topic Re: iLO Certificate Size Issue in Server Management - Remote Server Management

iLO Certificate Size Issue

dietrich_2 — Mon, 12 Jul 2010 14:38:53 GMT

Is there a work around for iLO certificate store size? I am trying to import a CA cert into the trusted CA cert store in iLO to enable smartcard authentication but i get a sizing error. Cert size that is accepted is 1024bit, our cert size is 2048bit. Any ideas on what to do to fix this?

Error returned: HTTP Request Entity Too Large

Re: iLO Certificate Size Issue

Oscar A. Perez — Mon, 12 Jul 2010 18:03:56 GMT

I don't know what is a 2048bit cert but, how big is the actual file you are trying to import?

iLO2 has only 3072 bytes in the NVRAM to store the certificate file.

There was a bug in iLO2 firmware versions 1.82 and earlier where the web interface could reject any file larger than 2764 bytes even though the max size was 3072 bytes. This was fixed in iLO2 v2.00.

Re: iLO Certificate Size Issue

dietrich_2 — Mon, 12 Jul 2010 18:15:09 GMT

That might be a part of the problem, our version of iLO is 1.80. Will try updating the firmware... thanks

Re: iLO Certificate Size Issue

dietrich_2 — Wed, 14 Jul 2010 16:29:52 GMT

Updated to v2.0 (latest iLO version) and still experiencing the same issue. CA size is 3406 bytes once exported to Base64 format which is what iLO is expecting. Any other advice?

Re: iLO Certificate Size Issue

Oscar A. Perez — Wed, 14 Jul 2010 19:42:20 GMT

3072 bytes is the max size for a certificate in Base64 format.

Re: iLO Certificate Size Issue

TomRichards — Mon, 26 Jul 2010 08:43:51 GMT

I'm getting this too - my certificate is 4905 bytes big. Is there any way round this restriction?

Re: iLO Certificate Size Issue

Jason LaGarde — Wed, 25 Aug 2010 15:33:40 GMT

Guessing there's been no resolution on this?

Chalk me up as another user experiencing issues due to this size restriction.

Re: iLO Certificate Size Issue

dietrich_2 — Wed, 25 Aug 2010 16:30:51 GMT

Unfortunately there has been no further development on their part. I had a trouble ticket open with them but it was closed on account of hardware limitation.

Re: iLO Certificate Size Issue

Jason LaGarde — Wed, 25 Aug 2010 16:32:26 GMT

What about iLO3? Do we know if the issue still exists on iLO3 as well?

Re: iLO Certificate Size Issue

dietrich_2 — Wed, 25 Aug 2010 16:35:39 GMT

nope, we haven't tried ilo3 as yet. If any one tries that and it works please share.