- Community Home
- >
- Servers and Operating Systems
- >
- HPE ProLiant
- >
- ProLiant Servers (ML,DL,SL)
- >
- Re: Remote console, SSL certificates, and port 80
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-12-2015 10:46 PM
08-12-2015 10:46 PM
Hi All
Hopefully there’s somebody out there than can help with this issue.
I have a StoreEasy 1450 with ILO4 out on a customer site. The customer has configured a port forward from 4433 to 443 so I can get access to the ILO interface.
I can log in to ILO but when I try and launch the remote console nothing happens.
After a bit of Googling I believe it may be trying to redirect through port 80 due to an untrusted certificate.
However the above article states that Java RC would work, but for me it does not.
The site is added to trusted sites in IE, and I have tried with protected mode off.
IE, Chrome and Firefox all the same, nothing happens and no clue why.
So I have installed a Digicert certificate which is trusted by the browser, but maybe not by the web server in ILO, not 100% sure about that.
Still no joy.
Ports 443 and 80 are in use so there is no option to use them.
I’m pretty sure it’s not a client side issue.
ILO Firmware is 2.10
The digicert SSL certificate was sent with a certificate for an intermediate trusted CA, but it looks like only one SSL certificate can be installed in ILO.
I believe this must be a very common usage scenario given most small businesses only have one public IP address, and would be hosting a website on port 80
Any succinct thoughts and suggestions gratefully received.
Solved! Go to Solution.
- Tags:
- certificate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-13-2015 02:49 AM
08-13-2015 02:49 AM
Re: Remote console, SSL certificates, and port 80
The document you mention could be part of an issue you're seeing. As a test, you could download the stand alone IRC application that doesn't require it to be downloaded from the iLO. Is there also a port forward setup for 17990? iLO uses port 17990 for remote console.
HP Lights-Out Stand Alone Remote Console for Windows
I've seen others recommend as a best practice to use a VPN to access the remote network instead of poking a bunch of holes in a firewall/router.
Default iLO port values
Secure Shell (SSH) Port - 22
Remote Console Port - 17990
Web Server Non-SSL Port (HTTP) - 80
Web Server SSL Port (HTTPS) - 443
Virtual Media Port - 17988
SNMP Port - 161
SNMP Trap Port - 162
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-17-2015 06:14 PM
08-17-2015 06:14 PM
Re: Remote console, SSL certificates, and port 80
Hi Jimmy
Thanks for your suggestion.
i now have a port forward on the external IP on port 17990 to the ILO NIC. But the remote console still doesnt launch, nor does the standalone remote console connect.
i can telnet to port 17990.
From standalone remote console i get this :
Received an unexpected EOF or 0 bytes from the transport stream
Any ideas what that means?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-19-2015 08:47 AM
08-19-2015 08:47 AM
Solution
@Richardw-au wrote:Hi Jimmy
Thanks for your suggestion.
i now have a port forward on the external IP on port 17990 to the ILO NIC. But the remote console still doesnt launch, nor does the standalone remote console connect.
i can telnet to port 17990.
From standalone remote console i get this :
Received an unexpected EOF or 0 bytes from the transport stream
Any ideas what that means?
Using the standalone client I was able to access the iLO remote console. Besides 17990 you also need to have a port forward for port 443
if the customer is using 443 for a webserver, you can use another port and redirect to 443
On the firewall (linux iptables) I was testing with I had
external internal
17990 17990
4003 443
using the standalone client you can put everything on the command line, or in the GUI box for Netwrok addres use hostname:port
from the command line it is
irc.exe -addr address:[https_port] -name login_name -password password
irc.exe -help will list the options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-08-2015 10:03 PM
09-08-2015 10:03 PM
Re: Remote console, SSL certificates, and port 80
Hi Jimmy
Apologies for the delay - i've been dealing with HP support on this also, and that has been a painful experience!
Initially i tried specifying port 17990 on the standalone remote client, and it didnt connect.
The one thing of value i got from hours of sessions with HP support was that i needed to enable IRC requires a trusted certificate in iLO setting on the Remote Console page security tab.
I then retried the Standalone RC using the redirected SSL port and after a really long wait, about 3 minutes, i saw the remote console!
Hope this is of assistance to somebody, and thanks to you for the suggestions.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-13-2018 11:04 AM
12-13-2018 11:04 AM
Re: Remote console, SSL certificates, and port 80
It didn't work for me.
HP should really address this issue as there is no always the possibility to use port 443 facing the Internet (it is already occupied, organization policy mandates to use a different port, etc).