HP iLO 3 Scripting and Command Line Guide - Business Support ...

SSO_SERVER
The SSO_SERVER command is used to create HP SIM Trusted SSO Server records. For this command
to parse correctly, it must appear within an SSO_INFO command block, and SSO_INFO MODE
must be set to write. You must have the Configure iLO Settings privilege to execute this command.
This command can be combined with MOD_SSO_SETTINGS.
You can specify multiple SSO server records by using multiple instances of this command. The
servers are added in the order that the records are specified. Duplicate records might be rejected
and generate an error. The number of records stored by the lights-out processor depends on the
size of the entries because certificates do not have a fixed size. Multiple certificates can normally
be stored.
There are three ways to add an HP SIM Trusted Server record using the SSO_SERVER command:
• The server can be specified by network name (requires SSO trust level set to trust by name or
trust all, but is not supported for trust by certificate). Use the fully qualified network name.
• The server certificate can be imported by iLO 3 (the LOM processor requests the certificate
from the specified HP SIM server using anonymous HTTP request). The iLO 3 processor must
be able to contact the HP SIM server on the network at the time this command is processed
for this method to work.
• The server certificate can be directly installed on iLO 3. However, you must obtain the x.509
certificate in advance. This method enables you to configure the iLO 3 in advance of placing
it on the network with the HP SIM server. The method also enables you to verify the contents
of the HP SIM server certificate. For additional methods of obtaining the certificate from the
HP SIM server, see the HP iLO User Guide on the HP website at: http://www.hp.com/go/
ilo3 and click More iLO Documentation, or the HP SIM User Guide on the HP website at:
http://h18000.www1.hp.com/products/servers/management/hpsim/infolibrary.html.
For example:
-----BEGIN CERTIFICATE-----
.
.
.
-----END CERTIFICATE-----
SSO_SERVER parameters
NAME indicates that the server is being specified by network name. It receives a quoted string
containing the fully qualified network name of the HP SIM Trusted Server. The name is not validated
by iLO until an SSO login is attempted. For example, the syntax to add an HP SIM Trusted Server
name:
SSO_INFO 133