ILO Firmware 2.30 Enforce AES/3DES Encryption mode

[Tobias Ketter]

with ILO4 Firmware 2.30 the setting "Enforce AES/3DES Encryption mode" has changed to true as default.

I cannot register the server (while this setting is set to true) to OneView 2.00.02-0219211

Is there an option i have to change or will there be an update to solve this behaviour ?

[ChrisLynch · Accepted solution]

I am not aware of the iLO 'enforcing' 3DES/AES Encryption.  That being said, no OneView does not supprt this setting today, and you will need to disable this setting in the iLO.

[Tobias Ketter]

http://h20564.www2.hpe.com/hpsc/swd/public/detail?sp4ts.oid=5228286&swItemId=MTX_ba115781e922495e9a6e1ed6ed&swEnvOid=4064#tab2

Ok, then this is the only solution yet. Thank you.

[AkiraX]

Same issue with iLO3 v1.88 and latest oneview....

[adamcole]

This seems like my issue.

https://community.hpe.com/t5/HPE-OneView/Oneview-support-for-Enforce-AES-3DES-Encryption/td-p/6979844

[adamcole]

Confirmed it works with ilo 3 firmware 1.85.  So the 1.88 firmware definitely seems to be to blame.

[Kelly M Knowles]

I ran into this before.  It is rather annoying that you have to keep RC4 encyption around just to have OneView support it.