Oracle Key Manager (OKM) - Cause of Receiving a "Certificate Error" in Internet Explorer Browser When Attempting to Connect to KMA's ELOM

Asset ID:	1-71-2058438.1
Update Date:	2017-09-27
Keywords:

Solution Type Technical Instruction Sure

Solution 2058438.1 : Oracle Key Manager (OKM) - Cause of Receiving a "Certificate Error" in Internet Explorer Browser When Attempting to Connect to KMA's ELOM

Applies to:

Oracle Key Manager - Version 2.0.0 and later
Information in this document applies to any platform.

Goal

Why are we receiving a "certificate error" in Internet Explorer browser when attempting to connect to KMA's ELOM?

Solution

The cause of the issue is due to publisher's certificate revocation and server certificate revocation checked from the IE browser.

When visiting certain websites while using Internet Explorer 9, there may be instances one receive a security certificate error.

This issue has been seen in limited occurrences on some of the EOL KMA platforms (x2100 m2, x2200 m2, etc.). It may be possible to re-attempt flashing the ELOM firmware, please refer to the following document for the latest versions:

Oracle Key Manager - Build, Version, and Patch Matrix (Doc ID 1532878.1)

If re-flashing the ELOM/BIOS firmware does not resolve the issue, then the below may be used as a temporary workaround.

Workaround:

Modify local browser configuration below:

1. Launch Internet Explorer browser.

2. Select "Tools-> Internet Options" in the main menu bar.

3. In "Advanced" tab, remove the check marks next to "Check for publisher's certificate revocation" and "Check for server certificate revocation", then click the "OK" button.

Restart your browser to take effect of changes.

Then reattempt connecting to the KMA's ELOM and login.

Once the administrator has completed using the ELOM, then the above changes to the IE "Internet Options" menu can be converted back to their original values.

Attachments

This solution has no attachment