No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FusionServer Pro E9000 Server iBMC (Earlier Than V250) User Guide 31

This document describes the underlying management software Intelligent Baseboard Management Controller (iBMC) of the servers.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring the iBMC SSL Certificate

Configuring the iBMC SSL Certificate

Scenarios

Configure a Secure Sockets Layer (SSL) certificate for the iBMC.

SSL helps establish an encrypted link (accessed using HTTPS) between a web server and a browser to ensure secure data transmission. A web server requires an SSL certificate to create an SSL connection.

For security purposes, replace the original certificate and keys with a customized certificate and public and private key pairs.

Prerequisites

Conditions

The local client can communicate with the server iBMC.

Procedure

  1. Log in to the iBMC WebUI.
  2. Perform one of the following operations based on the actual scenario:

  3. Customize certificate information.
    1. On the iBMC WebUI, choose Configure > SSL Certificate.
    2. Click Customize.
    3. Under 1. Generation CSR, set certificate information.

      Certificate information includes country, state, city/location, organization name and unit, and common name.

    4. Click Save.

      A certificate signing request (CSR) file is generated.

    5. Save the CSR file to the client.
  4. Obtain an SSL certificate.

    You can obtain an SSL certificate using one of the following methods:
    • Apply for an SSL signature certificate from an official certificate authority. (recommended)
    • Use a certificate generation tool (such as OpenSSL) to generate an SSL signature certificate and root certificate.

      You can download the certificate generation tool and its manual from the Internet.

  5. Import the SSL certificate.
    1. On the SSL Certificate page, click Customize.
    2. Import the SSL certificate.

      • To use an SSL certificate issued by a certificate authority, click Browse under 2. Upload Server Certificate, select the SSL signature certificate to be used, and click Upload.
      • To use an SSL certificate manually generated, click Browse under Upload Custom Certificate (Optional), select the SSL signature certificate to be used, enter the password in Certificate Password, and click Upload.

      After the certificate is imported, "Succeeded in importing the certificate. Reset iBMC for the certificate to take effect." is displayed.

    3. Restart the iBMC.
  6. Add a root certificate to the client browser.

    NOTE:
    If the imported SSL certificate is not issued by an official authority, check whether the client browser has the root certificate after the SSL certificate is imported.
    The following uses Internet Explorer as an example to describe how to check and add a root certificate to the browser.

    1. Open Internet Explorer.
    2. On the toolbar, choose Tools > Internet Options.

      The Internet Options dialog box is displayed.

    3. On the Content tab page, click Certificate.

      The Certificate dialog box is displayed.

    4. On the Trusted Root Certificate Issuer tab page, check whether the SSL certificate issuer is listed.

      • If yes, go to 6.e.
      • If no, go to 6.f.

    5. Check whether the SSL certificate has expired.

      • If yes, go to 6.f.
      • If no, go to 6.g.

    6. On the Trusted Root Certificate Issuer tab page, click Import and import the root certificate as instructed.
    7. Open Internet Explorer again, and check whether the icon is displayed in the address bar.

      • If yes, no further action is required.
      • If no, contact Huawei technical support.

Translation
Download
Updated: 2019-08-01

Document ID: EDOC1000058833

Views: 218208

Downloads: 1936

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next