Server Management - Remote Server Management
1748028 Members
5059 Online
108757 Solutions
New Discussion юеВ

Re: Anyone have iLO 3 certificate signing working?

 
SOLVED
Go to solution
NJK-Work
Honored Contributor

Anyone have iLO 3 certificate signing working?

We have been able to sucessfully sign iLO 2 certicates with our internal Windows 2008 R2 CA and it works great. Now we are trying to use the same process and certifcate template (1024-bit encryption) with the new iLO 3 and it is not working. It says:

The Certificate could not be imported from the supplied X.509 Certificate data.

Check the following:
- Make sure that the input text was base64 encoded X.509 Certificate data.
- Make sure that the input X.509 Certificate data was intended for this server (not another server).

Does anyone have document process for signing iLO 3 certicates with a Windows 2008 or 2008 R2 CA that they could share? Here what we have been doing in the past:

1) Generate certicate from iLO web interface and copy it to clipboard.
2) Go to our CA web site http://caservername/certsrv
3) Click on "Request a Certificate" link
4) Click on "Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file" link.
5) Paste from clipboard into the "Saved Request" field.
6) Select our template from the "Certificate Template" drop-down list. This is the same one that works perfectly for iLO 2 (1024-bit encryption).
7) Click on the "Submit" button.
8) Select "Base 64 encoded" radio button.
9) Click on "Download Certifcate" button and save as a TEXT file.
10) Copy contents of TEXT file to the "Import the certificate" field in the iLO 3 web page.
11) Generates above mentioned error.

Thanks
Nelson
12 REPLIES 12
Brody
Occasional Advisor

Re: Anyone have iLO 3 certificate signing working?

We're having the exact same problem with iLO3 and our Windows 2003 CAs. (Working fine with iLO / iLO2.)

iLO3 FW: 1.05

No solution as yet, but at least you know you're not alone. Will post more info if I find out anything further.
Brody
Occasional Advisor

Re: Anyone have iLO 3 certificate signing working?

Not resolved in iLO3 FW 1.10 either.
NJK-Work
Honored Contributor

Re: Anyone have iLO 3 certificate signing working?

Thanks. Misery love company I guess :)

Nelson
JoshC
New Member

Re: Anyone have iLO 3 certificate signing working?

I am having the same problem with iLO 3 (1.05) and a Windows 2008 R2 Enterprise CA. Is there a fix yet?
Oscar A. Perez
Honored Contributor

Re: Anyone have iLO 3 certificate signing working?

This is what I reproduced. If the cert generated by your CA in Base64 is larger than 2048 bytes then, the iLO3 web interface doesn't allow you to import it.
This will be fixed in the next release.



__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!
Anonymous
Not applicable
Solution

Re: Anyone have iLO 3 certificate signing working?

This issue has been resolved in Firmware 1.15, released October 28.
NJK-Work
Honored Contributor

Re: Anyone have iLO 3 certificate signing working?

Thanks - I will try out the new firmware shortly.
Jonathan_Barker
Occasional Advisor

Re: Anyone have iLO 3 certificate signing working?

f/w v1.15. I'm still having this issue. Furthermore, after the error message is given iLO3 completely locks up and I have to restart it using the windows online configuration tool.

I've tried resetting everything back to defaults with no success.
Oscar A. Perez
Honored Contributor

Re: Anyone have iLO 3 certificate signing working?

How big is your cert? Can you attach one so I can test it?



__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!