Website's Security Certificate Error Page When Connecting to iLO1 & iLO2 through Internet Explorer 7

[Phong Lam]

Hello IT Professionals,

I am just wondering if someone have experienced this same issue and hopefully someone had resolved this problem before. The problem is that when I opened up Internet Explorer 7 and typed in the web address to one of my iLO servers (iLO1 or iLO2), this is even before the Logon page is shown up. It displays the following error message (red 'X' security shield) on the page:

"There is a problem with this website's security certificate.

The security certificate presented by this website was not issued by a trusted certificate authority.

Security certificate problems may indicate an attempt to fool you or intercept any data you send to the server.

We recommend that you close this webpage and do not continue to this website.

- Click here to close this webpage.
- Continue to this website (not recommended).
- More information."

When I clicked on "Continue to this website (not recommended)" link, it brought me to the logon page and I am able to log onto both of my iLO 1 & 2 servers without any problems. I have updated all of my firmware to the latest versions on both types of my iLO (iLO1 is currently at v1.92 & iLO2 is at v1.50) as of this writing. I have also tried Microsoft's support that is provided at this link:

http://support.microsoft.com/kb/931850

It is still giving me the same issue. I have also activated/installed the licensing for the "Advanced features". If someone had this same issue before or have any other possible solutions to this type of problem, please help.

Thank you very much in advance for your help!

[barnett chan]

After you install the certificate, then use the iLO dns name to logon to iLO. If you use the IP, the ip does not match the DNS name on the certificate, so you still get the warning.

[Phong Lam]

I always log on through DNS name, such as http://ilo-SERVERNAME or https://ilo-SERVERNAME. I even tried http://static_IPAddress. All give me same issue. Thanks for the help!

[KarloChacon]

hi

As far as I remember there is no way to avoid only if you get a real certificate and you have to install it I mean I real digital certificate from companies like VeriSign otherwise you have to press continue all the time

regards

[acartes]

Examine the certificate details and take a look at the certificate subject. This is the network name that is conflicting with the browser URL and causing the warning.

[R Smitty]

While I don't have a solution, I too have the same problem.

Utilizing the iLo Administration site, I generate a Certificate Request and export to my certificate authority. After approving and installting the certificate, I notice the Subject name is only https://.. and not the required FQDN to access the ilo. Therefore, accessing the ilo via the https:// warns me with the above mentioned security prompt.

This appears to be an issue with the certificate request generation, and I'm not knowledgeable enough to hack it apart with OpenSSL tools... any idea why the cert request tool isn't taking the full FQDN as the subject (as it should)??

[misterm]

I am having this same certicate error for all of my Laserjet P4014 printers. I do not have this issue for any my other HP models.
Is it a problem with the firmware?

[acartes]

This is not a problem with the firmware.

The devices (like iLO) that accept secured connections (SSL) exchange certificates with the client (browser). The certificates are part of the security exchange, and in part they help prove the authenticity of the site (i.e., not a trojan horse).

Your browser is reacting to the iLO certificate - it was issued by iLO to iLO, a self-signed certificate. This is suspicious to the browser, so it flags it and makes you decide whether to trust the site.

You have a few options
- accept and import the certificate
- allow it for the current session
- install a certificate that was issued by a trusted certificate authority (CA). (details on the iLO 2 Administration/Security/SSL Certificate tab)

The best practice would be to install certificates from a trusted CA.

[misterm]

I had accepted the certificate in the default location but that did not work. Here is how I did fix it.
1. Logged in to PC as a domain administrator. View Cert/Install Cert/Next/
2. Choose "Place all certificates in the following store'
3. Browse /ï Show physical stores. / Enterprise Trust/Group Policy / Next Finished.

[misterm]

Follow up: I discovered you can have the printer not require https but use http by going to Networking/Mngt. Protocals/ and unchecking the box that says: "Encrypt All Web Communications (not including IPP)