HP Integrated Lights-Out 3 - Manual (Page 49)

The iLO firmware enables you to create a certificate request, import a certificate, and view
information associated with a stored certificate. Certificate information is encoded in the certificate
by the CA and is extracted by iLO.
By default, iLO creates a self-signed certificate for use in SSL connections. This certificate enables
iLO to work without additional configuration steps. Importing a trusted certificate can enhance the
iLO security features. Users who have the Configure iLO Settings privilege can customize and
import a trusted certificate.
Viewing SSL certificate information
To view certificate information, navigate to the Administration
→Security→SSL Certificate page.
The following certificate details are displayed:
•
Issued To—The entity to which the certificate was issued
•
Issued By—The CA that issued the certificate
•
Valid From—The first date that the certificate is valid
•
Valid Until—The date that the certificate expires
•
Serial Number—The serial number that the CA assigned to the certificate
Obtaining and importing an SSL certificate
Users who have the Configure iLO Settings privilege can customize and import a trusted certificate.
A certificate works only with the keys generated with its corresponding CSR. If iLO is reset to factory
defaults, or another CSR is generated before the certificate that corresponds to the previous CSR
is imported, the certificate does not work. In that case, a new CSR must be generated and used
to obtain a new certificate from the CA.
To obtain and import a certificate:
1.
Navigate to the Administration
→Security→SSL Certificate page, as shown in
Figure 20
(page 49) .
Figure 20 Security–SSL Certificate Information page
2. Click Customize Certificate.
The SSL Certificate Customization page opens, as shown in Figure 21 (page 50) .
Configuring iLO security 49