Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Replace Default Self-Signed Certificates (Oracle ILOM)

Oracle ILOM uses self-signed certificates to enable the out-of-the-box use of the SSL and TLS protocols. Whenever possible, replace self-signed certificates with certificates that are approved for use in your environment and signed by a recognized certificate authority.

Oracle ILOM supports a variety of methods that can be used to access the digital certificate and private key, including HTTPS, HTTP, SCP, FTP, TFTP, and pasting the information directly into a web browser interface. For more information, refer to the Oracle ILOM Configuration and Maintenance Guide (see Additional Oracle ILOM Resources).

1. Determine if Oracle ILOM is using a default self-signed certificate.

   -> show /SP/services/https/ssl cert_status
   /SP/services/https/ssl
   Properties:
   cert_status = Using Default (No custom certificate or private key loaded)
   

2. Install your organization's certificate.

   -> set /SP/services/https/ssl/custom_cert load_uri=URI_method
   -> set /SP/services/https/ssl/custom_key load_uri=URI_method