5.
Enter the file name of the certificate created (server_cacert.pem) in the File Name field. Include
the path relative to the TFTP server root in the file name.
6.
Click
Apply.
To install the private key through the browser:
1.
Log in to LO100 as an administrator.
2.
On the browser main menu navigation bar, click
Security Settings.
3.
In the TFTP server IP address field, enter the IP address of the TFTP server.
4.
On the menu under File type, select
Key.
5.
Enter the file name of the key created (server_privkey.pem) in the File Name field. Include the
path relative to the TFTP server root in the file name.
6.
Click
Apply.
To install the both the certificate and private key through the browser at the same time:
1.
Log in to LO100 as an administrator.
2.
On the browser main menu navigation bar, click
Security Settings.
3.
In the TFTP server IP address field, enter the IP address of the TFTP server.
4.
On the menu under File type, select
Key and Certificate.
5.
Enter the file name of the certificate (server_cacert.pem) and key created (server_privkey.pem)
in the File Name field. Include the path relative to the TFTP server root in the file name.
6.
Click
Apply.
Installing a certificate or private key through the CLP
To install a certificate, log in to LO100 as administrator through the CLP interface and issue the
load command to upload and install the certificate. For example:
load -source <URI> -oemhpfiletype cer
where:
•
<URI>
is the
//tftpserver IP/path/filename
to be downloaded.
•
tftpserver
is the URL or IP address of the TFTP server containing the certificate.
•
Path
is the path of the file relative to the TFTP server root.
•
filename
is the file name of the certificate file (
server_cacert.pem
in this example).
After you issue the load command to upload and install the certificate, reset the BMC by entering
the following command:
rest map 1
LO100 checks the validity of the key/certificate pair after you reset the BMC.
You can also find these commands in /map1/firmware directory.
To install a private key, log in to LO100 as administrator through the CLP interface and issue the
load command to upload and install the certificate. For example:
load -source <URI> -oemhpfiletype key
where:
•
<URI>
is the
//tftpserver IP/path/filename
to be downloaded.
•
tftpserver
is the URL or IP address of the TFTP server containing the private key file.
•
Path
is the path of the file relative to the TFTP server root.
•
filename
is the file name of the private key file (
server_privkey.pem
in this example).
After you issue the load command to upload and install the certificate, reset the BMC by entering
the following command:
reset map 1
Importing a certificate
51
