Query: HTTP to HTTPS

[nsht]

How can I redirect ILO login url to HTTPS including IP address. Is there any way in ILO5 web management portal to redirect the traffic to HTTPS or add subject alternative name field?

[support_s]

System recommended content:

1. Advisory: HP Integrated Lights-Out 3 (iLO 3) - Changing the Default Port for HTTPS May Cause iLO 3 to Incorrectly Redirect the User From HTTP to HTTPS on the Incorrect Port

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[Sahana_S]

Hello @nsht ,

Install a trusted SSL certificate that is signed by a Certificate Authority (CA) and enable the IRC requires a trusted certificate in iLO setting.

In this configuration, when you access the iLO web interface, iLO returns an HTTP Strict Transport Security (HSTS) flag in the response header, which enables the browser to automatically redirect any HTTP request to HTTPS.

When you submit the CSR to the CA, your environment might require the specification of Subject Alternative Names.

For more information on generating CSR and Import an SSL Certificate, please refer to this link.

Thanks,
Sahana S

[TVVJ]

Hello,

You may refer to "HPE iLO 5 User Guide" and see if it helps.

Regards,

[support_s]

Hello,

Let us know if you were able to resolve the issue.

If you are satisfied with the answers then kindly click the "Accept As Solution" button for the most helpful response so that it is beneficial to all community members.

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

[amandaolivia2]

---

@support_s wrote:

System recommended content:

1. Advisory: HP Integrated Lights-Out 3 (iLO 3) - Changing the Default Port for HTTPS May Cause iLO 3 to Incorrectly Redirect the User From HTTP to HTTPS on the Incorrect Port

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

---

I’m looking into this as well, and I also have the same question. I’d like to make sure the iLO 5 management interface always redirects HTTP traffic to HTTPS, including when accessing it directly by IP address. I can see how this would be useful for avoiding insecure connections and browser certificate warnings.

I also have the same question about the certificate configuration in the iLO 5 web interface. Specifically, I’m wondering whether there’s a way to add a Subject Alternative Name (SAN) for the IP address or configure the portal to automatically redirect HTTP requests to HTTPS. If anyone has managed to configure this properly on iLO 5, I’d appreciate knowing what settings or certificate options they used.