HP iLO 4 User Guide

For information about how to extract an HP SIM certificate, see “Extracting the HP SIM server
certificate” (page 83).
For information about how to extract certificates from other HP SSO-compliant applications, see
your HP SSO-compliant application documentation.
Extracting the HP SIM server certificate
You can use the following methods to extract HP SIM certificates.
NOTE: iLO 4 1.20 or later might be required to install the larger certificates used with recent
versions of HP SIM.
• Enter one of the following links in a web browser:
For HP SIM versions earlier than 7.0:
http://<HP SIM name or network address>:280/GetCertificate
◦
https://<HP SIM name or network address>:50000/GetCertificate
◦ For HP SIM 7.0 or later:
http://<HP SIM name or network
address>:280/GetCertificate?certtype=sso
https://<HP SIM name or network
address>:50000/GetCertificate?certtype=sso
NOTE: All request parameters are case-sensitive. If you capitalize the lowercase
certtype parameter, the parameter will not be read, and HP SIM will return the default
HP SIM server certificate instead of a trust certificate.
• Export the certificate from HP SIM:
For HP SIM versions earlier than 7.0:
Select Options→Security→Certificates→Server Certificate.
◦
◦ For HP SIM 7.0 or later:
Select Options→Security→HP Systems Insight Manager Server Certificate, and then click
Export.
• Use the HP SIM command-line tools. For example, using the alias tomcat for the HP SIM
certificate, enter mxcert -l tomcat.
For more information, see the HP SIM documentation.
Viewing trusted certificates
The Manage Trusted Certificates table on the Single Sign-On Settings page displays the status of
the trusted certificates configured to use SSO with the current iLO management processor.
• Status—The status of the record (if any are installed).
Configuring iLO security 83