Disable port 443 on rx2800i4 iLO3 Firmware Revision 01.67.04

[Sharla Faust]

For security reasons we need to disable the iLO from listening on port 443.  We do not use http(s) to get to the iLO so we do not need the port to be active on the iLO.    Has anyone else had to meet this requirement and know how to resolve it (ie. ACAS plugin 20007).

We used the "SA" command in MP to disable web SSL access and rebooted the server but the iLO still allows connections over port 443.

Ex:

CM:hpiLO-> sa

SA

This command allows you to modify MP access configuration.

Current Set Access Configuration:

T - Telnet : Enabled

W - Web SSL : Disabled      <-- Assumed disabling this would stop listening on 443 but it didn't

H - SSH : Enabled

[Torsten.]

Did you reboot the ILO too?

[Sharla Faust]

Hi Torston! Yes, I reset the iLO using XD -reset, and it rebooted.  The change was intact after the reboot, but I was still able to make a connection to port 443 on the iLOM's I.P. address.

Sharla