How to use certificate based authentication for lights-Out 100 ssh logins and avoid password prompts

[Allen Huang_1]

We are having an issue with the Lights-Out console.

What we need to do is to ssh into all the Lights-Out shell so that we can reboot the nodes through a script.

For instance, we need to be able to make a command call such as:

system("ssh admin@xxx.xxx.xxx.xxx \"reset system1\" ");

where xxx.xxx.xxx.xxx is the IP of a Lights-Out console.

We followed the instructions on the manual that involves generating SSL certificate/private key, and upload those files via

load -source //tftfpserver/path/file -oemhpfiletype cer load -source //tftpserver/path/file -oemhpfiletype key

However, we are still unable to connect to the Lights-Out shell of the machine without getting prompted for the password.

Could anyone give us more detailed instruction or correct us on how to ssh into the lights-out shell without password?

Thanks in advance.

[Erdogan Temur]

Hi Allen,

The default administrator account user name is admin, and the default password is admin.

HP ProLiant Lights-Out 100 Remote Management
User Guide
http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c00718633/c00718633.pdf

This is how we thank each other in the forum

http://forums11.itrc.hp.com/service/forums/helptips.do?#33

Regards.

[Allen Huang_1]

Hi Erdogan,

Thanks for the user guide. However, I didn't find much relevant information on how to establish passwordless ssh connection to lights-out shell. How can we use certificate based authentication for LO100 ssh logins without being prompted for password?

[Erdogan Temur]

Plase check the attached pdf. hope it will resolve.

regards.

[Allen Huang_1]

We already tried the instructions in the manual and from your attached PDF file as you can see from the original problem description. However I suspect that the instructions given in the manual and your attached PDF file are not designed to provide passwordless SSH login.

[Allen Huang_1]

Unfortunately, according to HP support in the LO100 group, client side ssh certificates/keys are not supported for LO100. A password will always be required when accessing the CLI/console. Thank you so much for your help!

[Allen Huang_1]

Lights Out 100i does not support client side certificates/keys for password-less logins to the CLI via SSH