Can't start ILO: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

[MattijsK]

Since i liked the first one I bought a second ML310e Gen8 server. This one has a shared ILO connection. I however can't reach it at its IP adress.

the browser tells me it has an unsupported protocol, shows the error 'ERR_SSL_VERSION_OR_CIPHER_MISMATCH'. Under details it reads; "De client en de server ondersteunen geen gemeenschappelijke SSL-protocolversie of suite met coderingsmethode."

this translates to: "Client and server don't support a common SSL protocolversion or suite with coding method".

How can I get to ILO to check settings etc?

[MattijsK]

I found on Google that the ILO version is too old. I can get to it with Internet Explorer. Is it safe to update to the latest version in one step or is it better to do it in increments?

It has 1.20 at the moment which is from 2013.

[MattijsK · Accepted solution]

Well, I took the plunge and update straight to the 2,79 version. That worked alright. I can connect to ILO over modern browsers now.

[PDP-Fan]

I had the same problem. No modern browser accepts the connection.

I solved the problem by using "VNX Launcher" from EMC. This is based on a Firefox portable version and it was made to open websites that use Java or any other outdated protocols. It may be a bit difficult to find it at EMC but a normal Firefox Portable version will probably also work.

After connecting to iLO3, you should go to settings:  iLO Administration - Encryption - AES -> enabled
Then (they say) iLO is accessible with modern browsers too. I'll try it now...

EDIT: Nope! The error changes from cipher_mismatch to "can not open website". So Firefox Portable (VNX Launcher) is the only option that works. (Firefox 51.0.1, 32bit)

[mcferrero]

THANK YOU! Our HP ProLiant ML110 G7 ILO 3 v1.94 (Dec 06 2020) servers now are accesible. I dont understand why is this an issue or how to resolve it with normal browsers.

[mcferrero]

Here is the link for the software:
https://www.dell.com/support/kbdoc/en-us/000019852/vnx1-vnx2-how-to-install-vnx-launcher-that-has-embedded-java-and-firefox-user-correctable

[SantaNurse]

After updating the iLO firmware (1.94 from 20201217 was the latest I found) you have to enable AES in the iLO Web UI. 
Then you can use modern browsers and the iLO Integrated Remote Console for Windows again. 

[SantaNurse]

Uhm, for the modern browser I have to add something: it looks as if TLS 1.2 is not supported, therefore probably not possible to use recent browser versions.

But: Windows iLO remote access is definitely working which is good enough in my case as for the iLO web GUI I use an old Windows VM with an old Internet Explorer webbrowser

[lyra12]

The browser showing the  "ERR_SSL_VERSION_OR_CIPHER_MISMATCH" appears due to a lack of “common SSL protocol version or cipher suite support” between a web server and a user’s browser. This issue happens during the TLS handshake process.  So the Client and server don't support a standard SSL protocol version or suite, and the coding method being faced can be solved, and there are different methods. You can understand the error solution in detail at https://certera.com/kb/how-to-fix-the-err_ssl_version_or_cipher_mismatch-error/. Maybe it will be helpful!