Oracle^® SuperCluster M8 and SuperCluster M7 Security Guide

Replace Default Self-Signed Certificates (IB Switch)

The IB switches use self-signed certificates to enable the out-of-the-box use of the HTTPS protocol. As a best practice, replace self-signed certificates with certificates that are approved for use in your environment and signed by a recognized certificate authority.

The IB switch supports a variety of methods that can be used to access the SSL/TLS certificate and private key, including HTTPS, HTTP, SCP, FTP, TFTP, and pasting the information directly into a web browser interface. For more information, refer to the Oracle Integrated Lights Out Manager Supplement for the Oracle Sun Data Center InfiniBand Switch 36 document. See Additional IB Switch Resources.

1. Log into an IB switch as ilom-admin.

   See Log Into an IB Switch.

2. Determine if the IB switch is using a default self-signed certificate.

   -> show /SP/services/https/ssl cert_status
   /SP/services/https/ssl
   Properties:
   cert_status = Using Default (No custom certificate or private key loaded)
   

3. Install your organization's certificate.

   -> load -source URI /SP/services/https/ssl/custom_cert
   -> load -source URI /SP/services/https/ssl/custom_key