Simpler Navigation for Servers and Operating Systems - Please Update Your Bookmarks
Completed: a much simpler Servers and Operating Systems section of the Community. We combined many of the older boards, so you won't have to click through so many levels to get at the information you need. Check the consolidated boards here as many sub-forums are now single boards.
If you have bookmarked forums or discussion boards in Servers and Operating Systems, we suggest you check and update them as needed.
Server Management - Remote Server Management
cancel
Showing results for 
Search instead for 
Did you mean: 

Cannot Connect to ILO after Adding License

Edvar Lima
Occasional Contributor

Cannot Connect to ILO after Adding License

ILO was accessible but unlicensed.

After installing the ILO2 License, the ILO was reset and I tried to access it again. Every time I get this error message:

Certificate Authentication Failure

Authentication attempt with certificate failed.

Please close your browser and open a new browser to retry authentication.


* The certificate you provided may not be issued by the trusted CA
* The certificate you provided may have been revoked
* The certificate may not be mapped to a local user account

I read somewhere here that this is related to Two-way Authentication, which I didn't enable.

I tried to disable the 2-way Authentication with CPQLOCFG:

CPQLOCFG.EXE -s -u
Administrator -p -f Mod_2Factor.xml -l log.txt

And I get:

Valid XML Syntax

Connecting to Server..
Negotiated cipher: 168-bit Triple DES with RSA and a SHA1 MAC
CPQLOCFG.EXE: ERROR: SSL_read:Connection Terminated:reason(0).

This server is located on a remote site and I need ILO enabled to remote console to it.

Any ideas?

2 REPLIES
Edvar Lima
Occasional Contributor

Re: Cannot Connect to ILO after Adding License

Btw, -s = ILO IP Address
pratap m keshava
Trusted Contributor

Re: Cannot Connect to ILO after Adding License

If two-factor authentication is enabled accidentally then you need to use Browser to login with valid certificate. Otherwise you need to access iLO BIOS console during the server boot process to disable it.

Cpqlocfg can't communicate with iLO when two-factor authentication is enabled. Telnet, SSH and XML interface will be disabled when two-factor authentication is enabled. iLO will reset after enabling this.