HP Integrated Lights-Out 2 User Guide

6. Click inside the white text area so that your cursor is in the text area, and paste the contents
of the clipboard by pressing the Ctrl+V keys.
7. Click Import Root CA Certificate. The Two-Factor Authentication Settings page appears again
with information displayed under Trusted CA Certificate Information.
8. Change Enforce Two-Factor authentication to Yes.
9. Change Certificate Revocation Checking to No (default).
10. Change Certificate Owner Field to SAN. For more information, see “Two-factor authentication”
(page 45).
11. Click Apply. iLO 2 is reset. When iLO 2 attempts to go to the login page again, the browser
displays the Client Authentication page with a list of certificates that are available to the
system.
12. Select the certificate added to the user in iLO 2. Click OK.
13. If prompted to do so, insert your smart card, or enter your PIN or password. The login page
appears with the e-mail address for the user in the Directory User field. You cannot change
the Directory User field.
14. Enter the password for the directory user. Click Login.
After completing the authentication process, you have access to iLO 2. For more information on
configuring directory users and privileges, see “Directory settings” (page 50).
Setting up a user for two-factor authentication
To authenticate a user with a local iLO 2 account, a certificate must be associated with the user's
local user name. On the Administration>Modify User page, if a certificate has been mapped to
the user, a thumbprint (an SHA1 hash of the certificate) appears with a button that removes the
certificate. If a certificate has not been mapped to the user, the following message displays, as
well as a button that starts the certificate import process:
Thumbprint: A certificate has NOT been mapped to this user
To set up a user for two-factor authentication and add a user certificate:
1. Log in to iLO 2 using an account that has the Configure iLO 2 Settings privilege.
2. Click Administration>User Administration. Select a user.
3. Click View/Modify.
4. Under the User Certificate Information section, click Add a certificate.
5. On the Map User Certificate page, paste the user certificate into the text-box, and click Import
Certificate. For more information on creating, copying, and pasting certificate information,
see “Setting up two-factor authentication for the first time” (page 46).
Two-factor authentication login
When you connect to iLO 2 and two-factor authentication is required, the Client Authentication
page prompts you to select the certificate you want to use. The Client Authentication page displays
all of the certificates available to authenticate a client. Select your certificate. The certificate can
be a certificate mapped to a local user in iLO 2, or a user specific certificate issued for authenticating
to the domain.
48 Configuring iLO 2