HP Xw460c HP Integrated Lights-Out 2 User Guide for Firmware 1.75 and 1.77 - Page 57

Adding HP SIM trusted servers, Tools>System, Administration>Security>HP SIM SSO.

Get HP Xw460c - ProLiant - Blade Workstation PDF manuals and user guides View all HP Xw460c manuals
Add to My Manuals
Save this manual to your list of manuals

Page 57 highlights

certificates and iLO 2 server names. When the allocated storage is used, no more imports are accepted. After setting up SSO in iLO 2, log into HP SIM, locate the LOM processor, select Tools>System Information>iLO as... HP SIM launches a new browser that is logged in to the LOM management processor. Adding HP SIM trusted servers You can install HP SIM server certificates using scripting that is suitable for mass deployment. For more information, see the HP Integrated Lights-Out Management Processor Scripting and Command Line Resource Guide. To add HP SIM server records using a browser: 1. Click Administration>Security>HP SIM SSO. 2. Click Add an HP SIM Server. 3. To authenticate the server, choose one of the following: o To add an HP SIM server using Trust by Name authentication, enter the full network name of the HP SIM server in the Add a Trusted HP SIM Server Name section. Click Add Server Name. Trust by Name authentication uses fully qualified domain names; for example, sim-host.hp.com instead of sim-host. If you are unsure of the fully qualified domain name, use the nslookup host command. o To retrieve and import a certificate from a trusted HP SIM server, enter the full network name of an HP SIM Server in the Retrieve and import a certificate from a trusted HP SIM Server section. Click Import Certificate to request the certificate from the HP SIM server and automatically import it. This record supports SSO Trust by Name and SSO Trust by Certificate. To prevent any certificate tampering directly import an HP SIM server certificate. To directly import an HP SIM server certificate, retrieve the HP SIM certificate date using one of the following options: - Using a separate browser window, browse to the HP SIM server using the URL: http://:280/GetCertificate Cut and paste the certificate data from HP SIM into iLO 2. - Export the HP SIM server certificate from the HP SIM user interface by selecting Options>Security>Certificates>Server Certificate. Open the file using a text editor, and copy and paste all the certificate raw data into iLO 2. - Using command-line tools on the HP SIM server, the HP SIM certificate can be extracted using the tomcat-coded alias for the HP SIM certificate. For example: mxcert -l tomcat The certificate data resembles: -----BEGIN CERTIFICATE----several lines of encoded data -----END CERTIFICATE----- After pasting the HP SIM server base-64 encoded x.509 certificate data into the Directly import a HP SIM Server Certificate section, click Import Certificate to record the data. This type of record supports SSO Trust by Name and SSO Trust by Certificate. There are other ways to retrieve HP SIM server certificate data. For more information, see your HP SIM documentation. Configuring iLO 2 57

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
Configuring iLO 2 57
certificates and iLO 2 server names. When the allocated storage is used, no more imports are
accepted.
After setting up SSO in iLO 2, log into HP SIM, locate the LOM processor, select
Tools>System
Information>iLO as...
HP SIM launches a new browser that is logged in to the LOM management
processor.
Adding HP SIM trusted servers
You can install HP SIM server certificates using scripting that is suitable for mass deployment. For more
information, see the
HP Integrated Lights-Out Management Processor Scripting and Command Line
Resource Guide
. To add HP SIM server records using a browser:
1.
Click
Administration>Security>HP SIM SSO.
2.
Click
Add an HP SIM Server.
3.
To authenticate the server, choose one of the following:
o
To add an HP SIM server using Trust by Name authentication, enter the full network name of the
HP SIM server in the Add a Trusted HP SIM Server Name section. Click
Add Server Name.
Trust by Name authentication uses fully qualified domain names; for example, sim-host.hp.com
instead of sim-host. If you are unsure of the fully qualified domain name, use the
nslookup
host
command.
o
To retrieve and import a certificate from a trusted HP SIM server, enter the full network name of
an HP SIM Server in the Retrieve and import a certificate from a trusted HP SIM Server section.
Click
Import Certificate
to request the certificate from the HP SIM server and automatically import
it. This record supports SSO Trust by Name and SSO Trust by Certificate.
To prevent any certificate tampering directly import an HP SIM server certificate. To directly
import an HP SIM server certificate, retrieve the HP SIM certificate date using one of the
following options:
—
Using a separate browser window, browse to the HP SIM server using the URL:
http://<sim network address>:280/GetCertificate
Cut and paste the certificate data from HP SIM into iLO 2.
—
Export the HP SIM server certificate from the HP SIM user interface by selecting
Options>Security>Certificates>Server Certificate.
Open the file using a text editor, and copy
and paste all the certificate raw data into iLO 2.
—
Using command-line tools on the HP SIM server, the HP SIM certificate can be extracted using
the tomcat-coded alias for the HP SIM certificate. For example:
mxcert -l tomcat
The certificate data resembles:
-----BEGIN CERTIFICATE-----
several lines of encoded data
-----END CERTIFICATE-----
After pasting the HP SIM server base-64 encoded x.509 certificate data into the Directly import a
HP SIM Server Certificate section, click
Import Certificate
to record the data. This type of record
supports SSO Trust by Name and SSO Trust by Certificate.
There are other ways to retrieve HP SIM server certificate data. For more information, see your HP SIM
documentation.