.6.2: redfish_dell_idrac_attributes resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_dell_idrac_attributes (Resource)

This Terraform resource is used to configure iDRAC attributes of the iDRAC Server. We can Read the existing configurations or modify them using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_dell_idrac_attributes" "idrac" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  // iDRAC attributes to be modified
  attributes = {
    "Users.3.Enable"   = "Disabled"
    "Users.3.UserName" = "mike"
    "Users.3.Password" = "test1234"
    # 17G do not supports Users.x.Privilege,
    # To Update Privileges Please use Users.x.Role configuration, valid values for this
    # (ReadOnly,Operator,Administrator instead of Privilege number)
    # "Users.3.Role"                      = "ReadOnly"

    # Only below 17G Supports Users.x.Privilege, for 17G device remove below Privilege config
    "Users.3.Privilege" = 511

    "Redfish.1.NumericDynamicSegmentsEnable" = "Disabled"
    "SysLog.1.PowerLogInterval"              = "5"
    "Time.1.Timezone"                        = "CST6CDT"
  }
}

After the successful execution of the above resource block, iDRAC attributes configuration would have been altered. It can be verified through state file.

Schema

Required

attributes (Map of String) iDRAC attributes. To check allowed attributes please either use the datasource for dell idrac attributes or query /redfish/v1/Managers/iDRAC.Embedded.1/Oem/Dell/DellAttributes/iDRAC.Embedded.1. To get allowed values for those attributes, check /redfish/v1/Registries/ManagerAttributeRegistry/ManagerAttributeRegistry.v1_0_0.json from a Redfish Instance

Optional

redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)

Read-Only

id (String) ID of the iDRAC attributes resource

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# import all idrac attributes
terraform import redfish_dell_idrac_attributes.idrac '{"username":"<user>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>}'

# import list of idrac attributes
terraform import redfish_dell_idrac_attributes.idrac '{"username":"<user>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>, "attributes":["Users.2.UserName"]}'

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_dell_idrac_attributes.idrac '{"redfish_alias":"<redfish_alias>"}'

V1.6.2: redfish_dell_lc_attributes resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_dell_lc_attributes (Resource)

This Terraform resource is used to configure Lifecycle Controller attributes of the iDRAC Server. We can Read the existing configurations or modify them using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_dell_lc_attributes" "lc" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  // LC attributes to be modified
  attributes = {
    "LCAttributes.1.IgnoreCertWarning"               = "On"
    "LCAttributes.1.CollectSystemInventoryOnRestart" = "Disabled"
  }
}

After the successful execution of the above resource block, iDRAC attributes configuration would have been altered. It can be verified through state file.

Schema

Required

attributes (Map of String) Lifecycle Controller attributes. To check allowed attributes please either use the datasource for dell LC attributes or query /redfish/v1/Managers/iDRAC.Embedded.1/Oem/Dell/DellAttributes/LifecycleController.Embedded.1 To get allowed values for those attributes, check /redfish/v1/Registries/ManagerAttributeRegistry/ManagerAttributeRegistry.v1_0_0.json from a Redfish Instance

Optional

redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)

Read-Only

id (String) ID of the LC attributes resource

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# import all LC attributes
terraform import redfish_dell_lc_attributes.lc '{"username":"<user>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>}'

# import list of LC attributes
terraform import redfish_dell_lc_attributes.lc '{"username":"<user>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>, "attributes":["LCAttributes.1.IgnoreCertWarning"]}'

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_dell_lc_attributes.lc '{"redfish_alias":"<redfish_alias>"}'

V1.6.2: redfish_dell_system_attributes resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_dell_system_attributes (Resource)

This Terraform resource is used to configure System attributes of the iDRAC Server. We can Read the existing configurations or modify them using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_dell_system_attributes" "system" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  // System attributes to be modified
  attributes = {
    # If `PlatformCapability.1.PSPFCCapable` is Enabled then only will be able to modify `ServerPwr.1.PSPFCEnabled`
    "ServerPwr.1.PSPFCEnabled" = "Disabled"
    "SupportInfo.1.Outsourced" = "Yes"
  }
}

After the successful execution of the above resource block, iDRAC System attributes configuration would have been altered. It can be verified through state file.

Schema

Required

attributes (Map of String) System attributes. To check allowed attributes please either use the datasource for dell System attributes or query /redfish/v1/Managers/iDRAC.Embedded.1/Oem/Dell/DellAttributes/System.Embedded.1 To get allowed values for those attributes, check /redfish/v1/Registries/ManagerAttributeRegistry/ManagerAttributeRegistry.v1_0_0.json from a Redfish Instance

Optional

redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)

Read-Only

id (String) ID of the System attributes resource

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# import all System attributes
terraform import redfish_dell_system_attributes.system '{"username":"<user>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>}'

# import list of System attributes
terraform import redfish_dell_system_attributes.system '{"username":"<user>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>, "attributes":["ServerPwr.1.PSPFCEnabled"]}'

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_dell_system_attributes.system '{"redfish_alias":"<redfish_alias>"}'

V1.6.2: redfish_directory_service_auth_provider resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_directory_service_auth_provider (Resource)

This Terraform resource is used to configure Directory Service Auth Provider Active Directory and LDAP Service We can Read the existing configurations or modify them using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2024-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# kerberod file is not supported by 17G and this configuration works only for below 17G
data "local_file" "kerberos" {
  # this is the path to the kerberos keytab file that we want to upload.
  # this file must be base64 encoded format
  filename = "/root/directoryservice/new/terraform-provider-redfish/test-data/kerberos_file.txt"
}

# redfish_directory_service_auth_provider Terraform resource is used to configure Directory Service Auth Provider Active Directory and LDAP Service
# Available action: Create, Update (Active Directory, LDAP)
# Active Directory (Create, Update): remote_role_mapping, service_addresses, service_enabled,authentication, active_directory_attributes
# LDAP (Create, Update): remote_role_mapping, service_addresses, service_enabled,ldap_service, ldap_attributes
# This resource will allow to configure AD for below 17G
resource "redfish_directory_service_auth_provider" "ds_auth_ad" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  #Note: `active_directory` is mutually inclusive with `active_directory_attributes`.
  #Note: `ldap` is mutually inclusive with `ldap_attributes`.
  #Note: `active_directory` is mutually exclusive with `ldap`.
  #Note: `active_directory_attributes` is mutually exclusive with `ldap_attributes`. 
  active_directory = {
    directory = {
      # remote_role_mapping = [
      #     {
      #         local_role = "Administrator",
      #         remote_group = "idracgroup"
      #     }
      # ],
      # To Update service addresses for 17G please provide configuration in active_directory_attributes
      # This configuration will be working once the issue for 17G get resolved 
      # service_addresses = [
      #     "yulanadhost11.yulan.pie.lab.emc.com"
      #  ],
      service_enabled = true,
      # authentication configuration works for below 17G server, 17G server do not support kerberos
      authentication = {
        kerberos_key_tab_file = data.local_file.kerberos.content
      }
    }
  }

  active_directory_attributes = {
    "ActiveDirectory.1.AuthTimeout"          = "120",
    "ActiveDirectory.1.CertValidationEnable" = "Enabled",
    "ActiveDirectory.1.DCLookupEnable"       = "Enabled",

    # DomainController can be configured when DCLookupEnable is Disabled
    # To update service addresses for 17G please provide below configuration
    #"ActiveDirectory.1.DomainController1"= "yulanadhost1.yulan.pie.lab.emc.com",
    #"ActiveDirectory.1.DomainController2"= "yulanadhost2.yulan.pie.lab.emc.com",
    #"ActiveDirectory.1.DomainController3"= "yulanadhost3.yulan.pie.lab.emc.com",

    # RacName and RacDomain can be configured when Schema is Extended Schema which is supported by below 17G server
    "ActiveDirectory.1.RacDomain" = "test",
    "ActiveDirectory.1.RacName"   = "test",

    # SSOEnable configuration can be done for below 17G server and it's not supported by 17G server
    # if SSOEnable is Enabled make sure ActiveDirectory Service is enabled and valid kerberos_key_tab_file is provided
    "ActiveDirectory.1.SSOEnable" = "Disabled",

    # Schema can be Extended Schema or Standard Schema
    # Schema configuration can be done for below 17G, and this configuration is not supported by 17G 
    "ActiveDirectory.1.Schema" = "Extended Schema",
    "UserDomain.1.Name"        = "yulan.pie.lab.emc.com",

    # DCLookupByUserDomain must be configured when DCLookupEnable is enabled 
    "ActiveDirectory.1.DCLookupByUserDomain" : "Enabled",

    # DCLookupDomainName must be configured when DCLookupByUserDomain is Disabled and DCLookupEnable is Enabled
    #"ActiveDirectory.1.DCLookupDomainName"="test", 

    #"ActiveDirectory.1.GCLookupEnable" = "Disabled"

    # for 17G below configuration can be performed without schema configuration
    # at least any one from GlobalCatalog1,GlobalCatalog2,GlobalCatalog3 must be configured when Schema is Standard and GCLookupEnable is Disabled
    # "ActiveDirectory.1.GlobalCatalog1" = "yulanadhost11.yulan.pie.lab.emc.com",
    # "ActiveDirectory.1.GlobalCatalog2" = "yulanadhost11.yulan.pie.lab.emc.com",
    # "ActiveDirectory.1.GlobalCatalog3" = "yulanadhost11.yulan.pie.lab.emc.com", 

    # GCRootDomain can be configured when GCLookupEnable is Enabled  
    #"ActiveDirectory.1.GCRootDomain" = "test"     
  }
}

# This resource will allow to configure LDAP for below 17G
resource "redfish_directory_service_auth_provider" "ds_auth_ldap" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  #Note: `active_directory` is mutually inclusive with `active_directory_attributes`.
  #Note: `ldap` is mutually inclusive with `ldap_attributes`.
  #Note: `active_directory` is mutually exclusive with `ldap`.
  #Note: `active_directory_attributes` is mutually exclusive with `ldap_attributes`. 

  ldap = {
    directory = {
      remote_role_mapping = [
        {
          local_role   = "Administrator",
          remote_group = "cn = idracgroup,cn = users,dc = yulan,dc = pie,dc = lab,dc = emc,dc = com"
        }
      ],
      #   To Update LDAP service addresses for 17G please provide configuration in ldap_attributes
      service_addresses = [
        "yulanadhost12.yulan.pie.lab.emc.com"
      ],
      service_enabled = false
    },
    ldap_service = {
      search_settings = {
        base_distinguished_names = [
          "dc = yulan,dc = pie,dc = lab,dc = emc,dc = com"
        ],
        group_name_attribute = "name",
        user_name_attribute  = "member"
      }
    }
  }

  ldap_attributes = {
    "LDAP.1.GroupAttributeIsDN" = "Enabled"
    "LDAP.1.Port"               = "636",
    "LDAP.1.BindDN"             = "cn = adtester,cn = users,dc = yulan,dc = pie,dc = lab,dc = emc,dc = com",
    "LDAP.1.BindPassword"       = "",
    "LDAP.1.SearchFilter"       = "(objectclass = *)",
    #   To Update LDAP service addresses for 17G please provide below configuration
    #   "LDAP.1.Server": "yulanadhost12.yulan.pie.lab.emc.com",

  }
}

# This resource will allow to configure AD for 17G and above
resource "redfish_directory_service_auth_provider" "ds_auth_17g_ad" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  active_directory = {
    directory = {
      service_enabled = false
      remote_role_mapping = [
        {
          local_role   = "Administrator",
          remote_group = "idracgroup"
        }
      ],
    }
  }

  active_directory_attributes = {
    "ActiveDirectory.1.AuthTimeout"          = "110",
    "ActiveDirectory.1.CertValidationEnable" = "Enabled",
    "ActiveDirectory.1.DCLookupEnable"       = "Enabled",
    "UserDomain.1.Name"                      = "yulan.pie.lab.emc.com",
    "ActiveDirectory.1.DCLookupByUserDomain" : "Enabled",
    "ActiveDirectory.1.GCLookupEnable" = "Disabled",
    "ActiveDirectory.1.GlobalCatalog1" = "yulanadhost.yulan.pie.lab.emc.com",
  }

}

# This resource will allow to configure LDAP for 17G and above
resource "redfish_directory_service_auth_provider" "ds_auth_17g_ldap" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  ldap = {
    directory = {
      remote_role_mapping = [
        {
          local_role   = "Administrator",
          remote_group = "cn = idracgroup,cn = users,dc = yulan,dc = pie,dc = lab,dc = emc,dc = com"
        }
      ],
      service_enabled = false
    },
    ldap_service = {
      search_settings = {
        base_distinguished_names = [
          "dc = yulan,dc = pie,dc = lab,dc = emc,dc = com"
        ],
        group_name_attribute = "name",
        user_name_attribute  = "member"
      }
    }
  }

  ldap_attributes = {
    "LDAP.1.GroupAttributeIsDN" = "Enabled"
    "LDAP.1.Port"               = "636",
    "LDAP.1.BindDN"             = "cn = adtester,cn = users,dc = yulan,dc = pie,dc = lab,dc = emc,dc = com",
    "LDAP.1.BindPassword"       = "",
    "LDAP.1.SearchFilter"       = "(objectclass = *)",
    #   To Update LDAP service addresses for 17G please provide below configuration
    "LDAP.1.Server" : "yulanadhost12.yulan.pie.lab.emc.com",

  }

}

After the successful execution of the above resource block, the directory service auth provider would have been configured. More details can be verified through state file.

Schema

Optional

active_directory (Attributes) Active DirectoryNote: active_directory is mutually inclusive with active_directory_attributes. , Note: active_directory is mutually exclusive with ldap. (see below for nested schema)
active_directory_attributes (Map of String) ActiveDirectory.* attributes in Dell iDRAC attributes.Note: active_directory is mutually inclusive with active_directory_attributes. , Note: active_directory_attributes is mutually exclusive with ldap_attributes.
ldap (Attributes) LDAPNote: ldap is mutually inclusive with ldap_attributes. , Note: active_directory is mutually exclusive with ldap. (see below for nested schema)
ldap_attributes (Map of String) LDAP.* attributes in Dell iDRAC attributes.Note: ldap is mutually inclusive with ldap_attributes. , Note: active_directory_attributes is mutually exclusive with ldap_attributes.
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)

Read-Only

id (String) ID of the Directory Service Auth Provider resource

Nested Schema for `active_directory`

Optional:

authentication (Attributes) Authentication information for the account provider. (see below for nested schema)
directory (Attributes) Directory for Active Directory . (see below for nested schema)

Nested Schema for `active_directory.authentication`

Optional:

kerberos_key_tab_file (String) KerberosKeytab is a Base64-encoded version of the Kerberos keytab for this Service

Nested Schema for `active_directory.directory`

Optional:

remote_role_mapping (Attributes List) Mapping rules that are used to convert the account providers account information to the local Redfish role (see below for nested schema)
service_addresses (List of String) ServiceAddresses of the account providers
service_enabled (Boolean) ServiceEnabled indicate whether this service is enabled.

Nested Schema for `active_directory.directory.remote_role_mapping`

Optional:

local_role (String) Role Assigned to the Group.
remote_group (String) Name of the remote group.

Nested Schema for `ldap`

Optional:

directory (Attributes) Directory for LDAP. (see below for nested schema)
ldap_service (Attributes) LDAPService is any additional mapping information needed to parse a generic LDAP service. (see below for nested schema)

Nested Schema for `ldap.directory`

Optional:

remote_role_mapping (Attributes List) Mapping rules that are used to convert the account providers account information to the local Redfish role (see below for nested schema)
service_addresses (List of String) ServiceAddresses of the account providers
service_enabled (Boolean) ServiceEnabled indicate whether this service is enabled.

Nested Schema for `ldap.directory.remote_role_mapping`

Optional:

local_role (String) Role Assigned to the Group.
remote_group (String) Name of the remote group.

Nested Schema for `ldap.ldap_service`

Optional:

search_settings (Attributes) SearchSettings is the required settings to search an external LDAP service. (see below for nested schema)

Nested Schema for `ldap.ldap_service.search_settings`

Optional:

base_distinguished_names (List of String) BaseDistinguishedNames is an array of base distinguished names to use to search an external LDAP service.
group_name_attribute (String) GroupNameAttribute is the attribute name that contains the LDAP group name.
user_name_attribute (String) UsernameAttribute is the attribute name that contains the LDAP user name.

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform import redfish_directory_service_auth_provider.ds_auth '{"username":"<username>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>}'

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_directory_service_auth_provider.ds_auth '{"redfish_alias":"<redfish_alias>"}'

This will import the Directory Service Auth Provider configuration into your Terraform state.
After successful import, you can run terraform state list to ensure the resource has been imported successfully.
Now, you can fill in the resource block with the appropriate arguments and settings that match the imported resource’s real-world configuration.
Execute terraform plan to see if your configuration and the imported resource are in sync. Make adjustments if needed.
Finally, execute terraform apply to bring the resource fully under Terraform’s management.
Now, the resource which was not part of terraform became part of Terraform managed infrastructure.

V1.6.2: redfish_directory_service_auth_provider_certificate resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_directory_service_auth_provider_certificate (Resource)

This Terraform resource is used to configure Directory Service Auth Provider certificate

Example Usage

variables.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2024-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

data "local_file" "ds_certificate" {
  # this is the path to the certificate that we want to upload.
  filename = "/root/certificate/new/terraform-provider-redfish/test-data/valid-ds-cert.txt"
}

resource "redfish_directory_service_auth_provider_certificate" "ds_auth_certificate" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  # certificate type can be PEM
  certificate_type   = "PEM"
  certificate_string = data.local_file.ds_certificate.content
}

After the successful execution of the above resource block, the directory service auth provider certificate would have been configured. More details can be verified through state file.

Schema

Required

certificate_string (String) Encrypted Certificate
certificate_type (String) certificate Type

Optional

redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)

Read-Only

id (String) ID of the Directory Service Auth Provider Certificate resource

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

V1.6.2: redfish_idrac_firmware_update resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_idrac_firmware_update (Resource)

This Terraform resource is used to Update firmware of the iDRAC Server based on a catalog.

Example Usage

variables.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

// Resource to manage lifecycle for redfish_idrac_firmware_update
resource "terraform_data" "always_run" {
  input = timestamp()
}

resource "redfish_idrac_firmware_update" "update" {
  //  This resource is supposed to be replaced each time we run terraform apply.
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }
  # Required
  // IP address for the remote share.
  ip_address = "xx.xx.xx.xx"
  // Type of the Network Share.
  share_type = "HTTP" # "CIFS" | "NFS" | "HTTP" | "HTTPS" | "FTP" | "TFTP"

  // These two fields should are set to true by default. It will check the repository for any updates that are available for the server and apply those updates.
  // If you do not want to apply the updates and just want to get the details for the updates available,you can set these fields to false.
  # apply_update = true  # Default is true
  # reboot_needed = true # Default is true

  # Optional fields(Based on  share Type)

  // Name of the CIFS share or full path to the NFS share. Optional for HTTP/HTTPS share (if supported), this may be treated as the path of the directory containing the file.
  # share_name = "idrac-firmware"

  // Name of the catalog file on the repository. Default is Catalog.xml.
  # catalog_file_name = "5_10_50_00_A00_Catalog.xml"

  // Username and Password for the remote share. They must be provided for CIFS.
  #  share_user = "username"
  #  share_password = "password"

  # Proxy Settings
  # proxy_support = "ParametersProxy" # "ParametersProxy" | "Off" , Default is "Off"
  # proxy_server = "xx.xx.xx.xx"
  # proxy_port = 80

  // by default, the resource uses the first system
  # system_id = "System.Embedded.1"

  // This will allow terraform create process to trigger each time we run terraform apply.
  lifecycle {
    replace_triggered_by = [
      terraform_data.always_run
    ]
  }

}

After the successful execution of the above resource block, iDRAC firmware attributes configuration would have been altered. It can be verified through state file.

Schema

Required

ip_address (String) IP address for the remote share.
share_type (String) Type of the Network Share.

Optional

apply_update (Boolean) If ApplyUpdate is set to true, the updatable packages from Catalog XML are staged. If it is set to False, no updates are applied but the list of updatable packages can be seen in the UpdateList.Default is true.
catalog_file_name (String) Name of the catalog file on the repository. Default is Catalog.xml.
ignore_cert_warning (String) Specifies if certificate warning should be ignored when HTTPS is used. If ignore_cert_warning is On,warnings are ignored. Default is On.
mount_point (String) The local directory where the share should be mounted.
proxy_password (String) The password for the proxy server.
proxy_port (Number) The Port for the proxy server.Default is set to 80.
proxy_server (String) The IP address of the proxy server.This IP will not be validated. The download job will be created even forinvalid proxy_server.Please check the results of the job for error details.This is required when proxy_support is ParametersProxy.
proxy_support (String) Specifies if a proxy should be used. Default is Off. This option is only used for HTTP, HTTPS, and FTP shares.
proxy_type (String) The proxy type of the proxy server. Default is (HTTP).
proxy_username (String) The user name for the proxy server.
reboot_needed (Boolean) This property indicates if a reboot should be performed. True indicates that the system (host) is rebooted duringthe update process. False indicates that the updates take effect after the system is rebooted the next time.Default is true.
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
share_name (String) Name of the CIFS share or full path to the NFS share. Optional for HTTP/HTTPS share (if supported)this may be treated as the path of the directory containing the file.
share_password (String) Network share user password. This option is mandatory for CIFS Network Share.
share_user (String) Network share user in the format ‘user@domain’ or ‘domain\user’ if user is part of a domain else ‘user’.This option is mandatory for CIFS Network Share.
system_id (String) System ID of the system

Read-Only

id (String) ID of the iDRAC Firmware Update Resource.
update_list (Attributes List) List of properties of the update list. (see below for nested schema)

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Nested Schema for `update_list`

Read-Only:

criticality (String) Criticality of the package update.
current_package_version (String) Current version of the package.
display_name (String) Display name of the package.
job_id (String) ID of the job if it’s triggered.
job_message (String) Message from the job if it’s triggered.
job_status (String) Status of the job if it’s triggered.
package_name (String) Name of the package to be updated.
reboot_type (String) Reboot type of the package update.
target_package_version (String) Target version of the package.

V1.6.2: redfish_idrac_server_configuration_profile_export resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_idrac_server_configuration_profile_export (Resource)

Resource for managing iDRAC Server Configuration Profile export on iDRAC Server.

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

variable "cifs_username" {
  type    = string
  default = "awesomeadmin"
}

variable "cifs_password" {
  type    = string
  default = "C00lP@ssw0rd"

}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
resource "terraform_data" "trigger_by_timestamp" {
  input = timestamp()
}

resource "redfish_idrac_server_configuration_profile_export" "share_type_local" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename   = "demo_local.xml"
    target     = ["NIC"]
    share_type = "LOCAL"
  }
  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

resource "redfish_idrac_server_configuration_profile_export" "share_type_nfs" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename   = "demo_nfs.xml"
    target     = ["NIC"]
    share_type = "NFS"
    ip_address = "10.0.0.01"
    share_name = "/dell/terraform-idrac-nfs"
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

resource "redfish_idrac_server_configuration_profile_export" "share_type_cifs" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename   = "demo_cifs.xml"
    target     = ["NIC"]
    share_type = "CIFS"
    ip_address = "10.0.0.02"
    share_name = "/dell/terraform-idrac-nfs"
    username   = var.cifs_username
    password   = var.cifs_password
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

resource "redfish_idrac_server_configuration_profile_export" "share_type_https" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename    = "demo_https.xml"
    target      = ["NIC"]
    share_type  = "HTTPS"
    ip_address  = "10.0.0.03"
    port_number = 443
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

resource "redfish_idrac_server_configuration_profile_export" "share_type_http" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename      = "demo_http.xml"
    target        = ["NIC"]
    share_type    = "HTTP"
    ip_address    = "10.0.0.04"
    port_number   = 80
    proxy_support = true
    proxy_server  = "10.0.0.05"
    proxy_port    = 5000
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

After the successful execution of the above resource block, Server Configuration Profile will be exported to share type.

Schema

Required

share_parameters (Attributes) Share Parameters (see below for nested schema)

Optional

export_format (String) Specify the output file format.
export_use (String) Specify the type of Server Configuration Profile (SCP) to be exported.
include_in_export (List of String) Include In Export
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)

Read-Only

file_content (String) File Content
id (String) ID of the export SCP resource

Nested Schema for `share_parameters`

Required:

filename (String) File Name - The name of the server configuration profile file to export.
share_type (String) Share Type - The type of share being used to export the Server Configuration Profile file.

Optional:

ignore_certificate_warning (Boolean) Ignore Certificate Warning
ip_address (String) IPAddress - The IP address of the target export server.
password (String, Sensitive) Password - The password for the share server user account. This password is required if the share type is set to “CIFS”. It is required only if the share type is set to “CIFS”. It is not required if the share type is set to “NFS”.
port_number (Number) Port Number - The port number used to communicate with the share server. The default value is 80.
proxy_password (String, Sensitive) The password for the proxy server. This is required if the proxy_support parameter is set to true. It is used for authenticating the proxy server credentials.
proxy_port (Number) The port number used by the proxy server. This parameter is optional. If not provided, the default port number (80) is used for the communication with the proxy server.
proxy_server (String) The IP address or hostname of the proxy server. This is the server that acts as a bridge between the iDRAC and the Server Configuration Profile share server. It is used to communicate with the Server Configuration Profile share server in order to export the Server Configuration Profile. If the Server Configuration Profile share server is not accessible from the iDRAC directly, then a proxy server must be used in order to establish the connection. This parameter is optional. If it is not provided, the Server Configuration Profile export operation will attempt to connect to the Server Configuration Profile share server directly.
proxy_support (Boolean) Proxy Support - Specifies whether or not to use a proxy server for the export operation. If true, export operation will use a proxy server for communication with the export server. If false, export operation will not use a proxy server for communication with the export server. Default value is false.
proxy_type (String) The type of proxy server to be used. The default is “HTTP”. If set to “SOCKS4”, a SOCKS4 proxy server must be specified. If set to “HTTP”, an HTTP proxy server must be specified. If not specified, the Server Configuration Profile export operation will attempt to connect to the Server Configuration Profile share server directly.
proxy_username (String) The username to be used when connecting to the proxy server.
share_name (String) Share Name - The name of the directory or share on the server that contains the Server Configuration Profile file to export.
target (List of String) Filter configuration by target
username (String) Username - The username to use when authenticating with the server that contains the Server Configuration Profile file being exported.

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

V1.6.2: redfish_idrac_server_configuration_profile_import resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_idrac_server_configuration_profile_import (Resource)

Resource for managing iDRAC Server Configuration Profile Import on iDRAC Server.

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

variable "cifs_username" {
  type    = string
  default = "awesomeadmin"
}

variable "cifs_password" {
  type    = string
  default = "C00lP@ssw0rd"

}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "terraform_data" "trigger_by_timestamp" {
  input = timestamp()
}

resource "redfish_idrac_server_configuration_profile_import" "share_type_local" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename   = "demo_local.xml"
    target     = ["NIC"]
    share_type = "LOCAL"
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

resource "redfish_idrac_server_configuration_profile_import" "share_type_nfs" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename   = "demo_nfs.xml"
    target     = ["NIC"]
    share_type = "NFS"
    ip_address = "10.0.0.01"
    share_name = "/dell/terraform-idrac-nfs"
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

resource "redfish_idrac_server_configuration_profile_import" "share_type_cifs" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename   = "demo_cifs.xml"
    target     = ["NIC"]
    share_type = "CIFS"
    ip_address = "10.0.0.02"
    share_name = "/dell/terraform-idrac-nfs"
    username   = var.cifs_username
    password   = var.cifs_password
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

resource "redfish_idrac_server_configuration_profile_import" "share_type_https" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename    = "demo_https.xml"
    target      = ["NIC"]
    share_type  = "HTTPS"
    ip_address  = "10.0.0.03"
    port_number = 443
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

resource "redfish_idrac_server_configuration_profile_import" "share_type_http" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  share_parameters = {
    filename      = "demo_http.xml"
    target        = ["NIC"]
    share_type    = "HTTP"
    ip_address    = "10.0.0.04"
    port_number   = 80
    proxy_support = true
    proxy_server  = "10.0.0.05"
    proxy_port    = 5000
  }

  lifecycle {
    replace_triggered_by = [terraform_data.trigger_by_timestamp]
  }
}

After the successful execution of the above resource block, Server Configuration Profile will be imported from share type.

Schema

Required

share_parameters (Attributes) Share Parameters (see below for nested schema)

Optional

host_power_state (String) Host Power State. This attribute allows you to specify the power state of the host when the iDRAC is performing the import operation. Accepted values are: “On” or “Off”. If this attribute is not specified or is set to “On”, the host is powered on before the import operation. If it is set to “Off”, the host is powered off before the import operation. Note that the host will be powered back on after the import is completed.
import_buffer (String) Buffer content to perform Import.This is only required for localstore and is not applicable for CIFS/NFS style Import. If the import buffer is empty, then it will perform the import from the source path specified in share parameters.
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
shutdown_type (String) Shutdown Type. This attribute specifies the type of shutdown that should be performed before importing the server configuration profile. Accepted values are: “Graceful” (default), “Forced”, or “NoReboot”. If set to “Graceful”, the server will be gracefully shut down before the import. If set to “Forced”, the server will be forcefully shut down before the import. If set to “NoReboot”, the server will not be restarted after the import. Note that if the server is powered off before the import operation, it will not be powered back on after the import is completed. If the server is powered on before the import operation, it will be powered off during the import process if this attribute is set to “Forced” or “NoReboot”, and will be powered back on after the import is completed if this attribute is set to “Graceful” or “NoReboot”.
time_to_wait (Number) Time To Wait (in seconds) - specifies the time to wait for the server configuration profile to be imported. This is useful for ensuring that the server is powered off before the import operation, and for waiting for the import to complete before powering the server back on. The default value is 1200 seconds (or 20 minutes), but can be set to a lower value of 300 seconds (or 5 minutes) upto a max value of 3600 seconds (or 60 minutes) if desired. Note that this attribute only applies if the server is powered on before the import operation, or if the server is powered off before the import operation and the shutdown type is set to “Graceful” or “NoReboot”. The minimum value is 300 seconds, and the maximum value is 3600 seconds (or 1 hour). If the server is powered off before the import operation and the shutdown type is set to “Forced” or “NoReboot”, the import operation will occur immediately and the server will not be powered back on after the import is completed.

Read-Only

id (String) ID of the Import SCP resource

Nested Schema for `share_parameters`

Required:

filename (String) File Name - The name of the server configuration profile file to import. This is the name of the file that was previously exported using the Server Configuration Profile Export operation. This file is typically in the xml/json format
share_type (String) Share Type - The type of share being used to import the Server Configuration Profile file.

Optional:

ignore_certificate_warning (Boolean) Ignore Certificate Warning
ip_address (String) IPAddress - The IP address of the target export server.
password (String, Sensitive) Password - The password for the share server user account. This password is required if the share type is set to “CIFS”. It is required only if the share type is set to “CIFS”. It is not required if the share type is set to “NFS”.
port_number (Number) Port Number - The port number used to communicate with the share server. The default value is 80.
proxy_password (String, Sensitive) The password for the proxy server. This is required if the proxy_support parameter is set to true. It is used for authenticating the proxy server credentials.
proxy_port (Number) The port number used by the proxy server. This parameter is optional. If not provided, the default port number (80) is used for the communication with the proxy server.
proxy_server (String) The IP address or hostname of the proxy server. This is the server that acts as a bridge between the iDRAC and the Server Configuration Profile share server. It is used to communicate with the Server Configuration Profile share server in order to import the Server Configuration Profile. If the Server Configuration Profile share server is not accessible from the iDRAC directly, then a proxy server must be used in order to establish the connection. This parameter is optional. If it is not provided, the Server Configuration Profile import operation will attempt to connect to the Server Configuration Profile share server directly.
proxy_support (Boolean) Proxy Support - Specifies whether or not to use a proxy server for the import operation. If true, import operation will use a proxy server for communication with the export server. If false, import operation will not use a proxy server for communication with the export server. Default value is false.
proxy_type (String) The type of proxy server to be used. The default is “HTTP”. If set to “SOCKS4”, a SOCKS4 proxy server must be specified. If set to “HTTP”, an HTTP proxy server must be specified. If not specified, the Server Configuration Profile import operation will attempt to connect to the Server Configuration Profile share server directly.
proxy_username (String) The username to be used when connecting to the proxy server.
share_name (String) Share Name - The name of the directory or share on the server that contains the Server Configuration Profile file to import.
target (List of String) Filter configuration by target
username (String) Username - The username to use when authenticating with the server that contains the Server Configuration Profile file being imported.

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

V1.6.2: redfish_manager_reset resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_manager_reset (Resource)

This resource is used to reset the manager.

Example Usage

variables.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_manager_reset" "manager_reset" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  id         = "iDRAC.Embedded.1"
  reset_type = "GracefulRestart"
}

After the successful execution of the above resource block, the iDRAC would have been reset. More details can be verified through state file.

Schema

Required

id (String) The value of the Id property of the Manager resource
reset_type (String) The type of the reset operation to be performed. Accepted value: GracefulRestart

Optional

redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

V1.6.2: redfish_network_adapter resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_network_adapter (Resource)

This Terraform resource is used to configure the port and partition network attributes on the network interface cards(NIC). We can Read the existing configurations or modify them using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# redfish_network_adapter is used to configure the port and partition network attributes on the network interface cards(NIC).
resource "redfish_network_adapter" "nic" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  # Required params for creating
  network_adapter_id         = "FC.Slot.1"
  network_device_function_id = "FC.Slot.1-2"

  # Required apply_time for creating and updating
  # Accepted values: `Immediate`, `OnReset`, `AtMaintenanceWindowStart`, `InMaintenanceWindowOnReset`
  # `Immediate` is only applicable for `oem_network_attributes`
  apply_time = "OnReset"

  # Optional system_id for creating
  # ID of the system resource. If `system_id` is not provided, the first system available from the iDRAC will be used.
  system_id = "System.Embedded.1"


  # Optional params for creating and updating

  # Reset Type. Accepted values: `ForceRestart`, `GracefulRestart`, `PowerCycle`. 
  # Default value is `ForceRestart`
  reset_type = "ForceRestart"
  # Reset Timeout. Default value is 120 seconds.
  reset_timeout = 120
  # `job_timeout` is applicable only when `apply_time` is `Immediate` or `OnReset`.
  # Default value is 1200 seconds.
  job_timeout = 1200
  # maintenance_window is required when `apply_time` is `AtMaintenanceWindowStart` or `InMaintenanceWindowOnReset`
  maintenance_window = {
    # The start time for the maintenance window to be scheduled. Format is YYYY-MM-DDThh:mm:ss<offset>.
    # <offset> is the time offset from UTC that the current timezone set in iDRAC in the format: +05:30 for IST.
    start_time = "2024-06-30T05:15:40-05:00"
    # duration in seconds for the maintenance_window
    duration = 600
  }

  # # Dictionary of network attributes and value for network device function.
  # # NOTE: `oem_network_attributes` is mutually exclusive with `network_attributes`. Please update one of `network_attributes` or `oem_network_attributes` at a time.
  # #  NOTE: Updating network_attributes property may result with an error stating the property is Read-only.
  # # This may occur if Patch method is performed to change the property to the state that the property is already in or because there is dependency of attribute values. 
  # # For example, if CHAP is disabled, MutualChap becomes a Read-only attribute.
  # network_attributes = {
  #   # The configured capability of this network device function.
  #   # Accepted values: `Disabled`, `Ethernet`, `FibreChannel`, `iSCSI`, `FibreChannelOverEthernet`, `InfiniBand`
  #   net_dev_func_type = "Ethernet"

  #   ethernet = {
  #     mac_address = "E4:43:4B:17:E0:A8"
  #     mtu_size    = 1000
  #     vlan = {
  #       vlan_id      = 100
  #       vlan_enabled = true
  #     }
  #   }

  #   # # `fibre_channel` is exclusive with `ethernet` and `iscsi_boot`
  #   # fibre_channel = {
  #   #   allow_fip_vlan_discovery = true
  #   #   fcoe_local_vlan_id       = 10
  #   #   # wwn_source is used for wwnn and wwpn connection. Accepted values: `ConfiguredLocally`, `ProvidedByFabric`
  #   #   wwn_source               = "ProvidedByFabric"
  #   #   wwnn                     = "20:00:F4:E9:D4:56:10:BF"
  #   #   wwpn                     = "21:00:F4:E9:D4:56:10:BF"
  #   #   boot_targets = [
  #   #     {
  #   #       boot_priority = 0
  #   #       lun_id        = "2"
  #   #       wwpn          = "00:00:00:00:00:00:00:00"
  #   #     }
  #   #   ]
  #   # }

  #   iscsi_boot = {
  #     # The iSCSI boot authentication method for this network device function. Accepted values: `None`, `CHAP`, `MutualCHAP`
  #     authentication_method        = "None"
  #     chap_secret                  = "secret"
  #     chap_username                = "username"
  #     # The type of IP address being populated in the iSCSIBoot IP address fields. Accepted values: `IPv4`, `IPv6`
  #     ip_address_type              = "IPv4"
  #     ip_mask_dns_via_dhcp         = true
  #     initiator_default_gateway    = "0.0.0.0"
  #     initiator_ip_address         = "0.0.0.0"
  #     initiator_name               = "iqn.1995-05.com.broadcom.iscsiboot"
  #     initiator_netmask            = "0.0.0.0"
  #     primary_dns                  = "0.0.0.0"
  #     primary_lun                  = 0
  #     primary_target_ip_address    = "0.0.0.0"
  #     primary_target_name          = "targetName"
  #     primary_target_tcp_port      = 3260
  #     primary_vlan_enable          = true
  #     primary_vlan_id              = 10
  #     secondary_dns                = "0.0.0.0"
  #     secondary_lun                = 0
  #     secondary_target_ip_address  = "0.0.0.0"
  #     secondary_target_name        = "targetName"
  #     secondary_target_tcp_port    = 3260
  #     secondary_vlan_enable        = false
  #     secondary_vlan_id            = 20
  #     target_info_via_dhcp         = false
  #     mutual_chap_secret           = "secret"  
  #     mutual_chap_username         = "username"  
  #     router_advertisement_enabled = false      
  #   }
  # }

  # oem_network_attributes to configure dell network attributes and clear pending action.
  # Note: `oem_network_attributes` is mutually exclusive with `network_attributes`.
  # Please update one of `network_attributes` or `oem_network_attributes` at a time.
  oem_network_attributes = {
    # `clear_pending` allows you to clear all the pending OEM network attributes changes.
    # `apply_time` value will be ignored and will not have any impact for `clear_pending` operation.
    clear_pending = false
    # dell network attributes. To check allowed attributes please use the datasource for dell network attributes: data.redfish_network. 
    # To get allowed values, please check /redfish/v1/Registries/NetworkAttributesRegistry_{network_device_function_id}/NetworkAttributesRegistry_{network_device_function_id}.json from a Redfish Instance
    attributes = {
      "WakeOnLan" = "Enabled"
    }
  }
}

After the successful execution of the above resource block, the server nic would have been configured. More details can be verified through state file.

Schema

Required

apply_time (String) Apply time of the network_attributes and oem_network_attributes. (Update Supported)Accepted values: Immediate, OnReset, AtMaintenanceWindowStart, InMaintenanceWindowOnReset. Immediate: allows the user to immediately reboot the host and apply the changes. This is only applicable for oem_network_attributes.OnReset: allows the user to apply the changes on the next reboot of the host server.AtMaintenanceWindowStart: allows the user to apply at the start of a maintenance window as specified in maintenance_window.InMaintenanceWindowOnReset: allows to apply after a manual reset but within the maintenance window as specified in maintenance_window.
network_adapter_id (String) ID of the network adapter
network_device_function_id (String) ID of the network device function

Optional

job_timeout (Number) job_timeout is the time in seconds that the provider waits for the resource update job to becompleted before timing out. (Update Supported) Default value is 1200 seconds.job_timeout is applicable only when apply_time is Immediate or OnReset.
maintenance_window (Attributes) This option allows you to schedule the maintenance window. (Update Supported)This is required when apply_time is AtMaintenanceWindowStart or InMaintenanceWindowOnReset . (see below for nested schema)
network_attributes (Attributes) Dictionary of network attributes and value for network device function. (Update Supported)To check allowed attributes please either use the datasource for dell nic attributes: data.redfish_network or query /redfish/v1/Systems/System.Embedded.1/NetworkAdapters/{NetworkAdapterID}/NetworkDeviceFunctions/{NetworkDeviceFunctionID}/Settings. Note: oem_network_attributes is mutually exclusive with network_attributes. Please update one of network_attributes or oem_network_attributes at a time.NOTE: Updating network_attributes property may result with an error stating the property is Read-only. This may occur if Patch method is performed to change the property to the state that the property is already in or because there is dependency of attribute values. For example, if CHAP is disabled, MutualChap becomes a Read-only attribute. (see below for nested schema)
oem_network_attributes (Attributes) oem_network_attributes to configure dell network attributes and clear pending action. (Update Supported) Note: oem_network_attributes is mutually exclusive with network_attributes. Please update one of network_attributes or oem_network_attributes at a time. (see below for nested schema)
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
reset_timeout (Number) Reset Timeout. Default value is 120 seconds. (Update Supported)
reset_type (String) Reset Type. (Update Supported) Accepted values: ForceRestart, GracefulRestart, PowerCycle. Default value is ForceRestart.
system_id (String) ID of the system resource. If the value for system ID is not provided, the resource picks the first system available from the iDRAC.

Read-Only

id (String) ID of the network interface cards resource

Nested Schema for `maintenance_window`

Required:

duration (Number) The duration in seconds for the maintenance window. (Update Supported)
start_time (String) The start time for the maintenance window to be scheduled. (Update Supported)The format is YYYY-MM-DDThh:mm:ss. is the time offset from UTC that the current timezone set in iDRAC in the format: +05:30 for IST.

Nested Schema for `network_attributes`

Optional:

ethernet (Attributes) This type describes Ethernet capabilities, status, and configuration for a network device function. (Update Supported) (see below for nested schema)
fibre_channel (Attributes) This type describes Fibre Channel capabilities, status, and configuration for a network device function. (Update Supported) (see below for nested schema)
iscsi_boot (Attributes) The iSCSI boot capabilities, status, and configuration for a network device function. (Update Supported) (see below for nested schema)
net_dev_func_type (String) The configured capability of this network device function. (Update Supported)Accepted values: Disabled, Ethernet, FibreChannel, iSCSI, FibreChannelOverEthernet, InfiniBand.

Read-Only:

assignable_physical_network_ports (List of String) A reference to assignable physical network ports to this function
assignable_physical_ports (List of String) A reference to assignable physical ports to this function
description (String) description of the network device function
id (String) ID of the network device function
max_virtual_functions (Number) The number of virtual functions that are available for this network device function
name (String) name of the network device function
net_dev_func_capabilities (List of String) An array of capabilities for this network device function
odata_id (String) OData ID for the network device function
physical_port_assignment (String) A reference to a physical port assignment to this function
status (Attributes) status of the network device function (see below for nested schema)

Nested Schema for `network_attributes.ethernet`

Optional:

mac_address (String) The currently configured MAC address. (Update Supported)
mtu_size (Number) The maximum transmission unit (MTU) configured for this network device function. (Update Supported)
vlan (Attributes) The attributes of a VLAN. (Update Supported) (see below for nested schema)

Read-Only:

permanent_mac_address (String) The permanent MAC address assigned to this function

Nested Schema for `network_attributes.ethernet.vlan`

Optional:

vlan_enabled (Boolean) An indication of whether the VLAN is enabled. (Update Supported)
vlan_id (Number) The vlan id of the network device function. (Update Supported)

Nested Schema for `network_attributes.fibre_channel`

Optional:

allow_fip_vlan_discovery (Boolean) An indication of whether the FCoE Initialization Protocol (FIP) populates the FCoE VLAN ID. (Update Supported)
boot_targets (Attributes List) A Fibre Channel boot target configured for a network device function. (Update Supported) (see below for nested schema)
fcoe_local_vlan_id (Number) The locally configured FCoE VLAN ID. (Update Supported)
wwn_source (String) The configuration source of the World Wide Names (WWN) for this World Wide Node Name (WWNN) and World Wide Port Name (WWPN) connection. (Update Supported). Accepted values: ConfiguredLocally, ProvidedByFabric.
wwnn (String) The currently configured World Wide Node Name (WWNN) address of this function. (Update Supported)
wwpn (String) The currently configured World Wide Port Name (WWPN) address of this function. (Update Supported)

Read-Only:

fcoe_active_vlan_id (Number) The active FCoE VLAN ID
fibre_channel_id (String) The Fibre Channel ID that the switch assigns for this interface
permanent_wwnn (String) The permanent World Wide Node Name (WWNN) address assigned to this function
permanent_wwpn (String) The permanent World Wide Port Name (WWPN) address assigned to this function

Nested Schema for `network_attributes.fibre_channel.boot_targets`

Optional:

boot_priority (Number) The relative priority for this entry in the boot targets array. (Update Supported)
lun_id (String) The logical unit number (LUN) ID from which to boot on the device to which the corresponding WWPN refers. (Update Supported)
wwpn (String) The World Wide Port Name (WWPN) from which to boot. (Update Supported)

Nested Schema for `network_attributes.iscsi_boot`

Optional:

authentication_method (String) The iSCSI boot authentication method for this network device function. (Update Supported)Accepted values: None, CHAP, MutualCHAP.
chap_secret (String, Sensitive) The shared secret for CHAP authentication. (Update Supported)
chap_username (String) The user name for CHAP authentication. (Update Supported)
initiator_default_gateway (String) The IPv6 or IPv4 iSCSI boot default gateway. (Update Supported)
initiator_ip_address (String) The IPv6 or IPv4 address of the iSCSI initiator. (Update Supported)
initiator_name (String) The iSCSI initiator name. (Update Supported)
initiator_netmask (String) The IPv6 or IPv4 netmask of the iSCSI boot initiator. (Update Supported)
ip_address_type (String) The type of IP address being populated in the iSCSIBoot IP address fields. (Update Supported) Accepted values: IPv4, IPv6.
ip_mask_dns_via_dhcp (Boolean) An indication of whether the iSCSI boot initiator uses DHCP to obtain the initiator name, IP address, and netmask. (Update Supported)
mutual_chap_secret (String, Sensitive) The CHAP secret for two-way CHAP authentication. (Update Supported)
mutual_chap_username (String) The CHAP user name for two-way CHAP authentication. (Update Supported)
primary_dns (String) The IPv6 or IPv4 address of the primary DNS server for the iSCSI boot initiator. (Update Supported)
primary_lun (Number) The logical unit number (LUN) for the primary iSCSI boot target. (Update Supported)
primary_target_ip_address (String) The IPv4 or IPv6 address for the primary iSCSI boot target. (Update Supported)
primary_target_name (String) The name of the iSCSI primary boot target. (Update Supported)
primary_target_tcp_port (Number) The TCP port for the primary iSCSI boot target. (Update Supported)
primary_vlan_enable (Boolean) An indication of whether the primary VLAN is enabled. (Update Supported)
primary_vlan_id (Number) The 802.1q VLAN ID to use for iSCSI boot from the primary target. (Update Supported)
router_advertisement_enabled (Boolean) An indication of whether IPv6 router advertisement is enabled for the iSCSI boot target. (Update Supported)
secondary_dns (String) The IPv6 or IPv4 address of the secondary DNS server for the iSCSI boot initiator. (Update Supported)
secondary_lun (Number) The logical unit number (LUN) for the secondary iSCSI boot target. (Update Supported)
secondary_target_ip_address (String) The IPv4 or IPv6 address for the secondary iSCSI boot target. (Update Supported)
secondary_target_name (String) The name of the iSCSI secondary boot target. (Update Supported)
secondary_target_tcp_port (Number) The TCP port for the secondary iSCSI boot target. (Update Supported)
secondary_vlan_enable (Boolean) An indication of whether the secondary VLAN is enabled. (Update Supported)
secondary_vlan_id (Number) The 802.1q VLAN ID to use for iSCSI boot from the secondary target. (Update Supported)
target_info_via_dhcp (Boolean) An indication of whether the iSCSI boot target name, LUN, IP address, and netmask should be obtained from DHCP. (Update Supported)

Nested Schema for `network_attributes.status`

Read-Only:

health (String) health
health_rollup (String) health rollup
state (String) state of the storage controller

Nested Schema for `oem_network_attributes`

Optional:

attributes (Map of String) dell network attributes. (Update Supported) To check allowed attributes please either use the datasource for dell network attributes: data.redfish_network or query /redfish/v1/Chassis/System.Embedded.1/NetworkAdapters/NIC.Integrated.1/NetworkDeviceFunctions/NIC.Integrated.1-3-1/Oem/Dell/DellNetworkAttributes/NIC.Integrated.1-3-1 to get attributes for NIC. To get allowed values for those attributes, check /redfish/v1/Registries/NetworkAttributesRegistry_{network_device_function_id}/NetworkAttributesRegistry_{network_device_function_id}.json from a Redfish Instance
clear_pending (Boolean) This parameter allows you to clear all the pending OEM network attributes changes. (Update Supported)false: does not perform any operation. true: discards any pending changes to network attributes, or if a job is in scheduled state, removes the job. apply_time value will be ignored and will not have any impact for clear_pending operation.

Read-Only:

attribute_registry (String) registry of the network_attributes
description (String) description of network_attributes
id (String) ID of the network_attributes
name (String) name of the network_attributes
odata_id (String) OData ID for the network_attributes

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# system_id is optional. If system_id is not provided, the resource picks the first one from system resources returned by the iDRAC.
terraform import redfish_network_adapter.nic '{"network_adapter_id":"<network_adapter_id>","network_device_function_id":"<network_device_function_id>","username":"<user>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>}'

# terraform import with system_id.
terraform import redfish_network_adapter.nic '{"system_id":"<system_id>","network_adapter_id":"<network_adapter_id>","network_device_function_id":"<network_device_function_id>","username":"<user>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>}'

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_network_adapter.nic '{"network_adapter_id":"<network_adapter_id>","network_device_function_id":"<network_device_function_id>","redfish_alias":"<redfish_alias>"}'

This will import the Sever NIC configuration into your Terraform state.
After successful import, you can run terraform state list to ensure the resource has been imported successfully.
Now, you can fill in the resource block with the appropriate arguments and settings that match the imported resource’s real-world configuration.
Execute terraform plan to see if your configuration and the imported resource are in sync. Make adjustments if needed.
Finally, execute terraform apply to bring the resource fully under Terraform’s management.
Now, the resource which was not part of terraform became part of Terraform managed infrastructure.

V1.6.2: redfish_power resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_power (Resource)

This Terraform resource is used to configure Power attributes of the iDRAC Server. We can Read the existing power state or modify it using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_power" "system_power" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  // The valid options are defined below.
  // Taken from the Redfish specification at: https://redfish.dmtf.org/schemas/DSP2046_2019.4.html
  /*
  | string           | Description                                                                             |
  |------------------|-----------------------------------------------------------------------------------------|
  | ForceOff         | Turn off the unit immediately (non-graceful shutdown).                                  |
  | ForceOn          | Turn on the unit immediately.                                                           |
  | ForceRestart     | Shut down immediately and non-gracefully and restart the system.                        |
  | GracefulShutdown | Shut down gracefully and power off.                                                     |
  | On               | Turn on the unit.                                                                       |
  | PowerCycle       | Power cycle the unit.                                                                   |
  | GracefulRestart  | Shut down gracefully and restart the system .                                           |
  | PushPowerButton  | Alters the power state of the system. If the system is Off, it powers On and vice-versa |
  | Nmi              | Turns the unit on in troubleshooting mode.                                              |
  */

  desired_power_action = "ForceRestart"

  // The maximum amount of time to wait for the server to enter the correct power state before
  // giving up in seconds
  maximum_wait_time = 120

  // The frequency with which to check the server's power state in seconds
  check_interval = 10

  // by default, the resource uses the first system
  # system_id = "System.Embedded.1"
}

output "current_power_state" {
  value = redfish_power.system_power
}

After the successful execution of the above resource block, Power state would have been modified to the above desired value. It can be verified through state file.

Schema

Required

desired_power_action (String) Desired power setting. Applicable values are ‘On’,‘ForceOn’,‘ForceOff’,‘ForceRestart’,‘GracefulRestart’,‘GracefulShutdown’,‘PowerCycle’, ‘PushPowerButton’, ‘Nmi’

Optional

check_interval (Number) The frequency with which to check the server’s power state in seconds
maximum_wait_time (Number) The maximum amount of time to wait for the server to enter the correct power state beforegiving up in seconds
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
system_id (String) System ID of the system

Read-Only

id (String) ID of the power resource
power_state (String) Desired power setting. Applicable values ‘On’,‘ForceOn’,‘ForceOff’,‘ForceRestart’,‘GracefulRestart’,‘GracefulShutdown’,‘PowerCycle’, ‘PushPowerButton’, ‘Nmi’.

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

V1.6.2: redfish_simple_update resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_simple_update (Resource)

This Terraform resource is used to Update firmware of the iDRAC Server. We can Read the existing firmware version or update the same using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_simple_update" "update" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  /* The network protocols and image for firmware update
   List of possible value: [
    CIFS, FTP, SFTP, HTTP, HTTPS, 
    NSF, SCP, TFTP, OEM, NFS
   ]
   Currently only HTTP, HTTPS and NFS are supported with local file path or HTTP(s)/NFS link
  */
  transfer_protocol     = "HTTP"
  target_firmware_image = "/home/mikeletux/Downloads/BIOS_FXC54_WN64_1.15.0.EXE"

  /* Reset parameters to be applied when upgrade is completed
     list of possible value:
      [ ForceRestart, GracefulRestart, PowerCycle]
  */
  reset_type    = "ForceRestart"
  reset_timeout = 120 // If not set, by default will be 120s
  // The maximum amount of time to wait for the simple update job to be completed
  simple_update_job_timeout = 1200 // If not set, by default will be 1200s

  // by default, the resource uses the first system
  # system_id = "System.Embedded.1"
}

After the successful execution of the above resource block, firmware would have been updated. It can be verified through state file.

Schema

Required

reset_type (String) Reset type allows to choose the type of restart to apply when firmware upgrade is scheduled. Possible values are: “ForceRestart”, “GracefulRestart” or “PowerCycle”
target_firmware_image (String) Target firmware image used for firmware update on the redfish instance. Make sure you place your firmware packages in the same folder as the module and set it as follows: “${path.module}/BIOS_FXC54_WN64_1.15.0.EXE”
transfer_protocol (String) The network protocol that the Update Service uses to retrieve the software image file located at the URI provided in ImageURI, if the URI does not contain a scheme. Accepted values: CIFS, FTP, SFTP, HTTP, HTTPS, NSF, SCP, TFTP, OEM, NFS. Currently only HTTP, HTTPS and NFS are supported with local file path or HTTP(s)/NFS link.

Optional

redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
reset_timeout (Number) Time in seconds that the provider waits for the server to be reset before timing out.
simple_update_job_timeout (Number) Time in seconds that the provider waits for the simple update job to be completed before timing out.
system_id (String) System ID of the system

Read-Only

id (String) ID of the simple update resource
software_id (String) Software ID from the firmware package uploaded
version (String) Software version from the firmware package uploaded

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

V1.6.2: redfish_storage_controller resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_storage_controller (Resource)

This Terraform resource is used to configure the storage controller. We can read the existing configurations or modify them using this resource.

Example Usage

variables.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2024-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# redfish_storage_controller is used to configure the storage controller
resource "redfish_storage_controller" "storage_controller_example" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  # Required params for creating

  # Storage ID.
  storage_id = "RAID.Integrated.1-1"
  # Controller ID.
  controller_id = "RAID.Integrated.1-1"

  # Apply Time. Required for creating and updating.
  # If server generation is lesser than 17G, accepted values: `Immediate`, `OnReset`, `AtMaintenanceWindowStart`, `InMaintenanceWindowOnReset`.
  # If server generation is 17G and above, accepted values: `Immediate`, `OnReset`.
  # When updating `controller_mode`, ensure that the `apply_time` is `OnReset`.
  # When updating `security`, ensure that the `apply_time` is `Immediate` or `OnReset`.
  apply_time = "Immediate"

  # System ID. Optional for creating.
  # ID of the system resource. If `system_id` is not provided, the first system available from the iDRAC will be used.
  # system_id = "System.Embedded.1"

  # Optional params for creating and updating

  # Reset Type. 
  # Accepted values: `ForceRestart`, `GracefulRestart`, `PowerCycle`. 
  # Default value is `ForceRestart`.
  # reset_type = "ForceRestart"

  # Reset Timeout. 
  # Default value is 120 seconds.
  # reset_timeout = 120

  # Job Timeout.
  # It is applicable only when `apply_time` is `Immediate` or `OnReset`.
  # Default value is 1200 seconds.
  # job_timeout = 1200

  # Maintenance Window.
  # It is required when `apply_time` is `AtMaintenanceWindowStart` or `InMaintenanceWindowOnReset`.
  # maintenance_window = {
  #   # The start time for the maintenance window to be scheduled. Format is YYYY-MM-DDThh:mm:ss<offset>.
  #   # <offset> is the time offset from UTC that the current timezone set in iDRAC in the format: +05:30 for IST.
  #   start_time = "2024-10-15T22:45:00-05:00"

  #   # duration in seconds for the maintenance_window
  #   duration = 600
  # }

  # Please update any one out of `storage_controller` and `security` at a time.
  # In 17G, for `PERC H365i Front`, only the following attributes under `storage_controller` are configurable:
  #   - `consistency_check_rate_percent`
  #   - `background_initialization_rate_percent`
  # In 17G, for `PERC H965i Front`, only the following attributes under `storage_controller` are configurable:
  #   - `consistency_check_rate_percent`
  #   - `background_initialization_rate_percent`
  #   - `reconstruct_rate_percent`
  # For the above mentioned storage controllers, the other attributes under `storage_controller` need to be commented.
  storage_controller = {
    oem = {
      dell = {
        dell_storage_controller = {
          # Controller Mode. 
          # If server generation is lesser than 17G, accepted values: `RAID`, `HBA`.
          # If server generation is 17G and above, `controller_mode` need to be commented.
          # Note: In 17G and above, controller mode is a read-only property that depends upon the controller personality and hence cannot be updated.
          # In lesser than 17G, when updating `controller_mode`:
          #   - the `apply_time` should be `OnReset`
          #   - no other attributes from `storage_controller` or `security` should be updated.
          # Specifically when updating to `HBA`:
          #   - the `enhanced_auto_import_foreign_configuration_mode` attribute needs to be commented.
          #   - ensure that the security key is not present, if present first delete it using `RemoveControllerKey` action.
          # controller_mode = "RAID"

          # Check Consistency Mode. 
          # Accepted values: `Normal`, `StopOnError`.
          # check_consistency_mode = "Normal"

          # Copyback Mode.
          # Accepted values: `On`, `OnWithSMART`, `Off`.
          # copyback_mode = "On"

          # Load Balance Mode. 
          # Accepted values: `Automatic`, `Disabled`.
          # load_balance_mode = "Disabled"

          # Enhanced Auto Import Foreign Configuration Mode.
          # Accepted values: `Disabled`, `Enabled`.
          # When updating `controller_mode` to `HBA`, this attribute needs to be commented.
          # enhanced_auto_import_foreign_configuration_mode = "Disabled"

          # Patrol Read Unconfigured Area Mode.
          # Accepted values: `Disabled`, `Enabled`.
          # patrol_read_unconfigured_area_mode = "Enabled"

          # Patrol Read Mode.
          # Accepted values: `Disabled`, `Automatic`, `Manual`.
          # patrol_read_mode = "Automatic"

          # Background Initialization Rate.
          # background_initialization_rate_percent = 30
          # Reconstruct Rate.
          # reconstruct_rate_percent = 30
        }
      }
    }

    controller_rates = {
      # Consistency Check Rate.
      # consistency_check_rate_percent = 30
      # Rebuild Rate.
      # rebuild_rate_percent = 30
    }

  }

  # Please update any one out of `security` and `storage_controller` at a time.
  # When updating `security`, ensure that the `apply_time` is `Immediate` or `OnReset`.
  # In lesser than 17G, when updating `controller_mode` to `HBA`, ensure that the security key is not present.
  security = {
    # Action.
    # If server generation is lesser than 17G, accepted values: `SetControllerKey`, `ReKey`, `RemoveControllerKey`.
    # If server generation is 17G and above, accepted values: `EnableSecurity`, `DisableSecurity`.
    # Note: In 17G and above, before enabling security ensure that the SEKM license is imported and SEKM/iLKM is configured.
    # action = "ReKey"

    # When `action` is set to `SetControllerKey`:
    #   - `key_id` and `key` need to be set.
    #   - `old_key` and `mode` need to be commented.
    # When `action` is set to `ReKey`:
    #   - `key_id`, `key`, `old_key` and `mode` need to be set.
    # When `action` is set to `RemoveControllerKey`:
    #   - `key_id`, `key`, `old_key` and `mode` need to be commented.
    # When `action` is set to `EnableSecurity`:
    #   - `key_id`, `key`, `old_key` and `mode` need to be commented.
    # When `action` is set to `DisableSecurity`:
    #   - `key_id`, `key`, `old_key` and `mode` need to be commented.

    # Key ID.
    # key_id = "testkey"

    # Key.
    # key = "Test123##"
    # Old Key.
    # old_key = "Test123###"

    # Mode.
    # Accepted values: `LKM`, `SEKM`.
    # mode = "LKM"
  }

}

After the successful execution of the above resource block, the storage controller would have been configured. More details can be verified through state file.

Schema

Required

apply_time (String) Apply time of the storage controller attributes. (Update Supported) If server generation is lesser than 17G, accepted values: Immediate, OnReset, AtMaintenanceWindowStart, InMaintenanceWindowOnReset. If server generation is 17G and above, accepted values: Immediate, OnReset. Immediate: allows the user to immediately reboot the host and apply the changes. OnReset: allows the user to apply the changes on the next reboot of the host server. AtMaintenanceWindowStart: allows the user to apply at the start of a maintenance window as specified in maintenance_window. InMaintenanceWindowOnReset: allows to apply after a manual reset but within the maintenance window as specified in maintenance_window. When updating controller_mode, ensure that the apply_time is OnReset. When updating security, ensure that the apply_time is Immediate or OnReset.
controller_id (String) ID of the storage controller
storage_id (String) ID of the storage

Optional

job_timeout (Number) job_timeout is the time in seconds that the provider waits for the resource update job to becompleted before timing out. (Update Supported) Default value is 1200 seconds.job_timeout is applicable only when apply_time is Immediate or OnReset.
maintenance_window (Attributes) This option allows you to schedule the maintenance window. (Update Supported)This is required when apply_time is AtMaintenanceWindowStart or InMaintenanceWindowOnReset . (see below for nested schema)
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
reset_timeout (Number) Reset Timeout. Default value is 120 seconds. (Update Supported)
reset_type (String) Reset Type. (Update Supported) Accepted values: ForceRestart, GracefulRestart, PowerCycle. Default value is ForceRestart.
security (Attributes) This consists of the attributes to configure the security of the storage controller. Please update any one out of security and storage_controller at a time. When updating security, ensure that the apply_time is Immediate or OnReset. When updating controller_mode to HBA, ensure that the security key is not present. (see below for nested schema)
storage_controller (Attributes) This consists of the attributes to configure the storage controller. Please update any one out of storage_controller and security at a time. In 17G, for PERC H365i Front, only the following attributes under storage_controller are configurable: consistency_check_rate_percent, background_initialization_rate_percent. In 17G, for PERC H965i Front, only the following attributes under storage_controller are configurable: consistency_check_rate_percent, background_initialization_rate_percent, reconstruct_rate_percent. (see below for nested schema)
system_id (String) ID of the system resource. If the value for system ID is not provided, the resource picks the first system available from the iDRAC.

Read-Only

id (String) ID of the storage controller resource

Nested Schema for `maintenance_window`

Required:

duration (Number) The duration in seconds for the maintenance window. (Update Supported)
start_time (String) The start time for the maintenance window to be scheduled. (Update Supported)The format is YYYY-MM-DDThh:mm:ss. is the time offset from UTC that the current timezone set in iDRAC in the format: +05:30 for IST.

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Nested Schema for `security`

Optional:

action (String) Action to create/change/delete the security key, if server generation is lesser than 17G. Accepted values: SetControllerKey, ReKey, RemoveControllerKey. Action to enable/disable the security, if server generation is 17G and above. Accepted values: EnableSecurity, DisableSecurity. Note: In 17G and above, before enabling security ensure that the SEKM license is imported and SEKM/iLKM is configured. In lesser than 17G, the SetControllerKey action is used to set the key on controllers and set the controller in Local key Management (LKM) to encrypt the drives. In lesser than 17G, the ReKey action resets the key on the controller that support encryption of the of drives. In lesser than 17G, the RemoveControllerKey method erases the encryption key on controller. CAUTION: All encrypted drives shall be erased. In 17G and above, the EnableSecurity action is used to enable the security. In 17G and above, the DisableSecurity action is used to disable the security.
key (String) New controller key.
key_id (String) Key Identifier that describes the key. The Key ID shall be maximum of 32 characters in length and should not have any spaces.
mode (String) Encryption mode of the controller: Local Key Management(LKM)/Secure Enterprise Key Manager(SEKM), if server generation is lesser than 17G. If server generation is lesser than 17G, the accepted values are: LKM, SEKM. Encryption mode of the controller: Enabled/Disabled, if server generation is 17G and above. If server generation is 17G and above, it will be set to Enabled, if SEKM license is imported, SEKM/iLKM is configured and EnableSecurity action has been performed successfully. It will be set to Disabled, if SEKM license is not imported or SEKM/iLKM is not configured or EnableSecurity action has not yet been performed or DisableSecurity action has been performed successfully.
old_key (String) Old controller key.

Nested Schema for `storage_controller`

Optional:

controller_rates (Attributes) This type describes the various controller rates used for processes such as volume rebuild or consistency checks. (see below for nested schema)
oem (Attributes) The OEM extension to the StorageController resource. (see below for nested schema)

Nested Schema for `storage_controller.controller_rates`

Optional:

consistency_check_rate_percent (Number) This property describes the controller rate for consistency check
rebuild_rate_percent (Number) This property describes the controller rate for volume rebuild

Nested Schema for `storage_controller.oem`

Optional:

dell (Attributes) Dell (see below for nested schema)

Nested Schema for `storage_controller.oem.dell`

Optional:

dell_storage_controller (Attributes) Dell Storage Controller (see below for nested schema)

Nested Schema for `storage_controller.oem.dell.dell_storage_controller`

Optional:

background_initialization_rate_percent (Number) Background Initialization Rate Percent
check_consistency_mode (String) Check Consistency Mode. Accepted values: Normal, StopOnError.
controller_mode (String) Controller Mode. Accepted values: RAID, HBA if server generation is lesser than 17G. If server generation is 17G and above, EnhancedHBA is another value it supports. However, in 17G and above, ensure the controller mode attribute is commented. Note: In 17G and above, controller mode is a read-only property that depends upon the controller personality and hence cannot be updated. If server generation is lesser than 17G, when updating controller_mode, the apply_time should be OnReset and no other attributes from storage_controller or security should be updated. Specifically, when updating controller_mode to HBA, the enhanced_auto_import_foreign_configuration_mode attribute needs to be commented and also ensure that the security key is not present, if present first delete it using RemoveControllerKey action.
copyback_mode (String) Copyback Mode. Accepted values: On, OnWithSMART, Off.
enhanced_auto_import_foreign_configuration_mode (String) Enhanced Auto Import Foreign Configuration Mode. Accepted values: Disabled, Enabled. When updating controller_mode to HBA, this attribute needs to be commented.
load_balance_mode (String) Load Balance Mode. Accepted values: Automatic, Disabled.
patrol_read_mode (String) Patrol Read Mode. Accepted values: Disabled, Automatic, Manual.
patrol_read_unconfigured_area_mode (String) Patrol Read Unconfigured Area Mode. Accepted values: Disabled, Enabled.
reconstruct_rate_percent (Number) Reconstruct Rate Percent

Import

Import is supported using the following syntax:

/*
Copyright (c) 2024 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# system_id is optional. If system_id is not provided, the resource picks the first one from system resources returned by the iDRAC.
terraform import redfish_storage_controller.storage_controller_example '{"storage_id":"<storage_id>","controller_id":"<controller_id>","username":"<username>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>}'

# terraform import with system_id
terraform import redfish_storage_controller.storage_controller_example '{"system_id":"<system_id>","storage_id":"<storage_id>","controller_id":"<controller_id>","username":"<username>","password":"<password>","endpoint":"<endpoint>","ssl_insecure":<true/false>}'

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_storage_controller.storage_controller_example '{"storage_id":"<storage_id>","controller_id":"<controller_id>","redfish_alias":"<redfish_alias>"}'

This will import the Storage Controller configuration into your Terraform state.
After successful import, you can run terraform state list to ensure the resource has been imported successfully.
Now, you can fill in the resource block with the appropriate arguments and settings that match the imported resource’s real-world configuration.
Execute terraform plan to see if your configuration and the imported resource are in sync. Make adjustments if needed.
Finally, execute terraform apply to bring the resource fully under Terraform’s management.
Now, the resource which was not part of terraform became part of Terraform managed infrastructure.

V1.6.2: redfish_storage_volume resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_storage_volume (Resource)

This Terraform resource is used to configure virtual disks on the iDRAC Server. We can Create, Read, Update, Delete the virtual disks using this resource.

~> Note: capacity_bytes and volume_type attributes cannot be updated.

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2020-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_storage_volume" "volume" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }

  storage_controller_id = "RAID.SL.3-1"

  volume_name = "TerraformVol"
  // This attribute is deprecated, and will be removed in a future release.
  // Please use the raid_type value instead
  // volume_type           = "Mirrored"

  // Sets the Raid level Options (RAID0, RAID1, RAID5, RAID6, RAID10, RAID50, RAID60)
  raid_type = "RAID0"

  // Name of the physical disk on which virtual disk should get created.
  drives = ["Physical Disk 0:1:0"]

  // Flag stating when to create virtual disk either "Immediate" or "OnReset"
  // For BOSS Drives this should be set to "OnReset" as reboot is needed for the virtual disk to be created
  settings_apply_time = "Immediate"

  // Reset parameters to be applied when upgrade is completed
  reset_type = "PowerCycle"

  reset_timeout = 100
  // The maximum amount of time to wait for the volume job to be completed

  volume_job_timeout = 1200

  // When creating on volumes on BOSS Controllers or with the encrypt field true this property is invalid. 
  //capacity_bytes        = 1073323222

  // When creating on volumes on BOSS Controllers or with the encrypt field true this property is invalid. 
  //optimum_io_size_bytes = 131072

  // Possible values are "Off", "ReadAhead", "AdaptiveReadAhead"
  read_cache_policy = "Off"

  // When creating on volumes on BOSS Controllers this property should be set to "WriteThrough"
  // Possible values are "ProtectedWriteBack", "WriteThrough", "UnprotectedWriteBack"
  write_cache_policy = "WriteThrough"

  // Possible values are "Disabled", "Enabled"
  disk_cache_policy = "Disabled"

  // Whether or not to encrypt the virtual disk, default to false
  // Once a virtual disk is set to encrypted status it cannot be changed
  // This flag is only supported on firmware levels 6 and above
  encrypted = true

  // by default, the resource uses the first system
  # system_id = "System.Embedded.1"

  lifecycle {
    ignore_changes = [
      capacity_bytes,
      volume_type
    ]
  }
}

After the successful execution of the above resource block, virtual disk would have been created. It can be verified through state file.

Schema

Required

drives (List of String) Drives
storage_controller_id (String) Storage Controller ID
volume_name (String) Volume Name

Optional

capacity_bytes (Number) Capacity Bytes
disk_cache_policy (String) Disk Cache Policy
encrypted (Boolean) Encrypt the virtual disk, default is false. This flag is only supported on firmware levels 6 and above
optimum_io_size_bytes (Number) Optimum Io Size Bytes
raid_type (String) Raid Type, Defaults to RAID0
read_cache_policy (String) Read Cache Policy
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
reset_timeout (Number) Reset Timeout
reset_type (String) Reset Type
settings_apply_time (String) Settings Apply Time
system_id (String) System ID of the system
volume_job_timeout (Number) Volume Job Timeout
volume_type (String, Deprecated) Volume Type
write_cache_policy (String) Write Cache Policy

Read-Only

id (String) ID of the storage volume resource

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

~> Note: Odata ID of all available volumes on a storage controller can be fetched by running the following GET request on the iDRAC “/redfish/v1/Systems/System.Embedded.1/Storage//Volumes/” Eg. redfish/v1/Systems/System.Embedded.1/Storage/RAID.Integrated.1-1/Volumes/ The ID of any storage controller on the iDRAC, in turn, can be fetched using the “redfish_storage” data source

Import is supported using the following syntax:

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform import redfish_storage_volume.volume "{\"id\":\"<odata id of the volume>\",\"username\":\"<username>\",\"password\":\"<password>\",\"endpoint\":\"<endpoint>\",\"ssl_insecure\":<true/false>}"

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_storage_volume.volume "{\"id\":\"<odata id of the volume>\",\"redfish_alias\":\"<redfish_alias>\"}"

This will import the storage volume instance with specified ID into your Terraform state.
After successful import, you can run terraform state list to ensure the resource has been imported successfully.
Now, you can fill in the resource block with the appropriate arguments and settings that match the imported resource’s real-world configuration.
Execute terraform plan to see if your configuration and the imported resource are in sync. Make adjustments if needed.
Finally, execute terraform apply to bring the resource fully under Terraform’s management.
Now, the resource which was not part of terraform became part of Terraform managed infrastructure.

V1.6.2: redfish_user_account resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_user_account (Resource)

This Terraform resource is used to manage user entity of the iDRAC Server. We can create, read, modify and delete an existing user using this resource.

~> Note: In the absence of user_id, first available user_id is assigned to the given user.

~> Note: For managing (Create/Update/Delete/Change password) a single user at a time, use the resource ‘redfish_user_account’

~> Note: For managing (Create/Update/Delete/Change password) multiple users at a time, use the module ‘user_module’

~> Note: For changing the password of Administrator/root user alone, use the resource ‘user_account_password’

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_user_account" "rr" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key
    user          = each.value.user
    password      = each.value.password
    endpoint      = each.value.endpoint
    ssl_insecure  = true
  }

  // user details for creating/modifying a user
  user_id  = "4"
  username = "test"
  password = "Test@123"
  role_id  = "Operator"
  // to set user as active or inactive
  enabled = true
}

Upon successful execution of the preceding resource block, a new user account will be established, provided it does not preexist. The creation can be confirmed by examining the state file.

Schema

Required

password (String, Sensitive) Password of the user
username (String) The name of the user

Optional

enabled (Boolean) If the user is currently active or not.
redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
role_id (String) Role of the user. Applicable values are ‘Operator’, ‘Administrator’, ‘None’, and ‘ReadOnly’. Default is “None”
user_id (String) The ID of the user. Cannot be updated.

Read-Only

id (String) The ID of the resource. Cannot be updated.

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2021-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform import redfish_user_account.rr "{\"id\":\"<id>\",\"username\":\"<username>\",\"password\":\"<password>\",\"endpoint\":\"<endpoint>\",\"ssl_insecure\":<true/false>}"

# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_user_account.rr "{\"id\":\"<id>\",\"redfish_alias\":\"<redfish_alias>\"}"

This will import the user instance with specified ID into your Terraform state.
After successful import, you can run terraform state list to ensure the resource has been imported successfully.
Now, you can fill in the resource block with the appropriate arguments and settings that match the imported resource’s real-world configuration.
Execute terraform plan to see if your configuration and the imported resource are in sync. Make adjustments if needed.
Finally, execute terraform apply to bring the resource fully under Terraform’s management.
Now, the resource which was not part of terraform became part of Terraform managed infrastructure.

V1.6.2: redfish_user_account_password resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_user_account_password (Resource)

This Terraform resource is used to update password for a user of the iDRAC Server.

~> Note: This resource can be used by users with ‘Administrator’ role/privilege. For users with non-administrator role/privilege, either ‘user resource’ or ‘user module’ can be used for updating the password.

~> Note: Please refer to iDRAC password policy before updating the password.

~> Note: For managing (Create/Update/Delete/Change password) a single user at a time, use the resource ‘redfish_user_account’

~> Note: For managing (Create/Update/Delete/Change password) multiple users at a time, use the module ‘user_module’

~> Note: For changing the password of Administrator/root user alone, use the resource ‘user_account_password’

Example Usage

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

main.tf

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_user_account_password" "root" {
  username     = "root"
  endpoint     = "https://my-server-1.myawesomecompany.org"
  ssl_insecure = false
  old_password = "Test@1234"
  new_password = "Root@1234"
}

After successful execution of the above resource block, the password of the ‘root’/‘admin’ user will be updated to new password.

Schema

Required

endpoint (String) The endpoint of the iDRAC.
new_password (String) New Password of the user for login
old_password (String) Old/current password of the user to be updated

Optional

ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
username (String) The name of the user

Read-Only

id (String) The ID of the resource.

V1.6.2: redfish_virtual_media resource

Mon, 01 Jan 0001 00:00:00 +0000

redfish_virtual_media (Resource)

This Terraform resource is used to configure virtual media on the iDRAC Server. We can Read, Attach, Detach the virtual media or Modify the attached image using this resource.

~> Note: write_protected attribute can only be configured as true.

Example Usage

variables.tf

/*
Copyright (c) 2022-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

variable "rack1" {
  type = map(object({
    user         = string
    password     = string
    endpoint     = string
    ssl_insecure = bool
  }))
}

terraform.tfvars

/*
Copyright (c) 2023 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

rack1 = {
  "my-server-1" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-1.myawesomecompany.org"
    ssl_insecure = true
  },
  "my-server-2" = {
    user         = "admin"
    password     = "passw0rd"
    endpoint     = "https://my-server-2.myawesomecompany.org"
    ssl_insecure = true
  },
}

provider.tf

/*
Copyright (c) 2022-2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

terraform {
  required_providers {
    redfish = {
      version = "1.6.2"
      source  = "registry.terraform.io/dell/redfish"
    }
  }
}

provider "redfish" {
  # `redfish_servers` is used to align with enhancements to password management.
  # Map of server BMCs with their alias keys and respective user credentials.
  # This is required when resource/datasource's `redfish_alias` is not null
  redfish_servers = var.rack1
}

main.tf

/*
Copyright (c) 2020-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

resource "redfish_virtual_media" "vm" {
  for_each = var.rack1

  redfish_server {
    # Alias name for server BMCs. The key in provider's `redfish_servers` map
    # `redfish_alias` is used to align with enhancements to password management.
    # When using redfish_alias, provider's `redfish_servers` is required.
    redfish_alias = each.key

    user         = each.value.user
    password     = each.value.password
    endpoint     = each.value.endpoint
    ssl_insecure = each.value.ssl_insecure
  }
  // Image to be attached to virtual media
  # image           = "http://inuxlib.com/pub/redhat/RHEL8/8.8/BaseOS/x86_64/os/images/efiboot.img"
  image = "http://linuxlib.us.dell.com/pub/redhat/RHEL8/8.8/BaseOS/x86_64/os/images/efiboot.img"
  /* Indicates how the data is transferred
     List of possible value: [Stream, Upload]
  */
  transfer_method = "Stream"
  /* Network protocol used to fetch the image
     List of possible value: [
        "CIFS", "FTP", "SFTP", "HTTP", "HTTPS",
				"NFS", "SCP", "TFTP", "OEM",
     ] 
  */
  transfer_protocol_type = "HTTP"
  write_protected        = true

  // by default, the resource uses the first system
  # system_id = "System.Embedded.1"
}

After the successful execution of the above resource block, virtual media would have been attached with specified image. More details can be verified through state file.

Schema

Required

image (String) The URI of the remote media to attach to the virtual media

Optional

redfish_server (Block List) List of server BMCs and their respective user credentials (see below for nested schema)
system_id (String) System ID of the system
transfer_method (String) Indicates how the data is transferred
transfer_protocol_type (String) The protocol used to transfer.
write_protected (Boolean) Indicates whether the remote device media prevents writing to that media.

Read-Only

id (String) ID of the virtual media resource
inserted (Boolean) Describes whether virtual media is attached or detached

Nested Schema for `redfish_server`

Optional:

endpoint (String) Server BMC IP address or hostname
password (String, Sensitive) User password for login
redfish_alias (String) Alias name for server BMCs. The key in provider’s redfish_servers map
ssl_insecure (Boolean) This field indicates whether the SSL/TLS certificate must be verified or not
user (String) User name for login

Import

Import is supported using the following syntax:

/*
Copyright (c) 2023-2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# The synatx is:
# terraform import redfish_virtual_media.media "{\"id\":\"<odata id of the virtual media>\",\"username\":\"<username>\",\"password\":\"<password>\",\"endpoint\":\"<endpoint>\",\"ssl_insecure\":<true/false>}"

terraform import redfish_virtual_media.media '{"id":"/redfish/v1/Managers/iDRAC.Embedded.1/VirtualMedia/CD","username":"admin","password":"passw0rd","endpoint":"https://my-server-1.myawesomecompany.org","ssl_insecure":true}'


# terraform import with redfish_alias. When using redfish_alias, provider's `redfish_servers` is required.
# redfish_alias is used to align with enhancements to password management.
terraform import redfish_virtual_media.media '{"id":"/redfish/v1/Managers/iDRAC.Embedded.1/VirtualMedia/CD","redfish_alias":"<redfish_alias>"}'

This will import the virtual media instance with specified ID into your Terraform state.
After successful import, you can run terraform state list to ensure the resource has been imported successfully.
Now, you can fill in the resource block with the appropriate arguments and settings that match the imported resource’s real-world configuration.
Execute terraform plan to see if your configuration and the imported resource are in sync. Make adjustments if needed.
Finally, execute terraform apply to bring the resource fully under Terraform’s management.
Now, the resource which was not part of terraform became part of Terraform managed infrastructure.

Dell Technologies – Resources

V1.6.2: redfish_bios resource

redfish_bios (Resource)

Example Usage

Schema

Optional

Read-Only

Nested Schema for redfish_server

Import

V1.6.2: redfish_boot_order resource

redfish_boot_order (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for boot_options

Nested Schema for redfish_server

Import

V1.6.2: redfish_boot_source_override resource

redfish_boot_source_override (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for redfish_server

V1.6.2: redfish_certificate resource

redfish_certificate (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for redfish_server

V1.6.2: redfish_dell_idrac_attributes resource

redfish_dell_idrac_attributes (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for redfish_server

Import

V1.6.2: redfish_dell_lc_attributes resource

redfish_dell_lc_attributes (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for redfish_server

Import

V1.6.2: redfish_dell_system_attributes resource

redfish_dell_system_attributes (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for redfish_server

Import

V1.6.2: redfish_directory_service_auth_provider resource

redfish_directory_service_auth_provider (Resource)

Example Usage

Schema

Optional

Read-Only

Nested Schema for active_directory

Nested Schema for active_directory.authentication

Nested Schema for active_directory.directory

Nested Schema for active_directory.directory.remote_role_mapping

Nested Schema for ldap

Nested Schema for ldap.directory

Nested Schema for ldap.directory.remote_role_mapping

Nested Schema for ldap.ldap_service

Nested Schema for ldap.ldap_service.search_settings

Nested Schema for redfish_server

Import

V1.6.2: redfish_directory_service_auth_provider_certificate resource

Nested Schema for `redfish_server`

Nested Schema for `boot_options`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`

Nested Schema for `active_directory`

Nested Schema for `active_directory.authentication`

Nested Schema for `active_directory.directory`

Nested Schema for `active_directory.directory.remote_role_mapping`

Nested Schema for `ldap`

Nested Schema for `ldap.directory`

Nested Schema for `ldap.directory.remote_role_mapping`

Nested Schema for `ldap.ldap_service`

Nested Schema for `ldap.ldap_service.search_settings`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`

Nested Schema for `update_list`

Nested Schema for `share_parameters`

Nested Schema for `redfish_server`

Nested Schema for `share_parameters`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`

Nested Schema for `maintenance_window`

Nested Schema for `network_attributes`

Nested Schema for `network_attributes.ethernet`

Nested Schema for `network_attributes.ethernet.vlan`

Nested Schema for `network_attributes.fibre_channel`

Nested Schema for `network_attributes.fibre_channel.boot_targets`

Nested Schema for `network_attributes.iscsi_boot`

Nested Schema for `network_attributes.status`

Nested Schema for `oem_network_attributes`

Nested Schema for `redfish_server`

Nested Schema for `redfish_server`