HP Integrated Lights-Out 4 - Manual (Page 83)

For information about how to extract an HP SIM certificate, see “Extracting the HP SIM server
certificate” (page 83) .
For information about how to extract certificates from other HP SSO-compliant applications, see
your HP SSO-compliant application documentation.
Extracting the HP SIM server certificate
You can use the following methods to extract HP SIM certificates.
NOTE: iLO 4 1.20 or later might be required to install the larger certificates used with recent
versions of HP SIM.
•
Enter one of the following links in a web browser:
For HP SIM versions earlier than 7.0:
http://<HP SIM name or network address>:280/GetCertificate
◦
https://<HP SIM name or network address>:50000/GetCertificate
◦ For HP SIM 7.0 or later:
http://<HP SIM name or network
address>:280/GetCertificate?certtype=sso
https://<HP SIM name or network
address>:50000/GetCertificate?certtype=sso
NOTE: All request parameters are case-sensitive. If you capitalize the lowercase
certtype parameter, the parameter will not be read, and HP SIM will return the default
HP SIM server certificate instead of a trust certificate.
•
Export the certificate from HP SIM:
For HP SIM versions earlier than 7.0:
Select Options
→Security→Certificates→Server Certificate.
◦
◦ For HP SIM 7.0 or later:
Select Options
→Security→HP Systems Insight Manager Server Certificate, and then click
Export.
•
Use the HP SIM command-line tools. For example, using the alias tomcat for the HP SIM
certificate, enter mxcert -l tomcat.
For more information, see the HP SIM documentation.
Viewing trusted certificates
The Manage Trusted Certificates table on the Single Sign-On Settings page displays the status of
the trusted certificates configured to use SSO with the current iLO management processor.
•
Status—The status of the record (if any are installed).
Configuring iLO security 83