HP BladeSystem Onboard Administrator User Guide - HP Business ...

When Two-Factor Authentication is enabled, only users with a valid user certificate are allowed to sign in to
Onboard Administrator. A valid user certificate is signed by a trusted Certificate Authority and is mapped to
the respective user on the Onboard Administrator.
To enable Two-Factor Authentication for user authentication during sign in, select Enable Two-Factor
Authentication. When Two-Factor Authentication is enabled, SSH and Telnet access is disabled by default.
Disabling Two-Factor Authentication does not automatically re-enable SSH and Telnet. You must go to the
Network Access screen, and then select Enable Secure Shell and Enable Telnet.
To enable the Onboard Administrator to verify with the Certifying Authority that the certificate being used has
been added to the certificate revocation list (CRL), select Check for Certificate Revocation. If the certificate is
on the CRL, the sign in is denied.
Certificate Owner Field
You can configure the Onboard Administrator to use the user principle name in the SAN by selecting SAN
or to use the certificate subject name by selecting Subject when authenticating directory users with a directory
server.
To save settings, click Apply.
Two-Factor Authentication Certificate Information tab
This screen displays all Certificate Authorities trusted by the Onboard Administrator. Any user certificates
uploaded to the Onboard Administrator must be signed by one of these Certificate Authorities. A maximum
of 12 Certificate Authorities can be uploaded to the Onboard Administrator.
Row Description
Certificate Version
Issuer Organization
Issuer Organization Unit
Issued By
Subject Organization
Issued To
Valid From
Valid Upto
Serial Number
Extension Count
MD5 Fingerprint
SHA1 Fingerprint
Version number of current certificate
Name of the organization that issued the certificate
Name of the organizational unit that issued the certificate
The certificate authority that issued the certificate
Subject name
Organization to whom the certificate was issued
The date from which the certificate is valid
The date the certificate expires
The serial number assigned to the certificate by the certificate authority
Number of extensions in the certificate.
This field is a validation of authenticity and is embedded in the certificate
This field is a validation of authenticity and is embedded in the certificate
Configuring the HP BladeSystem c7000 enclosure and enclosure devices 221