Error when importing a certificate in iLO

[OlivierV]

Hello.
I want to import a certificate into an iLO.
I generate the PKCS 10 file, make it signed by our CA, download the PKCS 7 file, copy the datas and paste them into the 'import certificate' window of the iLO.
Then the answer is :
The Common name on the certificate does not match the DNS name of Integrated Lights-Out.

In the Network settings of the iLO, the name of the iLO and the domain are correct, the DNS entry matches these settings.

What could be the problem ?

Thank you.

[barnett chan]

Did you use the "Web Server" Certificate template?

[OlivierV]

Hi Bwc.

What do you mean by 'Web server cetificate template' ?
I'm not familiar with the certificates.

[barnett chan · Accepted solution]

Hi OliverV,

1. Connect to iLO, and click on the Administration-> Certificate Administration page.
2. Click on "Create Certificate Request" button.
3. Press Ctrl + A to highlight the certificate, and Ctrl + C to copy it.
4. Connect to your Certificate server, and select "Request a certificate"
5. Click on the "advanced certificate request" link.
6. Click on the "Submit a certificate request by using a base-64-encode CMC or KCS#10file..."
7. Paste your iLO certificate into the "Saved Request" field.
8. For the Certificate Template, choose "Web Server", then click on Submit.
9. Click on the "Base 64 encoded", then click on the "download certificate" link.
10. Save the certificate at a location.
11. Back to the iLO certificate page. Click on next.
12. Open your saved certificate with notepad. Ctrl+A to select all, then Ctrl+c to copy.
13. Paste it into the iLO certificate page, and click on the Import Certificate button.
14. Once the certificate had been imported, reset iLO. You can click on the apply button in the network settings page.
15. The next time you logon to this iLO, it will have your new certificate.

[OlivierV]

Hi.

Thank you.
It is the procedure I followed. There is only one difference : I do not have the 'Web server' template option, only Basic EFS and user.
That may be the source of the problem. Is 'Web server' mandatory ?

Regards.

[barnett chan]

Yes.

[OlivierV]

See above. The problem is not on the iLO but with the certificate server.