hp ilo6 TaskService task never runs. Stays in New state forever.

[vipulms]

Hi
I'm trying to enroll secureboot certificate using the POST api present here - Secure Boot Databases . I'm on the latest version of ilo6 and also updated the ROM version on the machine - ProLiant DL380 Gen11. When I send the POST request to register the certificate I get a response saying that a Task is created for the same -

```
{
  "@odata.context": "/redfish/v1/$metadata#Task.Task",
  "@odata.etag": "W/\"6FEA377A\"",
  "@odata.id": "/redfish/v1/TaskService/Tasks/2",
  "@odata.type": "#Task.v1_3_0.Task",
  "Id": "2",
  "Description": "iLO Task",
  "Name": "Task 2",
  "Payload": {
    "HttpOperation": "POST",
    "JsonBody": "{\"CertificateString\":\"-----BEGIN CERTIFICATE-----\\n<removed certificate>\\n-----END CERTIFICATE-----\\n\",\"CertificateType\":\"PEM\"}",
    "TargetUri": "/redfish/v1/Systems/1/SecureBoot/SecureBootDatabases/db/Certificates"
  },
  "StartTime": "2025-02-14T10:12:40Z",
  "TaskMonitor": "/redfish/v1/TaskService/TaskMonitors/2",
  "TaskState": "New"
}
```

But even after restarting the machine and waiting for hours, this task never progresses. Always remains in the "New" state. I've checked the TaskService and it is enabled- 

```

  "@odata.context": "/redfish/v1/$metadata#TaskService.TaskService",
  "@odata.etag": "W/\"538CCB4A\"",
  "@odata.id": "/redfish/v1/TaskService",
  "@odata.type": "#TaskService.v1_1_1.TaskService",
  "Id": "TaskService",
  "CompletedTaskOverWritePolicy": "Manual",
  "DateTime": "2025-02-14T08:15:07Z",
  "Description": "iLO Task Service",
  "LifeCycleEventOnTaskStateChange": true,
  "Name": "Task Service",
  "ServiceEnabled": true,
  "Status": {
    "Health": "OK",
    "HealthRollup": "OK",
    "State": "Enabled"
  },
  "Tasks": {
    "@odata.id": "/redfish/v1/TaskService/Tasks"
  }
}
```

Please let me know how can I debug this or help progress the task in TaskService. The redfish ilo docs don't mention anything about this, and I don't see anyone facing the same issue.

[Jessica926G]

Hello!

To debug the issue with enrolling a Secure Boot certificate via the iLO6 API, ensure the TaskService is enabled, restart iLO, clear the task queue, and update firmware.

[vipulms]

Hi @Jessica926G  As already mentioned above, I have ensured TaskService is up, restarted iLo, cleared taskqueue and update the firmware to latest and still that hasn't fixed the issue. Need some more help here. When do we expect the tasks to run ?

[Mr_Techie]

Hi @vipulms 

Give a try to below suggestions

- Check for Stuck or Blocking Tasks>> Look for other tasks in "Running", "Suspended", or "Pending" states.>> If any exist, delete them

- Manually Trigger Task Execution- Try forcing the task to start>>

- Check for Background Processes Blocking Execution- Check ongoing updates>> If an update is in progress, iLO might be queuing your task. Verify Secure Boot status If enabled, try disabling it and then re-enrolling the certificate.
- Use Task Monitor to Resume Execution. If a TaskMonitor exists, check its status>> If it's stuck, force execution

- Alternative: Direct Certificate Upload (Bypass Task Service)- If TaskService is failing, try enrolling the certificate directly

I hope this helps. If the issue persists, collect iLO debug logs, Check firmware release notes for known Task Service bugs and Consider rolling back or updating to a different iLO version.

Let me know how it goes. 

[support_s]

Hello,

Let us know if you were able to resolve the issue.

If you are satisfied with the answers then kindly click the "Accept As Solution" button for the most helpful response so that it is beneficial to all community members.

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

[vipulms]

Hi @Mr_Techie 
- There are no stuck or blocking tasks. There is only one task present which is stuck in New state for me. I've tried deleting and readding it but that doesn't do anything.

- What do you mean when you say force task execution? How do we do that? Are there any docs for that? I thought that the task should automatically get processed without us doing anything and that doesn't happen

- Direct certificate upload is working but I need to automate it using redfish and that is what the thread is about.

I'm on the latest iLo and firmware version, and no background processes/updates are running.

[jasinfviuanrsgv]

Bump. Running into the same issue here.

[jasinfviuanrsgv]

After weeks (months?) of back and forth with HPE I believe I got answers here.

You must:

• Have an iLO advanced key applied
• Clear your iLO task queue. Just do DELETE queries on each task shown in /redfish/v1/TaskService/Tasks
• Execute the redfish queries while the system is powered off
• When you execute the queries to add the certs you must do this workflow.

1. Delete the PK key. This sets the BIOs in SetupMode for secure boot
2. Reboot and get through POST status "InPostDiscoveryComplete"
3. Upload the DB key
4. Reboot and get through POST status "InPostDiscoveryComplete"
5. Upload the KEK key
6. Reboot and get through POST status "InPostDiscoveryComplete"
7. Re-upload your PK key (in my case Im keeping the HP default PK)

This whole process sucks and is very very slow.

Hope this helps.