Remote Lights-Out Mgmt (iLO 2, iLO, RILOE II) Forum
cancel

iLO Certificate Size Issue

Highlighted
dietrich_2
Occasional Contributor

iLO Certificate Size Issue

Is there a work around for iLO certificate store size? I am trying to import a CA cert into the trusted CA cert store in iLO to enable smartcard authentication but i get a sizing error. Cert size that is accepted is 1024bit, our cert size is 2048bit. Any ideas on what to do to fix this?

Error returned: HTTP Request Entity Too Large
9 REPLIES
Oscar A. Perez
Esteemed Contributor

Re: iLO Certificate Size Issue

I don't know what is a 2048bit cert but, how big is the actual file you are trying to import?

iLO2 has only 3072 bytes in the NVRAM to store the certificate file.

There was a bug in iLO2 firmware versions 1.82 and earlier where the web interface could reject any file larger than 2764 bytes even though the max size was 3072 bytes. This was fixed in iLO2 v2.00.




__________________________________________________
I work for Hewlett Packard

If you feel this was helpful please click the KUDOS! thumb below!
dietrich_2
Occasional Contributor

Re: iLO Certificate Size Issue

That might be a part of the problem, our version of iLO is 1.80. Will try updating the firmware... thanks
dietrich_2
Occasional Contributor

Re: iLO Certificate Size Issue

Updated to v2.0 (latest iLO version) and still experiencing the same issue. CA size is 3406 bytes once exported to Base64 format which is what iLO is expecting. Any other advice?
Oscar A. Perez
Esteemed Contributor

Re: iLO Certificate Size Issue

3072 bytes is the max size for a certificate in Base64 format.



__________________________________________________
I work for Hewlett Packard

If you feel this was helpful please click the KUDOS! thumb below!
TomRichards
Acclaimed Contributor

Re: iLO Certificate Size Issue

I'm getting this too - my certificate is 4905 bytes big. Is there any way round this restriction?
Jason LaGarde
Acclaimed Contributor

Re: iLO Certificate Size Issue

Guessing there's been no resolution on this?

Chalk me up as another user experiencing issues due to this size restriction.
dietrich_2
Occasional Contributor

Re: iLO Certificate Size Issue

Unfortunately there has been no further development on their part. I had a trouble ticket open with them but it was closed on account of hardware limitation.
Jason LaGarde
Acclaimed Contributor

Re: iLO Certificate Size Issue

What about iLO3? Do we know if the issue still exists on iLO3 as well?
dietrich_2
Occasional Contributor

Re: iLO Certificate Size Issue

nope, we haven't tried ilo3 as yet. If any one tries that and it works please share.
//Add this to "OnDomLoad" event