How Modifying ITO Server Access SSL certificate

[DCIM_Support]

How to modify the SSL certificate for ITO services?
And the Intel Virtual Gateway certificate
The latest JAVA security policy prevents self signed applet open,
The exceptions cannot use wildcards, means I may need to add a lot of exceptions (about 50 IP)

there some device in ITO discovery Virtual KVM Processor Type is N/A,,why ?

KVM allows you to use the proxy connection,
However, if the case is across the network, or can not be opened,
Will direct access to the target device IP, load JViewer.
Is there a way to get all the communications through proxy access?

(CID:108828625)

[DCIM_Support]

I think there is a process to assign SSL certificates to the management cards. I'm checking into the process and will get back to you. GregS

(CID:108828704)

[DCIM_Support]

Thank you for your reply. I tried a lot of ways to make applet Java not pop up security tips, but without success. Access to the remote process will load multiple applet, each with a security prompt. 1, ITO, SSL Web, self signed certificate. 2, Intel data center manager, self signed certificates, when installed Keytool Java generation. 3, Intel virtual gateway, self signed certificate. 4, VirtualGatewayConsole, applet Java, Intel signature certificate has expired. 5, BMC management card page, HTTPS, self signed certificate. 6, Java applet JViewer, each chip signature certificate, such as AMI. Because the customer's security requirements, can not access the Internet, and therefore can not query the certificate revocation, this will affect the start speed.

(CID:108829002)

[DCIM_Support]

Hi guanyc, has your issue been solved?

Cheers,

Stine

(CID:110013855)

[DCIM_Support]

no....

(CID:110019468)

[DCIM_Support]

My apologies, I lost track of this issue. I will get back to you.

Greg

(CID:111414577)

[DCIM_Support]

Why types of management cards are you trying to discover? I see in your example it appears the vendor is "inspur", are there other types as well. I'm confirming the procedure with Intel, but it appears on initial discussion the certificates would have to be placed on the management cards.

I should have more info next week.

(CID:111937604)

[DCIM_Support]

Intel confirmed you can load your own certificate on the management cards (i.e. ILO, iDRAC Inspur management card).

However the security popups you see when the java app is launched when the vkvm console is started cannot be avoided, at least not today.

Regards

Greg

(CID:113644290)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.