topic Certificate Signing Request RIBCL script doesn't work with iLO 3 in Server Management - Remote Server Management

Certificate Signing Request RIBCL script doesn't work with iLO 3

Jiri Konecny — Tue, 08 Mar 2011 09:19:57 GMT

While using Cert_Request.xml RIBCL script, running it like "hponcfg -f Cert_Request.xml" on RHEL 5 on DL380G7 with iLO 3 I get "Error processing the XML file : /.../Cert_Request.xml".

It works like a champ on iLO 2 equipped servers, though.

Any clues?

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Oscar A. Perez — Tue, 08 Mar 2011 14:39:53 GMT

Are you using the latest hponcfg version 3.1.1.0 for Linux?

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Jiri Konecny — Wed, 09 Mar 2011 08:41:51 GMT

Originally tried with hponcfg 3.1.0-0. Now with 3.1.1-0, same results..

But thanks for tip.

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Jiri Konecny — Tue, 15 Mar 2011 12:16:01 GMT

Found a workaround:
With additional perl RPM packages and by providing login and password to RIBCL XML script we can run locfg.pl script (Simplified perl version of CPQLOCFG) from some workstation.

However, as we built scripts around hponcfg, we'd like to solve this. Could new iLO FW version 1.20, that I've seen announced somewhere here in ITRC, be a solution?

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Jiri Konecny — Wed, 30 Mar 2011 14:59:31 GMT

Tested with new iLO 3 1.20 FW, still the same error present...

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Oscar A. Perez — Wed, 30 Mar 2011 17:09:55 GMT

Ok, I just reproduced the problem. It seems that both hponcfg and locfg.pl are timing out while iLO3 is still working on generating the Cert Request. This is why you get an error.

iLO3 takes longer than iLO2 to generate the Cert Request because, iLO3 generates the needed RSA key on the fly while iLO2 uses RSA keys previously generated that are stored in NVRAM because, iLO2 has a lot slower processor and generating a key on the fly was not an option.

Also, I just tested cpqlocfg.exe for Windows and confirmed that the Cert_Request.xml script works fine with this tool because, this tool has a larger timeout.

Anyway, I'm opening a ticket against both hponcfg and locfg.pl to get their time out increased.