HPE 9000 and HPE e3000 Servers
1748089 Members
5075 Online
108758 Solutions
New Discussion юеВ

Re: MP Console Certificate expired

 
SOLVED
Go to solution
S.S.
Super Advisor

MP Console Certificate expired

Hi,

My OS model is rp3440. When i logged to MP console i have seen the following:

*************************************************************************
Your Certificate is expired.
Use the SO command to generate a new certificate.
*************************************************************************

and i have issued SO command:

MP MAIN MENU:

CO: Console
VFP: Virtual Front Panel
CM: Command Menu
CL: Console Log
SL: Show Event Logs
HE: Main Help Menu
X: Exit Connection

[oraap2] MP> cm



(Use Ctrl-B to return to MP main menu.)



[oraap2] MP:CM> so


SO

This command allows you to modify the security options.
For User Configuration see the UC command.
For SNMP Configuration see the ID command.
For SSH enable/disable see the SA command.


Current Security Options:
O - Login Options
L - SSL Certificate
- - SSH Key Pairs (MP Feature Not Licensed)

Enter menu item or [Q] to Quit:

Here what option i have select?

And also may i know what happens if the certificate expires?

Thank you.
5 REPLIES 5
Michal Kapalka (mikap)
Honored Contributor

Re: MP Console Certificate expired

Matti_Kurkela
Honored Contributor
Solution

Re: MP Console Certificate expired

The SSL certificate is used in MP's HTTPS web interface.

If your certificate is expired, your web browser will give you warnings about it when you use it to access the MP. Some browsers allow you to skip the warning; others might not. Newer browsers tend to have more obnoxious warnings than older ones.

In general, a well-maintained HTTPS web site should always keep its certificate up to date. The average user should become suspicious if a site uses an expired certificate.

With the web GUI of the MP, the situation might be somewhat different, but it's still a good practice to keep the certificate up to date.

When you use the SO command, select L to access the SSL certificate options. Creating a SSL certificate usually requires several parameters, like a Common Name, Organization, Organizational Unit, Country, Region and Locality/City. The most important thing is the Common Name: it must match the hostname part of the URL used to access the HTTPS service, or the web browser will display warnings about the certificate. Other parameters will be for display only, for when the certificate information is displayed in the browser.

If you don't use the HTTPS web interface of the MP, you can ignore this message... but in that case, you really should disable the web access feature of the MP.

Use the SA command to enable/disable MP's access methods. The option W will enable/disable HTTPS access.

MK
MK
cnb
Honored Contributor

Re: MP Console Certificate expired

Hi,

In addition...

More information about SSL and Certificate Generation can be found in the MP guide:

http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c01868331/c01868331.pdf

Hope this helps.

Rgds,
S.S.
Super Advisor

Re: MP Console Certificate expired

Thank you all for helping me.
Special thanks to MK for making me more clear and understandable.
Thanks for your great help!!

S.S.
Super Advisor

Re: MP Console Certificate expired

Thank you all for helping me.
Special thanks to MK for making me more clear and understandable.
Thanks for your great help!!

MK, based on your steps i have generated a new certificate by using the web.