HP Integrated Lights-Out 2 - Manual (Page 49)

3. Click View/Modify.
4. Under the User Certificate Information section, click Add a certificate.
5. On the Map User Certificate page, paste the user certificate into the text-box, and click Import
Certificate. For more information on creating, copying, and pasting certificate information,
see
“Setting up two-factor authentication for the first time” (page 47) .
Two-factor authentication login
When you connect to iLO 2 and two-factor authentication is required, the Client Authentication
page prompts you to select the certificate you want to use. The Client Authentication page displays
all of the certificates available to authenticate a client. Select your certificate. The certificate can
be a certificate mapped to a local user in iLO 2, or a user specific certificate issued for authenticating
to the domain.
After you have selected a certificate, if the certificate is protected with a password, or if the certificate
is stored on a smart card, a second page appears prompting you to enter the PIN or password
associated with the chosen certificate.
The certificate is examined by iLO 2 to ensure it was issued by a trusted CA by checking the
signature against the CA certificate configured in iLO 2. iLO 2 determines if the certificate has
been revoked and if it maps to a user in the iLO 2 local user database. If all of these tests pass,
then the normal iLO 2 user interface appears.
If your credential authentication fails, the Login Failed page appears. If login fails, you are instructed
to close the browser, open a new browser page, and then try connecting again. If directory
authentication is enabled, and local user authentication fails, iLO 2 displays a login page with the
directory user name field populated with either the User Principal Name from the certificate or the
Distinguished Name (derived from the subject of the certificate). iLO 2 requests the password for
the account. After providing the password, you are authenticated.
Security 49