HP ProLiant SL2x170z G6 Server - Manual (Page 51)

1. Log in to LO100 as an administrator.
2. On the browser main menu navigation bar, click Security Settings.
3. In the TFTP server IP address field, enter the IP address of the TFTP server.
4. On the menu under File type, select Key.
5. Enter the file name of the key created (server_privkey.pem) in the File Name field. Include the
path relative to the TFTP server root in the file name.
6. Click Apply.
To install the both the certificate and private key through the browser at the same time:
1. Log in to LO100 as an administrator.
2. On the browser main menu navigation bar, click Security Settings.
3. In the TFTP server IP address field, enter the IP address of the TFTP server.
4. On the menu under File type, select Key and Certificate.
5. Enter the file name of the certificate (server_cacert.pem) and key created (server_privkey.pem)
in the File Name field. Include the path relative to the TFTP server root in the file name.
6. Click Apply.
Installing a certificate or private key through the CLP
To install a certificate, log in to LO100 as administrator through the CLP interface and issue the
load command to upload and install the certificate. For example:
load -source <URI> -oemhpfiletype cer
where:
•
<URI> is the //tftpserver IP/path/filename to be downloaded.
•
tftpserver is the URL or IP address of the TFTP server containing the certificate.
•
Path is the path of the file relative to the TFTP server root.
•
filename is the file name of the certificate file (server_cacert.pem in this example).
After you issue the load command to upload and install the certificate, reset the BMC by entering
the following command:
reset map 1
LO100 checks the validity of the key/certificate pair after you reset the BMC.
You can also find these commands in /map1/firmware directory.
To install a private key, log in to LO100 as administrator through the CLP interface and issue the
load command to upload and install the certificate. For example:
load -source <URI> -oemhpfiletype key
where:
•
<URI> is the //tftpserver IP/path/filename to be downloaded.
•
tftpserver is the URL or IP address of the TFTP server containing the private key file.
•
Path is the path of the file relative to the TFTP server root.
•
filename is the file name of the private key file (server_privkey.pem in this example).
After you issue the load command to upload and install the certificate, reset the BMC by entering
the following command:
reset map 1
LO100 checks the validity of the key/certificate pair after you reset the BMC.
You can also find these commands in /map1/firmware directory.
Importing a certificate 51