TA-1176: Baseboard Management Controller (BMC) SSL Certificate and Private Key Loaded on the System May Be Replaced When Upgrading BMC Firmware to Version 2.86.2da97d3f

Documentation

Troubleshooting

000089933

03/11/2022

When upgrading the system’s baseboard management controller (BMC) firmware to version 2.86.2da97d3f, the BMC SSL certificate and the private key may be replaced by an Intel self-signed certificate if the previous loaded certificate uses a private key from a file with .key extension. In this case, the BMC reboot cycle takes longer and the event entry is logged into the system event log (SEL) as “Reserved SSL Certificates reset – Asserted”.
Additionally, in the BMC version 2.86.2da97d3f, when trying to upload a private key file with the extension .key via Integrated BMC EWS > New Private Key option > Choose File button, a caution pop-up window is displayed with the message: “Please select a Private key file that is PEM type”

This Technical Advisory documents the product affected, the detailed description, root cause, and corrective action/resolution.

Technical Advisory-1176 (PDF) PDF icon

Size: 97 KB
Date: March 2022

Note: PDF files require Adobe Acrobat Reader*