237
•
Organization Name (O)
•
Organizational Unit (OU)
•
Common Name (CN)
For more information, see CSR input details.
4.
If you want the iLO IP addresses included in the CSR, select the include iLO IP Address(es)
check box.
This option is disabled by default because some CAs cannot use this input.
5.
Click Generate CSR.
A message notifies you that a certificate is being generated and that the process might take
up to 10 minutes.
6.
After a few minutes (up to 10), click Generate CSR again. The CSR is displayed.
The CSR contains a public and private key pair that validates communications between the
client browser and iLO. Key sizes up to 2,048 bits are supported. The generated CSR is held
in memory until a new CSR is generated, iLO is reset to the factory default settings, or a
certificate is imported.
7.
Select and copy the CSR text.
8.
Open a browser window and navigate to a third-party CA.
9.
Follow the onscreen instructions and submit the CSR to the CA.
When you submit the CSR to the CA, your environment might require the specification of
Subject Alternative Names (SAN). This information is typically included in the Additional
Attributes box. If necessary, enter the iLO DNS short name and IP address in the Additional
Attributes box by using the following syntax: san:dns=<IP address>&dns=<server name>.
The CA generates a certificate in PKCS #10 format.
Summary of Contents for iLO 5
Page 6: ......
Page 27: ...21 ...
Page 67: ...61 ...
Page 117: ...111 Installing license keys iLO Federation group IMPORTANT Do not use this function ...
Page 140: ...134 More Information Configuring iLO access options ...
Page 258: ...252 5 The security message is displayed at the next login ...
Page 314: ...308 Reset iLO ...
Page 334: ......