Installation Manual

Setting FIPS mode to enabled
1. Optional: Capture the current iLO configuration by using HPONCFG.
For more information, see the iLO scripting and CLI guide.
2. Navigate to the AdministrationSecurityEncryption page.
3. Set FIPS mode to Enabled.
CAUTION: Enabling FIPS mode resets critical iLO security settings to the factory default
values, and clears all user and license data.
4. Click Apply.
iLO prompts you to confirm the request.
5. To confirm the request to enable FIPS mode, click OK
iLO reboots in FIPS mode. Wait at least 90 seconds before attempting to re-establish a
connection.
6. Install a trusted certificate for iLO.
The default issued SSL certificate is not allowed in FIPS mode.
7. Verify that IPMI/DCMI over LAN Access and SNMP Access are disabled on the Access
Settings page.
IMPORTANT: Some iLO interfaces, such as the standards-compliant implementations of
IPMI and SNMP, are not FIPS-compliant and cannot be made FIPS-compliant.
8. Optional: Restore the iLO configuration by using HPONCFG.
For more information, see the iLO scripting and CLI guide.
TIP: You can use the Login Security Banner feature to notify iLO users that a system is using
FIPS mode.
You can also use XML configuration and control scripts to enable FIPS mode. For more
information, see the iLO scripting and CLI guide.
More information
Configuring the Login Security Banner
Obtaining and importing an SSL certificate
iLO access settings
Disabling FIPS mode
If you want to disable FIPS mode for iLO (for example, if a server is decommissioned), you must
set iLO to the factory default settings. You can perform this task by using RIBCL scripts, iLO
RBSU, or the iLO 4 Configuration Utility.
For information about changing this setting with RIBCL scripts, see the iLO scripting and CLI
guide.
When you disable FIPS mode, all potentially sensitive data is erased, including all logs and
settings.
More information
Resetting iLO to the factory default settings (iLO RBSU)
Resetting iLO to the factory default settings (iLO 4 Configuration Utility)
88 Configuring the iLO security features