HP Integrated Lights-Out 2 User Guide

10. Change Certificate Owner Field to SAN. For more information, see the "Two-Factor Authentication(on page 38)" section.11. Click Apply. iLO 2 is reset. When iLO 2 attempts to go to the login page again, the browserdisplays the Client Authentication page with a list of certificates that are available to the system.12. Select the certificate added to the user in iLO 2. Click OK.13. If prompted to do so, insert your smart card, or enter your PIN or password. The login page shouldbe displayed with the e-mail address for the user in the Directory User field. You cannot change theDirectory User field.14. Enter the password for the directory user. Click Login.After completing the authentication process, you have access to iLO 2. See the "Directory settings" sectionfor more information on configuring directory users and privileges.Setting up a user for two-factor authenticationTo authenticate a user with a local iLO 2 account, a certificate must be associated with the user's localuser name. On the Administration>Modify User page, if a certificate has been mapped to the user, athumbprint (an SHA1 hash of the certificate) appears with a button that removes the certificate. If acertificate has not been mapped to the user, Thumbprint: A certificate has NOT beenmapped to this user appears with a button that starts the certificate import process.To set up a user for two-factor authentication and add a user certificate:1. Log in to iLO 2 using an account that has the Configure iLO 2 Settings privilege.2. Click Administration>User Administration. Select a user.3. Click View/Modify.4. Under the User Certificate Information section, click Add a certificate.5. On the Map User Certificate page, paste the user certificate into the text-box and click ImportCertificate. For more information on creating, copying, and pasting certificate information, see the"Setting up two-factor authentication for the first time (on page 39)" section.Configuring iLO 2 41