HP BladeSystem Onboard Administrator User Guide - HP Business ...

Field Possible values Description
Initials
DN Qualifier
Must be 0 to 20 characters
in length.
Must be 0 to 60 characters
in length. Acceptable
characters are all
alphanumeric, the space,
and the following
punctuation marks: ' ( ) + , -
. / : = ?
Certificate-signing request attributes
The initials of the person responsible for the Onboard
Administrator.
The distinguished name qualifier of the Onboard
Administrator.
Field Possible values Description
Challenge Password Must be 0 to 30 characters The password for the certificate-signing request
in length
Confirm Password Must be 0 to 30 characters Confirm the Challenge Password
in length
Unstructured Name Must be 0 to 60 characters This is for additional information (for example, an
in length
unstructured name that is assigned to the Onboard
Administrator)
Click Apply to generate a self-signed certificate or a standardized certificate-signing request.
Standardized certificate-signing request
This screen displays a standardized certificate signing request generated by the Onboard Administrator. The
content of the request in the text box may can be sent to a certificate authority of your choice for signing.
Once signed and returned from the certificate authority, the certificate can be uploaded under the
"Certificate Upload" tab.
If a static IP address is configured for Onboard Administrator when this certificate request is generated, the
certificate request will be issued to the static IP address. Otherwise, it is issued to the dynamic DNS name of
the Onboard Administrator. The certificate, by default, requests a valid duration of 10 years (this value is
currently not configurable).
When submitting the request to the certificate authority, be sure to:
1. Use the Onboard Administrator URL for the server.
2. Request the certificate be generated in the RAW format.
3. Include the Begin and End certificate lines.
Standby Certificate Upload tab
There are two methods for uploading certificates for use in HP BladeSystem Onboard Administrator:
• Paste certificate contents into the text field and click Upload.
• Paste the URL of the certificate into the URL field and click Apply.
The certificate to be uploaded must be from a certificate request sent out and signed by a certificate authority
for this particular Onboard Administrator. Otherwise, the certificate fails to match the private keys used to
generate the certificate request, and the certificate is rejected. Also, if the Onboard Administrator domain
has been destroyed or reimported, then you must repeat the steps for generating a certificate request. It will
be re-signed by a certificate authority because the private keys are destroyed and recreated along with the
Onboard Administrator domain.
Configuring the HP BladeSystem c7000 enclosure and enclosure devices 133