Installation Manual

The CSR contains a public and private key pair that validates communications between the
client browser and iLO. Key sizes up to 2,048 bits are supported. The generated CSR is
held in memory until a new CSR is generated, iLO is reset to the factory default settings, or
a certificate is imported.
6. Select and copy the CSR text.
7. Open a browser window and navigate to a third-party CA.
8. Follow the onscreen instructions and submit the CSR to the CA.
When you submit the CSR to the CA, your environment might require the specification of
Subject Alternative Names (SAN). This information is typically included in the Additional
Attributes box. If necessary, enter the iLO DNS short name and IP address in the Additional
Attributes box by using the following syntax: san:dns=<IP address>&dns=<server
name>.
The CA generates a certificate in PKCS #10 format.
9. After you obtain the certificate, make sure that:
• The CN matches the iLO FQDN.
This value is listed as the iLO Hostname on the Information→Overview page.
• The certificate is a Base64-encoded X.509 certificate.
• The first and last lines are included in the certificate.
Importing a trusted certificate
1. Navigate to the Administration→Security→SSL Certificate page.
2. Click the Import Certificate button.
76 Configuring the iLO security features