- Community Home
- >
- Servers and Operating Systems
- >
- ProLiant
- >
- ProLiant Servers (ML,DL,SL)
- >
- ILO4 security issues
-
- Forums
-
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
- HPE Blog, Austria, Germany & Switzerland
- Blog HPE, France
- HPE Blog, Italy
- HPE Blog, Japan
- HPE Blog, Middle East
- HPE Blog, Russia
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
-
Blogs
- Advancing Life & Work
- Advantage EX
- Alliances
- Around the Storage Block
- HPE Blog, Latin America
- HPE Blog, Middle East
- HPE Blog, Saudi Arabia
- HPE Blog, South Africa
- HPE Blog, UK & Ireland
- HPE Ezmeral: Uncut
- OEM Solutions
- Servers & Systems: The Right Compute
- Tech Insights
- The Cloud Experience Everywhere
-
Information
- Community
- Welcome
- Getting Started
- FAQ
- Ranking Overview
- Rules of Participation
- Tips and Tricks
- Resources
- Announcements
- Email us
- Feedback
- Information Libraries
- Integrated Systems
- Networking
- Servers
- Storage
- Other HPE Sites
- Support Center
- Aruba Airheads Community
- Enterprise.nxt
- HPE Dev Community
- Cloud28+ Community
- Marketplace
-
Forums
-
Blogs
-
Information
-
English
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-19-2017 08:39 AM
07-19-2017 08:39 AM
ILO4 security issues
Hi! I have already posted this problems 2 weeks ago, I though it was solved but unfortunately not yet.
My University is scanning all the campus servers with Nessus Vulnerability Scanner and they are complaining that my ILO4 (now just updated to firmware 2.53 May 03 2017) on ProLiant ML350p Gen8 HP server has a "medium" risk level of vulnerability, so they are asking to solve this issue as soon as possible, to avoid potential attacks.
I enclose the "medium" risk entries of the report: all the problems are connected with the 443/tcp port, it seemed I should update the version of SSL protocol to improve cipher, encription and certificate... however I have just updated also OpenSSL to Version : 1.0.1e Release : 57.el6 but the problem persists.
Is anybody able to help me in this respect?
Thank you very much in advance!
Mauro
- Tags:
- SSL
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-19-2017 10:28 AM - edited 07-19-2017 10:33 AM
07-19-2017 10:28 AM - edited 07-19-2017 10:33 AM
Re: ILO4 security issues
Nessus is warning you that your iLOs still have those "untrusted" default Self-Signed SSL Certificates that iLO generates automatically. You need to replace them with new "trusted" SSL Certificates issued by the University's Certification Authority.
The other two issues can be resolved by enabling in iLO an option called "Enforce AES Encryption"
__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
07-19-2017 11:14 AM
07-19-2017 11:14 AM
Re: ILO4 security issues
I'm not an HPE Employee

Hewlett Packard Enterprise International
- Communities
- HPE Blogs and Forum
© Copyright 2021 Hewlett Packard Enterprise Development LP