Testing ssl, Resetting ilo 2 – HP Integrated Lights-Out 2 User Manual
Page 204
The iLO 2 firmware does not respond to SSL requests
The iLO 2 firmware does not respond to SSL requests when a Java warning appears. If a user is
logging in to an iLO 2 browser connection and does not complete the login process by responding
to the Java certificate warning, iLO 2 does not respond to future browser requests. The user must
continue the login process to free the iLO 2 Web server.
Testing SSL
The following test checks for the correct security dialog prompt. A non-working server will proceed
to a Page cannot be displayed message. If this test fails, your domain controller is not
accepting SSL connections, and probably has not been issued a certificate.
1.
Open a browser and navigate to <https://<domain controller>:636.
You can substitute <domain> in place of <domain controller> which goes to the DNS and
checks which domain controller is handling requests for the domain. Test multiple domain
controllers to verify all of them have been issued a certificate.
2.
If SSL is operating correctly on the domain controller (a certificate is issued), you are prompted
with a security message asking if you want to proceed with accessing the site, or view the
server's certificate. Clicking Yes does not display a web page. This is normal. This process is
automatic, but might require rebooting. To avoid rebooting:
a.
Open the MMC and add the certificates snap-in. When prompted, select Computer
Account for the type of certificates you want to view. Click OK to return to the certificates
snap in.
b.
Select Personal>Certificates folder. Right-click the folder and select Request New Certificate.
c.
Verify Type is domain controller and click Next until a certificate is used.
You can also use Microsoft LDP tool to verify SSL connections. For more information on the LDP
tool, go to the Microsoft website at
.
An old certificate can cause issues with SSL and on the domain controller when it points to a
previously trusted CA with the same name, which is rare but might happen if a certificate service
is added and removed and then added again on the domain controller. To remove old certificates
and issue a new one follow the instructions above in step 2.
Resetting iLO 2
In rare instances, it might be necessary to reset iLO 2; for example, if iLO 2 is not responding to
the browser. To reset iLO 2, you must power down the server and disconnect the power supplies
completely.
The iLO 2 firmware might reset itself in certain instances. For example, an internal iLO 2 watchdog
timer resets if the firmware detects an iLO 2 issue. If a firmware upgrade is completed or a network
setting is changed, iLO 2 also resets.
The HP Insight Management Agents 5.40 and later have the ability to reset iLO 2. To reset iLO 2,
choose one of the following options:
•
Select the Reset iLO 2 option on the HP Management Agent web page under the iLO 2 section.
•
Click Apply on the Network Settings page to manually force the iLO 2 management processor
to reset. You do not need to change any parameters before clicking Apply.
•
Click Reset on the Diagnostic page of the iLO 2 browser interface.
Server name still present after ERASE utility is executed
The Server Name field is communicated to iLO 2 through the Insight Manager Agents.
204 Troubleshooting iLO 2