Certificate upload tab – HP Onboard Administrator User Manual

Page 183

Advertising
background image

Configuring the HP BladeSystem c7000 enclosure and enclosure devices 183

Field

Possible values

Description

DN Qualifier

Must be 0 to 60 characters

in length. Acceptable
characters are all

alphanumeric, the space,

and the following
punctuation marks: ' ( ) + , -

. / : = ?

The distinguished name qualifier of the Onboard

Administrator.

Certificate-signing request attributes

Field

Possible values

Description

Challenge Password

Must be 0 to 30 characters

in length

The password for the certificate-signing request

Confirm Password

Must be 0 to 30 characters

in length

Confirm the Challenge Password

Unstructured Name

Must be 0 to 60 characters
in length

This is for additional information (for example, an
unstructured name that is assigned to the Onboard

Administrator)

To generate the self-signed certificate or standardized certificate-signing request, click Apply.
Standardized certificate-signing request
This screen displays a standardized certificate signing request generated by the Onboard Administrator. The

content of the request in the text box may be sent to a certificate authority of your choice for signing. Once
signed and returned from the certificate authority, the certificate can be uploaded under the "Certificate

Upload" tab.
If a static IP address is configured for Onboard Administrator when this certificate request is generated, the

certificate request will be issued to the static IP address. Otherwise, it is issued to the dynamic DNS name of
the Onboard Administrator. The certificate, by default, requests a valid duration of 10 years (this value is

currently not configurable).
When submitting the request to the certificate authority, be sure to:

1.

Use the Onboard Administrator URL for the server.

2.

Request the certificate be generated in the RAW format.

3.

Include the Begin and End certificate lines.

Certificate Upload tab

To upload certificates for use in HP BladeSystem Onboard Administrator, the user must be logged in using the

Administrator account.
There are two methods for uploading certificates for use in HP BladeSystem Onboard Administrator:

Paste certificate contents into the text field and click Upload.

Paste the URL of the certificate into the URL field and click Apply.

The certificate to be uploaded must be from a certificate request sent out and signed by a certificate authority

for this particular Onboard Administrator. Otherwise, the certificate fails to match the private keys used to

generate the certificate request, and the certificate is rejected. Also, if the Onboard Administrator domain

has been destroyed or reimported, then you must repeat the steps for generating a certificate request. It will

Advertising