Server Management - Remote Server Management
1748204 Members
3905 Online
108759 Solutions
New Discussion юеВ

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

 
Phong Lam
New Member

Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

Hello IT Professionals,

I am just wondering if someone have experienced this same issue and hopefully someone had resolved this problem before. The problem is that when I opened up Internet Explorer 7 and typed in the web address to one of my iLO servers (iLO1 or iLO2), this is even before the Logon page is shown up. It displays the following error message (red 'X' security shield) on the page:

"There is a problem with this website's security certificate.

The security certificate presented by this website was not issued by a trusted certificate authority.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.

We recommend that you close this webpage and do not continue to this website.

- Click here to close this webpage.
- Continue to this website (not recommended).
- More information."

When I clicked on "Continue to this website (not recommended)" link, it brought me to the logon page and I am able to log onto both of my iLO 1 & 2 servers without any problems. I have updated all of my firmware to the latest versions on both types of my iLO (iLO1 is currently at v1.92 & iLO2 is at v1.50) as of this writing. I have also tried Microsoft's support that is provided at this link:

http://support.microsoft.com/kb/931850

It is still giving me the same issue. I have also activated/installed the licensing for the "Advanced features". If someone had this same issue before or have any other possible solutions to this type of problem, please help.

Thank you very much in advance for your help!
16 REPLIES 16
barnett chan
Trusted Contributor

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

After you install the certificate, then use the iLO dns name to logon to iLO. If you use the IP, the ip does not match the DNS name on the certificate, so you still get the warning.
Phong Lam
New Member

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

I always log on through DNS name, such as http://ilo-SERVERNAME or https://ilo-SERVERNAME. I even tried http://static_IPAddress. All give me same issue. Thanks for the help!
KarloChacon
Honored Contributor

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

hi

As far as I remember there is no way to avoid only if you get a real certificate and you have to install it I mean I real digital certificate from companies like VeriSign otherwise you have to press continue all the time

regards
Didn't your momma teach you to say thanks!
acartes
Honored Contributor

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

Examine the certificate details and take a look at the certificate subject. This is the network name that is conflicting with the browser URL and causing the warning.
R Smitty
New Member

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

While I don't have a solution, I too have the same problem.

Utilizing the iLo Administration site, I generate a Certificate Request and export to my certificate authority. After approving and installting the certificate, I notice the Subject name is only https://.. and not the required FQDN to access the ilo. Therefore, accessing the ilo via the https:// warns me with the above mentioned security prompt.

This appears to be an issue with the certificate request generation, and I'm not knowledgeable enough to hack it apart with OpenSSL tools... any idea why the cert request tool isn't taking the full FQDN as the subject (as it should)??
misterm
Frequent Advisor

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

I am having this same certicate error for all of my Laserjet P4014 printers. I do not have this issue for any my other HP models.
Is it a problem with the firmware?
"I have always wished that my computer would be as easy to use as my telephone. My wish has come true. I no longer know how to use my telephone"
acartes
Honored Contributor

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

This is not a problem with the firmware.

The devices (like iLO) that accept secured connections (SSL) exchange certificates with the client (browser). The certificates are part of the security exchange, and in part they help prove the authenticity of the site (i.e., not a trojan horse).

Your browser is reacting to the iLO certificate - it was issued by iLO to iLO, a self-signed certificate. This is suspicious to the browser, so it flags it and makes you decide whether to trust the site.

You have a few options
- accept and import the certificate
- allow it for the current session
- install a certificate that was issued by a trusted certificate authority (CA). (details on the iLO 2 Administration/Security/SSL Certificate tab)

The best practice would be to install certificates from a trusted CA.
misterm
Frequent Advisor

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

I had accepted the certificate in the default location but that did not work. Here is how I did fix it.
1. Logged in to PC as a domain administrator. View Cert/Install Cert/Next/
2. Choose "Place all certificates in the following store'
3. Browse /├п Show physical stores. / Enterprise Trust/Group Policy / Next Finished.
"I have always wished that my computer would be as easy to use as my telephone. My wish has come true. I no longer know how to use my telephone"
misterm
Frequent Advisor

Re: Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

Follow up: I discovered you can have the printer not require https but use http by going to Networking/Mngt. Protocals/ and unchecking the box that says: "Encrypt All Web Communications (not including IPP)
"I have always wished that my computer would be as easy to use as my telephone. My wish has come true. I no longer know how to use my telephone"