topic Re: Flex 10 VC Corrupt certiifcate cannot use web interface in BladeSystem - General

Flex 10 VC Corrupt certiifcate cannot use web interface

Nick Eoannidis_1 — Mon, 24 Aug 2009 06:16:03 GMT

Hi All,

Does anyone know how to do a true factory reset on the hp flex 10 VC modules?

I uploaded a certificate following the instructions (i successfully did it with the OA's worked fine!) and it has killed the Virtual Connect Manager web interface - i can only telnet into the Flex-10 vc's and there is no way to remove the dodgy cert!

Ive tried resetting the OA and the enclosure, also deleted the vc domain config from telnet and rebooted everything again - same problem cannot get to the web int.

Re: Flex 10 VC Corrupt certiifcate cannot use web interface

Adrian Clint — Mon, 24 Aug 2009 08:56:23 GMT

Nick,
Sorry I dont know. But if you haven't already ask in the Virtual Connect Interest Group. Its monitored more by HP people.
http://h18006.www1.hp.com/products/blades/components/bladeconnect.html

Re: Flex 10 VC Corrupt certiifcate cannot use web interface

Nick Eoannidis_1 — Tue, 25 Aug 2009 02:47:50 GMT

ok fixed it

if anyone has this issue telnet to your OA and connect with 'connect interconnect 1'

then login with builtin admin/pw.

you need to copy the Certiificate Signing Request from the VC with:

save-csr - save it to an ftp server
take the request and copy the contents and sign with your CA (i used win2k3 certificate services).

Save your generated cert as bas64 enc X509 and name it with crt - like so ssl-new.crt

to upload an OVERWRITE existing / FAULTY cert use the following:

load ssl-certificate

I found that using the OA to get to the switch console and upload the ssl cert wasnt working - so i enabled SSH and it worked from there.

Re: Flex 10 VC Corrupt certiifcate cannot use web interface

oursin — Tue, 30 Aug 2011 14:03:50 GMT

I've got the exact same problem, but I'm very new to this. Can you please write a more detailed explanation. Managed to log in with telnet, but the commands doesn't seem to work :(