Server Management - Remote Server Management
cancel
Showing results for 
Search instead for 
Did you mean: 

Certificate Signing Request RIBCL script doesn't work with iLO 3

Jiri Konecny
Occasional Advisor

Certificate Signing Request RIBCL script doesn't work with iLO 3

While using Cert_Request.xml RIBCL script, running it like "hponcfg -f Cert_Request.xml" on RHEL 5 on DL380G7 with iLO 3 I get "Error processing the XML file : /.../Cert_Request.xml".

It works like a champ on iLO 2 equipped servers, though.

Any clues?
5 REPLIES
Oscar A. Perez
Honored Contributor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Are you using the latest hponcfg version 3.1.1.0 for Linux?



__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!
Jiri Konecny
Occasional Advisor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Originally tried with hponcfg 3.1.0-0. Now with 3.1.1-0, same results..

But thanks for tip.
Jiri Konecny
Occasional Advisor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Found a workaround:
With additional perl RPM packages and by providing login and password to RIBCL XML script we can run locfg.pl script (Simplified perl version of CPQLOCFG) from some workstation.

However, as we built scripts around hponcfg, we'd like to solve this. Could new iLO FW version 1.20, that I've seen announced somewhere here in ITRC, be a solution?
Jiri Konecny
Occasional Advisor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Tested with new iLO 3 1.20 FW, still the same error present...
Oscar A. Perez
Honored Contributor

Re: Certificate Signing Request RIBCL script doesn't work with iLO 3

Ok, I just reproduced the problem. It seems that both hponcfg and locfg.pl are timing out while iLO3 is still working on generating the Cert Request. This is why you get an error.

iLO3 takes longer than iLO2 to generate the Cert Request because, iLO3 generates the needed RSA key on the fly while iLO2 uses RSA keys previously generated that are stored in NVRAM because, iLO2 has a lot slower processor and generating a key on the fly was not an option.

Also, I just tested cpqlocfg.exe for Windows and confirmed that the Cert_Request.xml script works fine with this tool because, this tool has a larger timeout.

Anyway, I'm opening a ticket against both hponcfg and locfg.pl to get their time out increased.



__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!