topic Re: Remove Stale certificates from iLO in Servers - General

Remove Stale certificates from iLO

MCSAP — Fri, 11 Feb 2022 06:50:33 GMT

Hi,

I updated my CA cert on my OneView appliance and in the process all 600+ connections refreshed. I have 100+ warning that the iLO SSO won't work due to a certificate size of 3k blah, blah, blah. The workaround is to go into the iLO and delete the stale (old) cert from the "Manage Trusted Certificate and Records" area.

For whatever reason, deleting the "red x" cert entry clears the OneView SSO/iLO warning.

Anyone have a script to do this rather than me connecting to 100+ individual iLOs?

Gen9 & iLO 4

Many thanks!

Re: Remove Stale certificates from iLO

Suman_1978 — Fri, 11 Feb 2022 03:19:05 GMT

Hi,

As far as I know, there is no such script. But I could be wrong. Request you to contact HPE Support for help.

Here is the "HPE iLO 4 Scripting and Command Line Guide" if you need any other scripts.
https://support.hpe.com/hpesc/public/docDisplay?docId=c03334058

Thanks

Re: Remove Stale certificates from iLO

Michiel_NN — Wed, 22 Mar 2023 11:16:02 GMT

After a couple of servers I decided to create a script. I use HPE Lights-Out Configuration Utility to run a couple of RIBCL-commands. I created an XML-file with the commands and ran it against the ip-address of the iLO's.

HPQLOCFG.exe -s 10.120.204.86 -f C:\Temp\replace_cert.xml -l C:\Temp\Logs\replace_cert.txt -v

The xml looks like this:

<RIBCL VERSION="2.0">
<LOGIN USER_LOGIN="Administrator" PASSWORD="password">
<SSO_INFO MODE="write">
<DELETE_SERVER INDEX="1" />
<IMPORT_CERTIFICATE>
-----BEGIN CERTIFICATE-----
MIIFxTCCA62gAwIBAgIJAJTtQTFDW

-----END CERTIFICATE-----
</IMPORT_CERTIFICATE>
</SSO_INFO>
<RIB_INFO MODE = "write">
<RESET_RIB/>
</RIB_INFO>
</LOGIN>
</RIBCL>