Simpler Navigation for Servers and Operating Systems
Completed: a much simpler Servers and Operating Systems section of the Community. We combined many of the older boards, so you won't have to click through so many levels to get at the information you need. Check the consolidated boards here as many sub-forums are now single boards.
Server Management - Remote Server Management
cancel
Showing results for 
Search instead for 
Did you mean: 

ilo 2 firmware v2 - certificate FQDN

dhermans
Advisor

ilo 2 firmware v2 - certificate FQDN

nice to hear that this issue has been fixed in the latest firmware.

Has anyone tried it?
I set Domain name to 'Fully Qualified Domain Name' and generated a cert.

it creates the CN without a '.' between hostname and domain name. No biggie, set the network/domain name to .domain.name instead of domain.name and restart

now the CSR looks good, sign it with an OpenSSL CA i use, import it and restart.

upon restart it's back to the original default cert. Try to import the cert again - also fails as the private key is no longer in memory.

Anyone tried this and got it to work?
Surely it was tested so must be something I'm doing!!!!
14 REPLIES
dhermans
Advisor

Re: ilo 2 firmware v2 - certificate FQDN

anyone from HP monitor these forums?
anyone read these forums?
R9Y
Occasional Visitor

Re: ilo 2 firmware v2 - certificate FQDN

Yes, I've tried and have the same issue with the first . missing at the start of the domain name and the amusing fact it doesnt seem to actually import the certificate.

Oh well.. 2.1 please...
Oscar A. Perez
Honored Contributor

Re: ilo 2 firmware v2 - certificate FQDN

The new certificate does get imported but because of the missing DOT in the FQDN, the new certificate is marked as invalid and replaced by the default one when iLO2 reboots.

This issue is going to be fixed in iLO2 2.10



__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!
dhermans
Advisor

Re: ilo 2 firmware v2 - certificate FQDN

Any timeframe when firmware 2.10 will be out?

Logged a call on this, after 9 days of inactivity it was just closed!

Seriously terrible support
Gerrit Heinen - T-ICT B
Occasional Contributor

Re: ilo 2 firmware v2 - certificate FQDN

anybody from HP who can give a timeline?

*kick*
Chris Paalman_1
Occasional Contributor

Re: ilo 2 firmware v2 - certificate FQDN

"Surely it was tested", very interesting observation.

If one of the bullet points about iLO firmware v2 is the ability to use FQDN, one would hope at least a single Q/A person would have tested this and found the problem.

I'm embarrassed for ever convincing the boss to dump our KVM solution for iLO.
dhermans
Advisor

Re: ilo 2 firmware v2 - certificate FQDN

if anyone wants a laugh or is wondering how efficient HP support is actually logged a call on this issue. here is what i have experienced:

12-july - logged

9 days no updates
21-july - comment "Incident was misrouted to HpSw Ovsc."

3 days no updates
24-july - a 'we're working on this with a high priority' comment

6 days and counting with no updates

Oscar A. Perez
Honored Contributor

Re: ilo 2 firmware v2 - certificate FQDN

iLO2 2.01 with the fix for this FQDN bug is being tested right now.
I will post an update here as soon as 2.01 gets signed off.



__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!
Oscar A. Perez
Honored Contributor

Re: ilo 2 firmware v2 - certificate FQDN

iLO2 Firmware version 2.01 has been released.

Windows Online Component:
ftp://ftp.hp.com/pub/softlib2/software1/sc-windows-fw-ilo/p1443420321/v63248

Linux Online Component:
ftp://ftp.hp.com/pub/softlib2/software1/sc-linux-fw-ilo/p1285463034/v63249



__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!
DTriplett
Occasional Contributor

Re: ilo 2 firmware v2 - certificate FQDN

I've been able to get this to work using FW 2.01 and the iLO2 GUI. However, there doesn't seem to be any documentation on setting the domain name entry in the SSL Certificate screen to "Fully Qualified Domain Name" from "Short Name" via script. I need to be able to set this before issuing the Certificate Signing Request (also via script).

Has anyone been able to figure this one out yet?

David
Ben Short
Frequent Advisor

Re: ilo 2 firmware v2 - certificate FQDN

I'm Also Looking for documentation on how to set the SSL Certificate to FQDN from shorthost via RIBCL..

Having been working on this for several months now it is growing increasingly frustrating :)

Oscar A. Perez
Honored Contributor

Re: ilo 2 firmware v2 - certificate FQDN

Please try












__________________________________________________
If you feel this was helpful please click the KUDOS! thumb below!
DTriplett
Occasional Contributor

Re: ilo 2 firmware v2 - certificate FQDN

Thanks, Oscar! That worked great!
Jiri Konecny
Occasional Advisor

Re: ilo 2 firmware v2 - certificate FQDN

Is there a way to generate CSR for FQDN and short iLO hostname at the same time?