ML110 G7 iLO SSL CSR certificate not working

[mlaing]

I'm attempting to generate a SSL certificate for our ML110 G7 server so we don't have to use the self-signed certificate. I'm using an enterprise CA running Windows 2008 R2 Enterprise. Anyway, after I get the certificate from the CA, I paste the contents into the iLO user interface and tell it to "import certificate". It then reboots.

When it comes back up, the server has the same self-signed SSL cert still installed. I've checked the event log and I see a "SSL Certificate installed" followed by "iLO 3 reset by user diagnostics.", but there are no errors. The certificate is only 2,090 bytes, so it is under the 3KB limit that iLO 3 has for SSL certs.


Any light that could be shed on this issue will be much appreciated. Thanks!

Additional Info:

Product Name: ProLiant ML110 G7
Product ID: 639259-005
System ROM: J01 04/21/2011
Backup System ROM: 04/21/2011
License Type: iLO 3 Advanced
iLO Firmware Version: 1.28 Jan 13 2012

[Oscar A. Perez]

Can you please post a Cert here? 

I would like to know what iLO3 doesn't like about your cert.  We recently fixed an issue where iLO3 would discard a newly imported cert after reboot because, it didn't like some extra attributes added by the CA like the SerialNumber (OID value 2.5.4.5).  We are fixing this issue in the next firmware release.

[mlaing]

I don't feel comfortable posting the certificate for all to see, so I've PMed it to you. Thanks!

[Vitja_x]

Have you fixed the issue in 1.55 (Jan 24 2013 )?

I have the same error with the firmware.

[Oscar A. Perez]

Can you PM me your cert?