HP Ilo 3 User Guide
Here you can view all the pages of manual HP Ilo 3 User Guide. The HP manuals for Server are available online for free. You can easily download all the documents as PDF.
Page 51
8.FollowtheonscreeninstructionsandsubmittheCSRtotheCA. TheCAwillgenerateacertificateinthePKCS#10format. 9.Afteryouobtainthecertificate,makesurethat: •TheCNmatchestheiLOFQDN.ThisislistedastheiLOHostnameonthe Information→Overviewpage. •ThecertificateisgeneratedasaBase64-encodedX.509certificate,andisintheRAW format. •Thefirstandlastlinesareincludedinthecertificate. 10.ReturntotheSSLCertificateCustomizationpage(Figure21)intheiLOuserinterface. 11.ClicktheImportCertificatebutton....
Page 52
YoumusthavetheConfigureiLOSettingsprivilegetochangedirectorysettings. ThisfeatureandmanyothersarepartofaniLOlicensingpackage.Formoreinformationabout iLOlicensing,seethefollowingwebsite:http://www.hp.com/go/ilo/licensing. Configuringauthenticationanddirectoryserversettings 1.NavigatetotheAdministration→Security→Directorypage,asshowninFigure23(page52). Figure23Security-Directorypage 2.Configurethefollowingoptions: •LDAPDirectoryAuthentication—Enablesordisablesdirectoryauthentication.Ifdirectory...
Page 53
extendedwiththeHPExtendedSchema.Useraccountsandgroupmembershipsare usedtoauthenticateandauthorizeusers.Afteryouenterandsavethedirectory networkinformation,clickAdministerGroups,andthenenteroneormorevalid directoryDNsandprivilegestograntusersaccesstoiLO. •KerberosAuthentication—EnablesKerberoslogin.IfKerberosloginisenabledand configuredcorrectly,theHPZeroSignInbuttonappearsontheloginpage. •LocalUserAccounts—Enablesordisableslocaluseraccountaccess....
Page 54
•LOMObjectDistinguishedName—SpecifieswherethisiLOinstanceislistedinthedirectory tree(forexample,cn=iLO Mail Server,ou=Management Devices,o=hp).This optionisavailablewhenUseHPExtendedSchemaisselected. UsersearchcontextsarenotappliedtotheLOMobjectDNwheniLOaccessesthe directoryserver. •DirectoryUserContexts—Theseboxesenableyoutospecifycommondirectorysubcontexts sothatusersdonotneedtoentertheirfullDNsatlogin.Directoryusercontextscanbe upto128characters....
Page 55
1.ClickTestSettingsontheSecurity→Directorypage. TheDirectoryTestspageopens,asshowninFigure24(page55). Figure24DirectoryTestspage Thispagedisplaystheresultsofaseriesofsimpletestsdesignedtovalidatethecurrentdirectory settings.Also,itincludesatestlogthatshowstestresultsandanydetectedissues.Afteryour directorysettingsareconfiguredcorrectly,youdonotneedtorerunthesetests.TheDirectory Testspagedoesnotrequirethatyoubeloggedinasadirectoryuser....
Page 56
4.ClickStartTest. Severaltestsbegininthebackground,startingwithanetworkpingofthedirectoryuserby establishinganSSLconnectiontotheserverandevaluatinguserprivileges. Whilethetestsarerunning,thepagerefreshesperiodically.Youcanstopthetestsormanually refreshthepageatanytime. Viewingdirectorytestresults TheDirectoryTestResultssectionshowsthedirectoryteststatuswiththedateandtimeofthelast update. •OverallStatus—Summarizestheresultsofthetests. NotRun—Notestswererun.◦ ◦Inconclusive—Noresultswerereported....
Page 57
Table3Directorytests(continued) DescriptionTest 1.Verifythattheconfigureddirectoryserveristhecorrecthost. 2.VerifythatiLOhasaclearcommunicationpathtothedirectoryserverthroughport 636(consideranyroutersorfirewallsbetweeniLOandthedirectoryserver). 3.Verifythatanylocalfirewallonthedirectoryserverisenabledtoallowcommunications throughport636. iLOinitiatesSSLhandshakeandnegotiationandLDAPcommunicationswiththedirectory serverthroughport636. ConnectusingSSL...
Page 58
Table3Directorytests(continued) DescriptionTest NOTE:YoucanenteraLOMObjectDistinguishedNameontheSecurity→Directory pageonlywhenUseHPExtendedSchemaisselected.ThistestisrunevenifLDAPDirectory Authenticationisdisabled. Ifthetestsissuccessful,iLOfoundtheobjectthatrepresentsitself. Ifafailureoccurs: 1.VerifythattheLDAPFQDNoftheLOMobjectiscorrect. 2.TrytoupdatetheHPExtendedSchemaandsnap-insinthedirectoryserverbyupdating theHPDirectoriesSupportforProLiantManagementProcessorssoftware....
Page 59
•128-bitAESwithRSA,DHE,andaSHA1MAC •128-bitAESwithRSA,andaSHA1MAC •168-bit3DESwithRSA,andaSHA1MAC •168-bit3DESwithRSA,DHE,andaSHA1MAC iLOalsoprovidesenhancedencryptionthroughtheSSHportforsecureCLPtransactions.iLO supportsAES128-CBCand3DESCBCcipherstrengthsthroughtheSSHport. Ifenabled,iLOenforcestheuseoftheseenhancedciphers(bothAESand3DES)overthesecure channels,includingsecureHTTPtransmissionsthroughthebrowser,SSHport,andXMLport.When...
Page 60
TheEncryptionSettingspagedisplaysthecurrentencryptionsettingsforiLO. •CurrentNegotiatedCipher—Thecipherinuseforthecurrentbrowsersession.Afteryoulog intoiLOthroughthebrowser,thebrowserandiLOnegotiateaciphersettingtouseduring thesession. •EncryptionEnforcementSettings—ThecurrentencryptionsettingsforiLO: FIPSMode—IndicateswhetherFIPSModeisenabledordisabledforthisiLOsystem.◦ ◦EnforceAES/3DESEncryption—IndicateswhetherAES/3DESencryptionisenforcedfor thisiLO....