New security certificates required by September 28, 2018 to ensure HPE Remote Support Connectivity

[JTodd1]

Attention: Insight RS, OneView Remote Support, iLO Direct Connect, and Onboard Administrator Direct Connect Users

Beginning September 28, 2018, the HPE Remote Support solution will move to new root and intermediate certificates which have been issued by DigiCert. These certificates are required to enable communication from our customers to the HPE Remote Support Data Centers. In anticipation of this change, new certificates are now available through recent software and firmware updates.

Please review the advisories below for instructions on how to download these certificates and ensure your ability to connect to HPE:

• Insight Remote Support – Support Advisory: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00047564en_us

• OneView Remote Support – Support Advisory: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00048136en_us

• iLO Direct Connect – Support Advisory: https://support.hpe.com/hpsc/doc/display?docId=emr_na-a00050194en_us

• Onboard Administrator Direct Connect – Support Advisory: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00049862en_us

[JTodd1]

Here is a link to a consolidated certificate upgrade guide: https://support.hpe.com/hpsc/doc/public/display?docId=a00055924en_us

[JTodd1]

NOTE: Prior to installing a new version of I-RS, ensure the firewall or proxy rules will permit communication to
https://api.support.hpe.com over port 443.
To test connectivity, go to https://api.support.hpe.com/v1/healthcheck/healthcheck.aspx and verify a response of OK

Verify Connectivity to HPE.com
To verify that the CMS is configured to communicate to HPE.com, run the following command from a command prompt:
rsadmin config -displayAll | findstr "api"
The response should look like:
STARTUP HpAdapter.Address.EndPoint => https://api.support.hpe.com/v1/
STARTUP swm.manifest.url => https://api.support.hp.com/v1/SWM/manifest.xml
STARTUP swm.package.url.server => https://api.support.hpe.com/v1

If you do not see the response above, Download and run the software update "Update Data Center URLs":
1. Ensure that your firewall is configured to allow communication with the new HPE URLs (refer to the table in the Upgrade
section above)
2. Log in to Insight Remote Support
3. Select Administrator Settings from the main menu
4. Select Software Update Manager.
5. Locate the software package titled: "Update Data Center URLs"
6. Install the software update package (as indicated)
7. Verify installation

How do I confirm the new package is installed?
In the Software Update Manager screen in the Insight Remote Support interface, the "Update Data Center URLs" package will indicate
successful installation. In cases where the package did not install correctly, a message will provide information on any installation error