Welcome to the new Schneider Electric Community

It's your place to connect with experts and peers, get continuous support, and share knowledge.

  • Explore the new navigation for even easier access to your community.
  • Bookmark and use our new, easy-to-remember address (community.se.com).
  • Get ready for more content and an improved experience.

Contact SchneiderCommunity.Support@se.com if you have any questions.

Close
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
84323members
353488posts

How Modifying ITO Server Access SSL certificate

EcoStruxure IT forum

A support forum for Data Center Operation, Data Center Expert, and EcoStruxure IT product users to share knowledge on installation, configuration, and general product use.

DCIM_Support
Picard
Picard
0 Likes
8
435

How Modifying ITO Server Access SSL certificate

This question was originally posted on DCIM Support by guanyc on 2016-10-17


How to modify the SSL certificate for ITO services?
And the Intel Virtual Gateway certificate
The latest JAVA security policy prevents self signed applet open,
The exceptions cannot use wildcards, means I may need to add a lot of exceptions (about 50 IP)

there some device in ITO discovery Virtual KVM Processor Type is N/A,,why ?

 

 

 

KVM allows you to use the proxy connection,
However, if the case is across the network, or can not be opened,
Will direct access to the target device IP, load JViewer.
Is there a way to get all the communications through proxy access?

 

(CID:108828625)

Tags (1)
8 Replies 8
DCIM_Support
Picard
Picard
0 Likes
0
435

Re: How Modifying ITO Server Access SSL certificate

This comment was originally posted on DCIM Support by Greg Sterling on 2016-10-17


I think there is a process to assign SSL certificates to the management cards. I'm checking into the process and will get back to you. GregS

(CID:108828704)

DCIM_Support
Picard
Picard
0 Likes
0
435

Re: How Modifying ITO Server Access SSL certificate

This comment was originally posted on DCIM Support by guanyc on 2016-10-19


Thank you for your reply. I tried a lot of ways to make applet Java not pop up security tips, but without success. Access to the remote process will load multiple applet, each with a security prompt. 1, ITO, SSL Web, self signed certificate. 2, Intel data center manager, self signed certificates, when installed Keytool Java generation. 3, Intel virtual gateway, self signed certificate. 4, VirtualGatewayConsole, applet Java, Intel signature certificate has expired. 5, BMC management card page, HTTPS, self signed certificate. 6, Java applet JViewer, each chip signature certificate, such as AMI. Because the customer's security requirements, can not access the Internet, and therefore can not query the certificate revocation, this will affect the start speed.

(CID:108829002)

DCIM_Support
Picard
Picard
0 Likes
0
435

Re: How Modifying ITO Server Access SSL certificate

This comment was originally posted on DCIM Support by Stine Hansen on 2017-01-05


Hi guanyc, has your issue been solved?

Cheers,

Stine

(CID:110013855)

DCIM_Support
Picard
Picard
0 Likes
0
435

Re: How Modifying ITO Server Access SSL certificate

This comment was originally posted on DCIM Support by guanyc on 2017-01-22


no....

(CID:110019468)

DCIM_Support
Picard
Picard
0 Likes
0
435

Re: How Modifying ITO Server Access SSL certificate

This comment was originally posted on DCIM Support by Greg Sterling on 2017-02-14


My apologies, I lost track of this issue. I will get back to you.

Greg

(CID:111414577)

DCIM_Support
Picard
Picard
0 Likes
0
435

Re: How Modifying ITO Server Access SSL certificate

This comment was originally posted on DCIM Support by Greg Sterling on 2017-02-17


Why types of management cards are you trying to discover? I see in your example it appears the vendor is "inspur", are there other types as well. I'm confirming the procedure with Intel, but it appears on initial discussion the certificates would have to be placed on the management cards.

I should have more info next week.

(CID:111937604)

DCIM_Support
Picard
Picard
0 Likes
0
435

Re: How Modifying ITO Server Access SSL certificate

This answer was originally posted on DCIM Support by Greg Sterling on 2017-02-21


Intel confirmed you can load your own certificate on the management cards (i.e. ILO, iDRAC Inspur management card).

However the security popups you see when the java app is launched when the vkvm console is started cannot be avoided, at least not today.

Regards

Greg

(CID:113644290)

DCIM_Support
Picard
Picard
0 Likes
0
434

🔒 Closed

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.