Remote Lights-Out Mgmt (iLO 2, iLO, RILOE II) Forum
Showing results for 
Search instead for 
Do you mean 

Certificate Signing Request RIBCL script doesn't work with iLO 3

Occasional Advisor

Certificate Signing Request RIBCL script doesn't work with iLO 3

While using Cert_Request.xml RIBCL script, running it like "hponcfg -f Cert_Request.xml" on RHEL 5 on DL380G7 with iLO 3 I get "Error processing the XML file : /.../Cert_Request.xml".

It works like a champ on iLO 2 equipped servers, though.

Any clues?
5 REPLIES
Honored Contributor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Are you using the latest hponcfg version 3.1.1.0 for Linux?



__________________________________________________
I work for Hewlett Packard

If you feel this was helpful please click the KUDOS! thumb below!
Occasional Advisor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Originally tried with hponcfg 3.1.0-0. Now with 3.1.1-0, same results..

But thanks for tip.
Occasional Advisor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Found a workaround:
With additional perl RPM packages and by providing login and password to RIBCL XML script we can run locfg.pl script (Simplified perl version of CPQLOCFG) from some workstation.

However, as we built scripts around hponcfg, we'd like to solve this. Could new iLO FW version 1.20, that I've seen announced somewhere here in ITRC, be a solution?
Occasional Advisor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Tested with new iLO 3 1.20 FW, still the same error present...
Honored Contributor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Ok, I just reproduced the problem. It seems that both hponcfg and locfg.pl are timing out while iLO3 is still working on generating the Cert Request. This is why you get an error.

iLO3 takes longer than iLO2 to generate the Cert Request because, iLO3 generates the needed RSA key on the fly while iLO2 uses RSA keys previously generated that are stored in NVRAM because, iLO2 has a lot slower processor and generating a key on the fly was not an option.

Also, I just tested cpqlocfg.exe for Windows and confirmed that the Cert_Request.xml script works fine with this tool because, this tool has a larger timeout.

Anyway, I'm opening a ticket against both hponcfg and locfg.pl to get their time out increased.



__________________________________________________
I work for Hewlett Packard

If you feel this was helpful please click the KUDOS! thumb below!
//Add this to "OnDomLoad" event