Certificate Signing Request RIBCL script doesn't work with iLO 3

[Jiri Konecny]

While using Cert_Request.xml RIBCL script, running it like "hponcfg -f Cert_Request.xml" on RHEL 5 on DL380G7 with iLO 3 I get "Error processing the XML file : /.../Cert_Request.xml".

It works like a champ on iLO 2 equipped servers, though.

Any clues?

[Oscar A. Perez]

Are you using the latest hponcfg version 3.1.1.0 for Linux?

[Jiri Konecny]

Originally tried with hponcfg 3.1.0-0. Now with 3.1.1-0, same results..

But thanks for tip.

[Jiri Konecny]

Found a workaround:
With additional perl RPM packages and by providing login and password to RIBCL XML script we can run locfg.pl script (Simplified perl version of CPQLOCFG) from some workstation.

However, as we built scripts around hponcfg, we'd like to solve this. Could new iLO FW version 1.20, that I've seen announced somewhere here in ITRC, be a solution?

[Jiri Konecny]

Tested with new iLO 3 1.20 FW, still the same error present...

[Oscar A. Perez]

Ok, I just reproduced the problem. It seems that both hponcfg and locfg.pl are timing out while iLO3 is still working on generating the Cert Request. This is why you get an error.

iLO3 takes longer than iLO2 to generate the Cert Request because, iLO3 generates the needed RSA key on the fly while iLO2 uses RSA keys previously generated that are stored in NVRAM because, iLO2 has a lot slower processor and generating a key on the fly was not an option.

Also, I just tested cpqlocfg.exe for Windows and confirmed that the Cert_Request.xml script works fine with this tool because, this tool has a larger timeout.

Anyway, I'm opening a ticket against both hponcfg and locfg.pl to get their time out increased.