HP iLO 3 Scripting and Command Line Guide

ManualsBrandsHP ManualsComputer AccessoriesHP Integrated Lights-Out 3 (iLO 3) Firmware for ProLiant G7 Servers

141

142

143

144

145

146

147

148

149

150

it on the network with the HP SIM server. The method also enables you to verify the contents

of the HP SIM server certificate. For additional methods of obtaining the certificate from the

HP SIM server, see the HP iLO User Guide on the HP website at: http://www.hp.com/go/

ilo3 and click More iLO Documentation, or the HP SIM User Guide on the HP website at:

http://h18000.www1.hp.com/products/servers/management/hpsim/infolibrary.html.

For example:

<SSO_INFO MODE="write">

<!-- Add an SSO server record using the network name

(works for TRUST_MODE NAME or ALL) -->

<SSO_SERVER NAME="hpsim1.hp.net" />

<!-- Add an SSO server record using indirect iLO import

from the network name -->

<SSO_SERVER IMPORT_FROM="hpsim2.hp.net" />

<!-- Add an SSO server certificate record using direct

import of certificate data -->

<IMPORT_CERTIFICATE>

-----BEGIN CERTIFICATE-----

-----END CERTIFICATE-----

</IMPORT_CERTIFICATE>

</SSO_INFO>

</LOGIN>

</RIBCL>

SSO_SERVER parameters

NAME indicates that the server is being specified by network name. It receives a quoted string

containing the fully qualified network name of the HP SIM Trusted Server. The name is not validated

by iLO until an SSO login is attempted. For example, the syntax to add an HP SIM Trusted Server

name:

<SSO_SERVER NAME="hpsim1.hp.net" />

IMPORT_FROM indicates that iLO must request the HP SIM Trusted Server certificate from HP SIM.

This request is implemented using an anonymous HTTP request similar to:

http://<sim network address>:280/GetCertificate

The iLO firmware requests the certificate when this command is processed. If the HP SIM server is

unreachable, then an error occurs.

For example, the syntax to have iLO import a server certificate resembles:

<SSO_SERVER IMPORT_FROM="hpsim2.hp.net" />

IMPORT_CERTIFICATE indicates that iLO must import the literal .PEM encoded x.509 certificate

data that follows. The data is encoded in a block of text that includes:

-----BEGIN CERTIFICATE-----

and

-----END CERTIFICATE-----

For example, the syntax to import an HP SIM Trusted Server certificate resembles the following:

<SSO_SERVER>

-----BEGIN CERTIFICATE-----

MIIC3TCCAkYCBESzwFUwDQYJKoZIhvcNAQEFBQAwgbUxCzAJBgNVBAYTAlVTMRMwE...

148 RIBCL XML Scripting Language