HP iLO 4 Scripting and Command Line Guide

<MOD_ENCRYPT_SETTINGS>
<ESKM_USER_LOGIN VALUE="username"/>
<ESKM_PASSWORD VALUE="password"/>
<ILO_GROUP_NAME VALUE="groupname"/>
<ESKM_CERT_NAME VALUE=”certname”/>
<ENABLE_REDUNDANCY VALUE = "Y"/>
<ESKM_PRIMARY_SERVER_ADDRESS VALUE="0.0.0.0"/>
<ESKM_PRIMARY_SERVER_PORT VALUE="0"/>
<!-- Secondary Server Address & Port values are optional -->
<ESKM_SECONDARY_SERVER_ADDRESS VALUE=""/>
<ESKM_SECONDARY_SERVER_PORT VALUE=""/>
</MOD_ENCRYPT_SETTINGS>
</RIB_INFO>
</LOGIN>
</RIBCL>
IMPORTANT: Incorrect or mismatched port settings can disable the ability to connect to the iLO.
Verify the values before executing this command.
MOD_ENCRYPT_SETTINGS parameters
ESKM_USER_LOGIN is the Local User name with administrator permissions that is configured on
the ESKM. This is the ESKM deployment user. This parameter is case sensitive and must not be
blank.
ESKM_PASSWORD is the password for the Local User name with administrator permissions that
is configured on the ESKM. This parameter is case sensitive and can be a combination of any
printable characters.
ESKM_CERT_NAME is the name of the local certificate authority certificate in ESKM. It is typically
named Local CA. HP iLO will retrieve the certificate and use it to authenticate the ESKM server(s)
for all transactions going forward.
ILO_GROUP_NAME is the Local Group created on the ESKM for use with iLO user accounts and
the keys iLO imports into the ESKM. When keys are imported, they are automatically accessible
to all devices assigned to the same group.
ENABLE_REDUNDANCY determines whether redundancy is enabled. Valid values are Y (enabled)
or N (disabled).
ESKM_PRIMARY_SERVER_ADDRESS is the IP address of the main ESKM server. The value must be
a valid IP address and must not be blank.
ESKM_PRIMARY_SERVER_PORT is the port on which to communicate with the main ESKM server.
The value must be a valid port number from 1 to 65535, and must not be blank.
ESKM_SECONDARY_SERVER_ADDRESS is the IP address of a secondary (backup) ESKM server.
The value must be valid IP address, however if this parameter is not used it can be left blank.
ESKM_SECONDARY_SERVER_PORT is the port on which to communicate with the secondary ESKM
server. The value must be a valid port number from 1 to 65535, however if this parameter is not
used it can be left blank.
MOD_ENCRYPT_SETTINGS runtime errors
Possible MOD_ENCRYPT_SETTINGS error messages include:
• The ESKM_USER_LOGIN VALUE is too long.
• The ESKM_USER_LOGIN VALUE must not be left blank.
• The ESKM_PASSWORD VALUE is too long.
• The ESKM_PASSWORD VALUE must not be left blank.
• The ILO_GROUP_NAME VALUE is too long.
• The ILO_GROUP_NAME VALUE must not be left blank.
106 RIBCL XML Scripting Language