topic Re: ML110 G7 iLO SSL CSR certificate not working in ProLiant Servers (ML,DL,SL)

ML110 G7 iLO SSL CSR certificate not working

mlaing — Fri, 11 May 2012 21:38:17 GMT

I'm attempting to generate a SSL certificate for our ML110 G7 server so we don't have to use the self-signed certificate. I'm using an enterprise CA running Windows 2008 R2 Enterprise. Anyway, after I get the certificate from the CA, I paste the contents into the iLO user interface and tell it to "import certificate". It then reboots.

When it comes back up, the server has the same self-signed SSL cert still installed. I've checked the event log and I see a "SSL Certificate installed" followed by "iLO 3 reset by user diagnostics.", but there are no errors. The certificate is only 2,090 bytes, so it is under the 3KB limit that iLO 3 has for SSL certs.

Any light that could be shed on this issue will be much appreciated. Thanks!

Additional Info:

Product Name: ProLiant ML110 G7
Product ID: 639259-005
System ROM: J01 04/21/2011
Backup System ROM: 04/21/2011
License Type: iLO 3 Advanced
iLO Firmware Version: 1.28 Jan 13 2012

Re: ML110 G7 iLO SSL CSR certificate not working

Oscar A. Perez — Mon, 14 May 2012 13:18:11 GMT

Can you please post a Cert here?

I would like to know what iLO3 doesn't like about your cert. We recently fixed an issue where iLO3 would discard a newly imported cert after reboot because, it didn't like some extra attributes added by the CA like the SerialNumber (OID value 2.5.4.5). We are fixing this issue in the next firmware release.

Re: ML110 G7 iLO SSL CSR certificate not working

mlaing — Mon, 14 May 2012 15:24:51 GMT

I don't feel comfortable posting the certificate for all to see, so I've PMed it to you. Thanks!

Re: ML110 G7 iLO SSL CSR certificate not working

Vitja_x — Fri, 22 Feb 2013 09:14:43 GMT

Have you fixed the issue in 1.55 (Jan 24 2013 )?

I have the same error with the firmware.

Re: ML110 G7 iLO SSL CSR certificate not working

Oscar A. Perez — Fri, 22 Feb 2013 14:58:05 GMT

Can you PM me your cert?