topic Re: iLo two-factor auth in Server Management - Remote Server Management

iLo two-factor auth

DSI-subsea — Thu, 12 Mar 2009 13:51:28 GMT

We're trying to setup two factor authentication using certs in iLo2 on a DL380g5 can someone point me to a detailed howto?

Re: iLo two-factor auth

DSI-subsea — Fri, 20 Mar 2009 01:32:21 GMT

Anyone?

Re: iLo two-factor auth

DSI-subsea — Fri, 20 Mar 2009 17:53:17 GMT

I receive error message: "Certificate Authentication Failure. Please close your browser and open a new browser to retry authentication.
- The certificate you provided may not be issued by the trusted CA
- The certificate you provided may have been revoked
- The certificate may not be mapped to a local user account"

I've even called HP and now its been raised to level 2 can anyone help?

Re: iLo two-factor auth

DSI-subsea — Fri, 03 Apr 2009 19:08:28 GMT

now I somehow got a cert working but I didn't note down what csp or other options were used in requesting the user certificate

can someone help?

also shouldn't it have a 2nd factor?

Re: iLo two-factor auth

barnett chan — Mon, 06 Apr 2009 17:44:06 GMT

How did you get the Certificate on to your smartcard? Did you use the Microsoft Certificate Service form your domain?
Check out the users guide at http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00553302/c00553302.pdf
The setup begins on page 45.

Re: iLo two-factor auth

DSI-subsea — Mon, 06 Apr 2009 17:46:07 GMT

we want to use cert and pin
we don't have smart cards

the user guide you posted says thats an option but doesn't say how

we got the certs from a windows CA

Re: iLo two-factor auth

DSI-subsea — Thu, 16 Apr 2009 18:41:40 GMT

It seems to be working now but still doesn't have a pin (ie not a 2nd factor)

Re: iLo two-factor auth

dietrich_2 — Mon, 12 Jul 2010 16:01:04 GMT

not sure if you're still doing this but if you are how large is your CA cert? I'm finding that there is a size limitation (not identified in the SOI) that restricts my 2048 bit cert. 1024 bit works fine. Any ideas?