Certificate upload tab – HP Onboard Administrator User Manual
Page 183

Configuring the HP BladeSystem c7000 enclosure and enclosure devices 183
Field
Possible values
Description
DN Qualifier
Must be 0 to 60 characters
in length. Acceptable
characters are all
alphanumeric, the space,
and the following
punctuation marks: ' ( ) + , -
. / : = ?
The distinguished name qualifier of the Onboard
Administrator.
Certificate-signing request attributes
Field
Possible values
Description
Challenge Password
Must be 0 to 30 characters
in length
The password for the certificate-signing request
Confirm Password
Must be 0 to 30 characters
in length
Confirm the Challenge Password
Unstructured Name
Must be 0 to 60 characters
in length
This is for additional information (for example, an
unstructured name that is assigned to the Onboard
Administrator)
To generate the self-signed certificate or standardized certificate-signing request, click Apply.
Standardized certificate-signing request
This screen displays a standardized certificate signing request generated by the Onboard Administrator. The
content of the request in the text box may be sent to a certificate authority of your choice for signing. Once
signed and returned from the certificate authority, the certificate can be uploaded under the "Certificate
Upload" tab.
If a static IP address is configured for Onboard Administrator when this certificate request is generated, the
certificate request will be issued to the static IP address. Otherwise, it is issued to the dynamic DNS name of
the Onboard Administrator. The certificate, by default, requests a valid duration of 10 years (this value is
currently not configurable).
When submitting the request to the certificate authority, be sure to:
1.
Use the Onboard Administrator URL for the server.
2.
Request the certificate be generated in the RAW format.
3.
Include the Begin and End certificate lines.
Certificate Upload tab
To upload certificates for use in HP BladeSystem Onboard Administrator, the user must be logged in using the
Administrator account.
There are two methods for uploading certificates for use in HP BladeSystem Onboard Administrator:
•
Paste certificate contents into the text field and click Upload.
•
Paste the URL of the certificate into the URL field and click Apply.
The certificate to be uploaded must be from a certificate request sent out and signed by a certificate authority
for this particular Onboard Administrator. Otherwise, the certificate fails to match the private keys used to
generate the certificate request, and the certificate is rejected. Also, if the Onboard Administrator domain
has been destroyed or reimported, then you must repeat the steps for generating a certificate request. It will