Once again, I’ve spent far too long trying to work out how the heck to get a LetsEncrypt X.509 certificate on to the HPE Integrated Lights-Out 5 board.
To save me some time in three months, and to save you some time since you’re already here, the instructions are really straightforward. Be aware that this method uses a DNS-based challenge which may be tricky for you to do unless you can automate DNS updates.
First, from the iLO web interface, select Security and SSL Certificate, and click Customize Certificiate.
Next, Click Generate CSR and go back to the page in a few minutes when the certificate signing request (CSR) has been generated.
Copy the CSR in to a file on a machine with the ‘certbot’ client installed and run the following command:
certbot certonly --csr request.csr --preferred-challenges dns
When the certificate has been issued, select Import Certificate and paste in the entire PEM-formatted file.
And it’s really as straightforward as that.