iLO Java Remote Console: Upcoming JRE 1.7u51

[Bluequartz]

iLO with Java 8 Update 45 and IE11

- add site name to exception site list in Java Control panel under Security

- disable TLS 1.1 and TLS 1.2 under Advanced in Java Control panel

- disable TLS 1.1 and TLS 1.2 in IE11 in Internet options --> Advanced

this workaround help me wonderfull

[Oscar A. Perez]

---

@Bluequartz wrote:

iLO with Java 8 Update 45 and IE11

- add site name to exception site list in Java Control panel under Security

- disable TLS 1.1 and TLS 1.2 under Advanced in Java Control panel

- disable TLS 1.1 and TLS 1.2 in IE11 in Internet options --> Advanced

this workaround help me wonderfull

---

Edit:  I finally had the time to do an in-depth debugging session and I found the root cause.  See below.

[Oscar A. Perez]

Quick update:

I found that the RSA SSL library used by iLO2 wasn't handling the Client Hello properly, when the Client Hello messages sent by SSL clients came in a TLS 1.1 or TLS 1.2 record.  Both Java and IE11 send their Client Hello messages in TLS 1.2 records.  Chrome on the other hand, always sends Client Hello messages in a TLS 1.0 record for backward compatability.

I'm testing a fix for this issue.  

Oscar

[Oscar A. Perez]

Quick update.

iLO2 v2.29 with a fix for this issue has been released.

[ulicky]

Hi, any chance, that this fix will be implemented in ilo100 (eg.HP ProLiant DL180 G6 Server). Thanks

[andy_l]

Yes a fix for the LO100 in the DL180 G6 would be most appreciated! This firmware hasn't been updated since July 1013...

Cheers,

Andy

[andy_l]

Any more news on whether the LO100 board might receive a firmware update to resolve this issue?

Cheers,

Andy

[Falkons]

Thanks, works for me, by disabling TLS 1.1 & 1.2.

HP DL380 G4 ILO 1.96

[Samehzakii]

https://www.youtube.com/watch?v=qHoq0vSnH3w