iLO3 1.26 Certificate error

[ViktorSylantiev]

I can not, because We use them all. If I turn them off - I have reissued all certificates in the company, and this is unacceptable. ILO2 works well with such certificates. It is a pity that the new version get the new restrictions.

[JoeBruneau]

I am seeing the same problem and the certificate I am using is only 2.75KB.

[Oscar A. Perez]

iLO does not use those LDAP fields you have in CRL and AIA so, including these fields in Certs destinated to your iLOs is a waste of space.

I guess, you could request your CA to create a separate template for your iLOs, a template without these extra LDAP fields.

From my side, I have formally requested the iLO team to increase the max size of certs to match what iLO2 accepts. They are evaluating the impact of increasing NVRAM usage in iLO3 and other needed code changes. I will post an update as soon as I get the final answer from the team.

[ViktorSylantiev]

Thank you, we will wait.

[UserHP]

Are there any news regarding this issue? My certificate has only 2,84 KB but I also receive the "Error: The Certificate could not be imported from the supplied X.509 Certificate data."

I think this will end up in a new ILO firmware (v1.27) ?

[UserHP]

Hi,

with the newest ILO Firmware v1.61 from Aug 01 2013 I still have this issue. I still receive

Error: The Certificate could not be imported from the supplied X.509 Certificate data.

Check the following: 
- Make sure that the input text was base64 encoded X.509 Certificate data.
- Make sure that the input X.509 Certificate data was intended for this server (not another server).

Is this bug still not fixed yet??? It´s really urgent!

[Torsten.]

The current firmware is 1.65, try this.

[UserHP]

Where to get? The Download Area of HP ILO is frustrating. The vcagent only offers the v1.61 as latest version.

[Torsten.]

www.hp.com

-> support -> drivers

-> search for "ilo-3"

-> select windows

download the file, extract it, use the *.bin file directly on the ILO web interface.

http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetails/?sp4ts.oid=4154847&spf_p.tpst=swdMain&spf_p.prp_swdMain=wsrp-navigationalState%3Didx%253D%257CswItem%253DMTX_abf6391893fc490fa687b76d4c%257CswEnvOID%253D4138%257CitemLocale%253D%257CswLang%253D%257Cmode%253D%257Caction%253DdriverDocument&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vig...

[UserHP]

Nope, doesn´t work also on v1.65. Doesn´t it support key length of 2048 or what crap is that SSL implementation on ILO?!?