This question was originally posted on DCIM Support by guanyc on 2016-10-17
How to modify the SSL certificate for ITO services?
And the Intel Virtual Gateway certificate
The latest JAVA security policy prevents self signed applet open,
The exceptions cannot use wildcards, means I may need to add a lot of exceptions (about 50 IP)
there some device in ITO discovery Virtual KVM Processor Type is N/A,,why ?
KVM allows you to use the proxy connection,
However, if the case is across the network, or can not be opened,
Will direct access to the target device IP, load JViewer.
Is there a way to get all the communications through proxy access?
This comment was originally posted on DCIM Support by Greg Sterling on 2016-10-17
I think there is a process to assign SSL certificates to the management cards. I'm checking into the process and will get back to you. GregS
This comment was originally posted on DCIM Support by guanyc on 2016-10-19
Thank you for your reply. I tried a lot of ways to make applet Java not pop up security tips, but without success. Access to the remote process will load multiple applet, each with a security prompt. 1, ITO, SSL Web, self signed certificate. 2, Intel data center manager, self signed certificates, when installed Keytool Java generation. 3, Intel virtual gateway, self signed certificate. 4, VirtualGatewayConsole, applet Java, Intel signature certificate has expired. 5, BMC management card page, HTTPS, self signed certificate. 6, Java applet JViewer, each chip signature certificate, such as AMI. Because the customer's security requirements, can not access the Internet, and therefore can not query the certificate revocation, this will affect the start speed.
This comment was originally posted on DCIM Support by Stine Hansen on 2017-01-05
Hi guanyc, has your issue been solved?
This comment was originally posted on DCIM Support by Greg Sterling on 2017-02-14
My apologies, I lost track of this issue. I will get back to you.
This comment was originally posted on DCIM Support by Greg Sterling on 2017-02-17
Why types of management cards are you trying to discover? I see in your example it appears the vendor is "inspur", are there other types as well. I'm confirming the procedure with Intel, but it appears on initial discussion the certificates would have to be placed on the management cards.
I should have more info next week.
This answer was originally posted on DCIM Support by Greg Sterling on 2017-02-21
Intel confirmed you can load your own certificate on the management cards (i.e. ILO, iDRAC Inspur management card).
However the security popups you see when the java app is launched when the vkvm console is started cannot be avoided, at least not today.
Discuss challenges in energy and automation with 30,000+ experts and peers.
Find answers in 10,000+ support articles to help solve your product and business challenges.
Find peer based solutions to your questions. Provide answers for fellow community members!