ILO3 two factor authentication?

[chuckk281]

Bart had a security question:

*********************

Will we ever have two factor authentication on Ilo3 like we had on Ilo2? Ex for smartcard reader support?

I think I saw it once on a roadmap slide?

A big customer is using smart card readers for the Ilo login on their servers and now with Ilo3 they can’t use this anymore. Can we offer an alternative solution?

**************

Info from Phoebe and Lars-Eric:

************

There is some difference in how iLO 3 handles two factor versus how iLO 2 does. 

Feature

iLO 2

iLO 3

Two-factor direct to iLO

Supported

No

Kerberos Authentication

No

Supported

Kerberos two-factor

No

Supported

Directory

Supported

Supported

For most customers, the critical factor is the Active Directory setting that says "require smartcard for authentication".

iLO LDAP name/password cannot work when that checkbox is checked. iLO kerberos integrated two factor authentication can and does.

User guide

http://h20000.www2.hp.com/bizsupport/TechSupport/CoreRedirect.jsp?redirectReason=DocIndexPDF&prodSeriesId=4154735&targetPage=http%3A%2F%2Fbizsupport1.austin.hp.com%2Fbc%2Fdocs%2Fsupport%2FSupportManual%2Fc00190541%2Fc00190541.pdf

****************

Comments or questions?