Starting with iLO 3 1.20, users can be authenticated with a digital certificate. Depending on the iLO 3 Two-Factor Authentication settings, the response to GET_TWOFACTOR_SETTINGS will contain different data.
Examples of GET_TWOFACTOR_SETTINGS return messages are:
Example of a Two-Factor Authentication settings return message with default settings:
<GET_TWOFACTOR_SETTINGS>
<AUTH_TWOFACTOR_ENABLE VALUE="N"/>
<CERT_REVOCATION_CHECK VALUE="N"/>
<CERT_OWNER_SUBJECT/>
</GET_TWOFACTOR_SETTINGS>
Example of a Two-Factor Authentication settings return message when SAN field in the certificate for directory authentication is enabled:
<GET_TWOFACTOR_SETTINGS>
<AUTH_TWOFACTOR_ENABLE VALUE="Y"/>
<CERT_REVOCATION_CHECK VALUE="N"/>
<CERT_OWNER_SAN/>
</GET_TWOFACTOR_SETTINGS>