topic Re: ILO FQDN Certificate in Server Management - Remote Server Management

ILO FQDN Certificate

R9Y — Fri, 11 Apr 2008 09:56:26 GMT

Does anyone know when ILO will support certifcate generation using FQDN's instead of just ilo name?

Whether or not it will be possible to import key and cert to get around the issue?

Re: ILO FQDN Certificate

Raghuarch — Fri, 11 Apr 2008 14:15:24 GMT

I don't think iLO Supports FQDN's.

Re: ILO FQDN Certificate

Piet de Bekker — Thu, 01 Jan 2009 23:14:02 GMT

If you install HPONCFG the HP online ILO configuration utility on the server you can assign the FQDN to the ilo.

After that a cert request can be made trough the ILO web interface

Re: ILO FQDN Certificate

Matthias Eble — Thu, 05 Feb 2009 22:09:39 GMT

Piet, is hponcfg mandatory to get FQDNs into the csr?

Re: ILO FQDN Certificate

Armand Puts — Tue, 24 Feb 2009 12:50:17 GMT

Anyone a solution for this problem? I'm using ILO and ILO2. They both refuse to use the FQDN when requesting a certificate.

ILO knows that is has been assigned "ilo.local" from the dnsserver but it doesnt use servername.ilo.local to request the certificate.... :(

Re: ILO FQDN Certificate

R9Y — Tue, 24 Feb 2009 13:11:35 GMT

Hi Armand,

Piet De Bekker's answer has so far been the only solution.

So install the HPONCFG tool into the host server os. You can then set the ilo name to a FQDN name (which it would not allow you to do via the iLO web interface). Then when you generate a csr it will use the FQDN of the iLO, allowing the certificate to be issued using the full address.

I have only tested this on iLO2's on 1.61 and 1.7 firmware.

Jamie

Re: ILO FQDN Certificate

Matthias Eble — Mon, 02 Mar 2009 15:33:09 GMT

Well I think while this fixes the CSR problem, it might (dunno) break other stuff:

Ilo Help claims:
iLO 2 Subsystem Name:
This represents the DNS name of the iLO 2 subsystem. For example, "ilo" in "ilo.hp.com".

There is also a Domainname field (For example, "hp.com" in "ilo.hp.com".)

Thus correct ILO behaviour would send requests like ilo.hp.com.hp.com.

To me the CSR Problem (no FQDN in there) is an obvious bug but maybe ITRC isn't the right place to post?

Re: ILO FQDN Certificate

Kosta Velikov — Tue, 21 Jul 2009 15:48:16 GMT

Sure, for people using Windows, hponcfg is an option.

What about machines running ESX, Linux, Unix?