HP HP Integrated Lights-Out - Manual

Contents 7 Pre-Migration Checklist ................................................................................................................... 206 HP Lights-Out Directory Package ................................................................................................... 207 HPQLOMIG ...

8 User Guide Integrated Lights-Out Batch Processing Using the Lights-Out Configuration Utility......................................................... 247 Lights-Out Configuration Utility Parameters ................................................................................... 247 Lights-Out D...

12 User Guide Integrated Lights-Out EJECT_VIRTUAL_MEDIA Parameters.............................................................................. 327 EJECT_VIRTUAL_MEDIA Runtime Errors....................................................................... 327 GET_VM_STATUS ..............................

14 User Guide Integrated Lights-Out Troubleshooting Video and Monitor Problems ................................................................................ 386 General Guidelines ............................................................................................................... 386 T...

15 Operational Overview In This Section New in This Version ..................................................................................................................... 15 Usage Model ..............................................................................................................

16 User Guide Integrated Lights-Out − GET_VM_STATUS (on page 328 ) − SET_VM_STATUS (on page 329 ) Usage Model The common usage model for iLO is a client PC running a supported browser using DHCP and DNS protocols connected to one or more iLO devices. To use iLO, plug in the power of the host server ...

Operational Overview 17 A separate network increases the security of the management network because you can physically control which workstations are connected to the network. • • • • An iLO Shared Network Port using the server's NIC instead of the dedicated iLO management NIC for server management....

18 User Guide Integrated Lights-Out − Windows® 2000 Server − Windows® 2000 Advanced Server − Windows® Server 2003 • • • Linux − Red Hat Linux 7.2 − Red Hat Linux 7.3 − Red Hat Linux 8.0 − Red Hat Enterprise Linux AS 2.1 − Red Hat Enterprise Linux 3 − SuSE Linux Enterprise Server 7.0 − SuSE Linux Ent...

Operational Overview 19 − Mozilla 1.60 Mozilla 1.60 is not supported on United Linux 1.0. Please use Mozilla 1.70. Linux, Netscape, and Mozilla require Java™ 1.4.2 JVM. To download the recommended JVM for your system configuration, refer to the HP website ( http://www.hp.com/servers/manage/jvml ). C...

21 Configuring iLO In This Section iLO Configuration Options........................................................................................................... 21 Installing iLO Device Drivers ......................................................................................................

22 User Guide Integrated Lights-Out iLO RBSU HP recommends iLO RBSU to initially set up iLO and initially configure iLO network parameters for environments that do not use DHCP and DNS or WINS. RBSU provides the basic tools to configure iLO network settings and user accounts to get iLO onto the netw...

24 User Guide Integrated Lights-Out Scripted Setup Scripts can initially configure an iLO system. The configuration scripts are text files written in a style of XML called RIBCL. You can use RIBCL scripts to configure iLO on the network, during initial deployment, or from an already deployed host. R...

Configuring iLO 25 To download the drivers: 1. Click the iLO graphic. 2. Select Software and Drivers. The iLO Management Interface Driver allows system software like SNMP Insight Agents and Terminal Services pass-through service to communicate with iLO. Microsoft Windows NT, Windows 2000, and Window...

26 User Guide Integrated Lights-Out To install the drivers in the PSP, download the PSP from the HP website ( http://www.hp.com/support ), run the SETUP.EXE file included in the download, and follow the installation instructions. For additional information about the PSP installation, read the text f...

Configuring iLO 27 Red Hat Linux and SuSE Linux Server Driver Support The device drivers required to support iLO for Red Hat Linux and SuSE Linux are located on the SmartStart CD, Management CD, or on the HP website ( http://www.hp.com/support ). iLO Pre-requisite Files for Red Hat and SuSE Linux Fi...

28 User Guide Integrated Lights-Out where: d is the Linux distribution and version and vv.v-pp are version numbers. For additional information, refer to the Software and Drivers website ( http://www.hp.com/support ). To remove the Health and iLO drivers use the following commands: rpm –e hprsm rpm –...

Configuring iLO 29 iLO Advanced Evaluation License A free 30-day evaluation license is available for download on the HP website ( http://h10018.www1.hp.com/wwsolutions/ilo/iloeval.html ). The evaluation license will activate and access iLO Advanced features. Only one evaluation license can be instal...

30 User Guide Integrated Lights-Out 3. Click Licensing to display the iLO Advanced license activation screen. 4. Enter the activation key in the space provided. The EULA confirmation appears. The EULA details are available on the HP website ( http://www.hp.com/servers/lights-out ) and with the Advan...

Configuring iLO 31 Activating iLO Advanced Using Scripting To activate iLO Advanced using CPQLODOS: 1. Add the following statements in the XML script file. The script is saved by CPQLODOS as iLO.xml. <SET_LICENSE> <LICENSE_KEY VALUE="1234567890ABCDEFGHIJKLMNO" /> </SET_LICENSE...

32 User Guide Integrated Lights-Out On select p-Class blades in enclosures with updated management backplanes that support BL30P (high density) blades, iLO can be used for initial enclosure static IP configuration. Initial configuration of the blade in bay 1 allows all subsequent iLOs in the enclosu...

Configuring iLO 33 Configuring a ProLiant BL p-Class Blade Enclosure To configure a BL p-Class blade enclosure using static IP bay addressing: 1. Install a server blade in bay 1 of the BL p-Class enclosure. The server blade does not need to be configured or have an operating system installed. The se...

Configuring iLO 35 ProLiant BL p-Class Standard Configuration Parameters Beginning IP Address (Bay 1)—Assigns the starting IP address. All IP addresses must be valid addresses. Ending IP Address (Bay 16)—Assigns the ending IP address. All IP addresses must be valid addresses. Subnet Mask—Assigns the...

36 User Guide Integrated Lights-Out Static Route #1, #2, and #3 (destination gateway)—Assigns the appropriate static route destination and gateway IP address on your network (the default IP values are 0.0.0.0 and 0.0.0.0, where the first IP address corresponds to the destination IP, and the second I...

Configuring iLO 37 • GET_ENCLOSURE_IP_SETTINGS—Requests the respective iLO Static IP Bay Configuration settings. This attribute must appear inside the RACK_INFO command block. The RACK_INFO command block may be set to read or write. RIBCL RACK_INFO Command Examples Getting Static IP Bay Configuratio...

38 User Guide Integrated Lights-Out <RIBCL VERSION="2.0"> <LOGIN USER_LOGIN="Admin" PASSWORD="password"> <RIB_INFO MODE="write"> <MOD_NETWORK_SETTINGS> <ENCLOSURE_IP_ENABLE VALUE="Yes"/> </MOD_NETWORK_SETTINGS> </RIB_INFO...

39 Using iLO In This Section Logging in to iLO for the First Time ............................................................................................ 39 Logging in to iLO for the First Time Using a Browser ................................................................ 40 System Status.......

40 User Guide Integrated Lights-Out • DNS Name—ILOXXXXXXXXXXXX, where the 12 Xs represent the serial number of the server NOTE: User names and passwords are case sensitive. Logging in to iLO for the First Time Using a Browser To start the login process, you must know the iLO network address, which i...

Using iLO 41 2. In the Security Alert window: − Click Yes to continue to the login screen of iLO. The alert message appears each time that you access the iLO management processor in a browser. − Click No to return to the Welcome screen of iLO. − Click View Certificate to display the certificate info...

42 User Guide Integrated Lights-Out NOTE: If the certificate is removed from your browser, if you have upgraded the firmware, or if iLO is rebooted, the security alert message will be displayed again. Unless a certificate generated by a CA has been imported into iLO, iLO will generate a self-signed ...

44 User Guide Integrated Lights-Out After the default user name and password have been verified, the Status Summary screen is displayed. The BL p-Class tab is not illustrated in this and subsequent screen shots. Progressive Delays for Failed Browser Login Attempts After an initial failed log in atte...

Using iLO 45 System Status The following options are available within the System Status tab. Status Summary The Status Summary screen provides general information about iLO, such as all logged in users, server name and status, iLO IP address and name, and latest log entry data. The Status Summary sc...

46 User Guide Integrated Lights-Out • Product version (iLO Standard or iLO Advanced) of iLO Server Status The Server Status option provides comprehensive status information about the server, including: • • • • Server name associated with the iLO management processor The Server Name field reports hos...

Using iLO 47 • SMBIOS data such as host platform, system ROM, processors, embedded MAC addresses, expansion slots, and memory modules present at POST iLO Event Log The iLO Event Log is a record of significant events detected by iLO. Logged events include major server events, such as a server power o...

48 User Guide Integrated Lights-Out Other logged events include any successful or unsuccessful browser and Remote Console logins, virtual power and power cycle events, and clear event log actions. Some configuration changes, such as creating or deleting a user, are also logged. iLO provides secure p...

Using iLO 49 Server and iLO Diagnostics The Server and iLO Diagnostics option provides the following comprehensive diagnostic information: • POST diagnostic results for the host server (on page 49 ) • NVRAM environment variables listing (on page 50 ) • Virtual NMI button (on page 50 ) • iLO self-tes...

50 User Guide Integrated Lights-Out Code Start of Phase FE18 USB Initialization FE1C Memory Test FE20 Memory Initialization FE24 USB Startup FE28 Floppy Controller Test FE2C Option ROM Initialization FE30 ATAPI Option ROM Initialization FE34 BBS Initialization FE38 Begin BOOT Process FE3C Attempting...

Using iLO 51 If the system management (Health) driver is loaded, and ASR is enabled, then the host automatically reboots after an NMI has occurred. • • Debug If a software application hangs the system, the NMI capability can be used to engage the operating system debugger. Initiate dump of an unresp...

52 User Guide Integrated Lights-Out Remote Console The Remote Console tab provides access to different views of the Remote Console and enables you to define keystroke sequences that will be transmitted to the remote host server at the press of a hot key. Standard iLO provides embedded hardware Remot...

Using iLO 53 For best performance, be sure to configure the host operating system display as described in "Optimizing Performance for Graphical Remote Console (on page 54 )." Remote Console Information Option The Remote Console Information option displays information concerning the Remote Co...

54 User Guide Integrated Lights-Out Remote Console will not be available if the remote console port configuration on the Global Settings tab is set to disabled. Enhanced Features of the Remote Console The Remote Console applet contains five buttons that provide iLO with enhanced features. These opti...

Using iLO 55 − Select an option greater than 256 colors. − Select a greater screen resolution than the screen resolution of the remote server. − Linux X Display Properties—On the X Preferences screen, set the font size to 12. • • Remote Console − For Remote Console speed, HP recommends using a 700-M...

56 User Guide Integrated Lights-Out Microsoft® Windows NT® 4.0 and Windows® 2000 Settings Use the following settings to optimize performance: • • • • Server Display Properties − Plain Background (no wallpaper pattern) − Display resolution of 800 x 600 or 1024 x 768 pixels − 256-color or 24-bit color...

Using iLO 57 To automate the setting of the optimal mouse configuration, download the Lights-Out Optimization utility from the HP website ( http://www.hp.com/servers/lights-out ). Click the Best Practices graphic, then click the Maximize Performance links. Red Hat Linux and SuSE Linux Server Setting...

58 User Guide Integrated Lights-Out The Remote Console hot keys are active during a remote console session through the Remote Console applet and during a text remote console session through a telnet client. To define a Remote Console hot key: 1. Click Remote Console Hot Keys in the Remote Console ta...

Using iLO 59 PG UP ) ^ x PG DN * _ y ENTER + a z TAB - b { BREAK . c } F1 / d | F2 0 e ; F3 1 f ’ F4 2 g L_CTRL F5 3 h R_CTRL F6 4 i NUM PLUS F7 5 j NUM MINUS F8 6 k SCRL LCK F9 7 l BACKSPACE F10 8 m SYS RQ F11 9 n Single- and Dual-Cursor Modes for Graphical Remote Console The Graphical Remote Conso...

Using iLO 61 Virtual Devices Within the Virtual Devices tab are: • Virtual Power (on page 62 ) • Virtual Media (on page 64 ) • Virtual Indicators (on page 83 ) • Virtual Serial Port (on page 84 )

62 User Guide Integrated Lights-Out Virtual Power The Virtual Power button enables control of the power state of the remote server and simulates pressing the physical power button on the server. If the remote host server is not responding, this feature enables an administrator to initiate a cold or ...

64 User Guide Integrated Lights-Out CAUTION: It is possible using the Manual Override for BL p- Class option to power on servers that exceed the power available from the power supplies. Exceeding the available power can cause loss of all servers in the rack, server failures, and loss or corruption o...

Using iLO 65 Operating System USB Support Different operating systems provide varying levels of USB support. iLO uses the built-in USB drivers of the operating system. The level of USB support in the operating system affects the level of support for iLO Virtual Media. In general, any operating syste...

Using iLO 67 1 NOTE: The typical use of the Virtual USB floppy is to assist for a network based installation of the Network Operating System. 2 NOTE: Any additional software packages that must be installed can be accomplished using this method. 3 NOTE: You must manually load the USB driver. 4 NOTE: ...

68 User Guide Integrated Lights-Out 3. Click Connect. To use an image file: 1. Select Local Image File within the Virtual Floppy section of the Virtual Media applet. 2. Enter the name of the diskette image in the text box. You can also click Browse to locate image files. 3. Click Connect. When conne...

70 User Guide Integrated Lights-Out 2. Select Virtual Media in the Virtual Devices tab. 3. Insert the media into the local floppy drive, select a diskette drive, and click Connect. Alternatively, select a diskette image to be used and click Connect. In NetWare 6.5, use the lfvmount command on the se...

Using iLO 73 3. Click Connect. Using an Image File 1. Select Local Image File within the Virtual CD-ROM section of the Virtual Media applet. 2. Enter the name of the CD-ROM image in the text box. You can also click Browse to locate image files. 3. Click Connect. When connected, virtual devices are a...

Using iLO 77 To create a Virtual Media image file: 1. Click Create Disk Image. 2. Select the drive letter and the image file name. You can use the Browse feature to find and select an existing image file or to change the directory in which the image file will be created. 3. Click Create. The Virtual...

Using iLO 79 4. Select Local CD-ROM Drive. 5. To locate image files do one of the following: − Select the drive letter of the desired physical CD-ROM drive on your client system from the dropdown menu. − Select Local Image File within the Virtual CD-ROM section of the Virtual Media applet and enter ...

Using iLO 81 Command Line Input Result [-?] Displays help information. Scripting Web Server Requirements Virtual Media scripting uses a media image that is stored and retrieved from a Web server accessible from the management network. The web server must be a HTTP 1.1 compliant server that supports ...

82 User Guide Integrated Lights-Out CGI Helper Application The following perl script is an example of a CGI helper application that allows diskette writes on Web servers that cannot perform partial writes. When using the helper application, the iLO firmware posts a request to this application with t...

Using iLO 83 my $data = $q->param('data'); # # Change the filename appropriately # $file = $prefix . "/" . $file; # # Decode the range # if ($range =~ m/([0-9A-Fa-f]+)-([0-9A-Fa-f]+)/) { $start = hex($1); $end = hex($2); $len = $end - $start + 1; } # # Decode the data (it's a big hex stri...

84 User Guide Integrated Lights-Out • • • • • iLO settings are being modified through XML scripting. iLO firmware is being updated. Never remove power from a server with a flashing Unit ID LED. Virtual Serial Port The Virtual Serial Port function is a bidirectional data flow of the data stream appea...

Using iLO 85 To obtain the SAC> prompt, entering Enter might be required after connecting through the Virtual Serial Port console. For more information on using the EMS features, refer to the Windows® Server 2003 documentation. Security Information If Remote Console Data Encryption is enabled, th...

86 User Guide Integrated Lights-Out Linux requires that the terminal be listed in the /etc/securetty file in order to logon. Add the following line at the end of this file: ttyS0 On some BL p-Class systems, the standard UART I/O address (0x3F8) is used when there is no conflict. On these systems, th...

Using iLO 87 iLO supports up to 12 users with customizable access rights, login names and advanced password encryption. Individual user's abilities are controlled by privileges. Each user can have privileges custom-tailored to their access requirements. To support more than 12 users, iLO Advanced en...

88 User Guide Integrated Lights-Out 2. Click User Administration. A screen similar to the one shown is displayed. 3. Click Add. 4. Complete the fields with the necessary information for the user being added. 5. When the user profile is complete, click Save User Information to return to the User Admi...

Using iLO 89 4. Change the user information in the fields that require modification. After changing the fields, click Save User Information to return to the User Administration screen. To recover the user's original information, click Restore User Information. All changes made to the profile will be...

Using iLO 91 • Pass-Through Configuration ("Terminal Services Pass-Through Option" on page 109 ) • Enable iLO RBSU (on page 340 ) • • Require Login for iLO RBSU Show iLO during Post (on page 341 ) • Remote Console Port Configuration (on page 341 ) • Remote Console Data Encryption (on page 34...

94 User Guide Integrated Lights-Out iLO Diagnostic Port Configuration Parameters The iLO Diagnostic Port on the front of ProLiant BL p-Class servers enables you to access and troubleshoot server issues by using a diagnostic cable. The iLO Diagnostic Port uses a static IP address. It does not use DHC...

Using iLO 95 Recovering from a Failed iLO Firmware Update In the event that an iLO firmware update has failed, there are various recovery options. For all of these options, you need a current firmware image. HP does not recommended downgrading iLO firmware, and the version you have could be corrupt....

96 User Guide Integrated Lights-Out Enabling SNMP Alerts iLO supports up to three IP addresses to receive SNMP alerts. Typically, this address is the same as the IP address of the Insight Manager 7 or Systems Insight Manager server console. IMPORTANT: Only users with the Configure iLO can change the...

Using iLO 97 2. Select SNMP/Insight Manager Settings in the Administration tab. 3. Enter up to three IP addresses to receive the SNMP alerts. 4. Select the alert options you want iLO to support. For information on the Forward Insight Manager Agent SNMP Alerts field. 5. Click Apply Settings. Generati...

98 User Guide Integrated Lights-Out To send a test alert: 1. Select SNMP/Insight Manager Settings in the Administration tab. 2. Click Send Test Alert to generate a test alert and send it to the TCP/IP addresses saved in the SNMP Alert Destination(s) fields. 3. After generating the alert, a confirmat...

Using iLO 99 2. Click Upgrade iLO Firmware in the Administration tab. 3. Enter the file name in the New firmware image field or browse for the file. 4. Click Send firmware image. 5. The firmware upgrade takes a couple of minutes. A progress bar displays the progress of the firmware upgrade. Do not i...

100 User Guide Integrated Lights-Out If the firmware upgrade was interrupted or failed, immediately attempt the upgrade again. Do not reset the iLO system before reattempting a firmware upgrade. iLO provides an FTP-based firmware upgrade disaster recovery ("Inability to Upgrade iLO Firmware"...

Using iLO 101 Directory Settings The Directory Settings screen enables you to configure and test your directory services. For additional information on directories, refer to "Directory Services (on page 143 )." For additional information on directory configuration parameters, refer to "C...

Using iLO 103 Rack Settings Blade servers communicate with the rack environment to obtain power and manage shared resources of the rack (fans, temperature, power supplies). The Rack Settings option enables you to configure this communication. The following fields are available: • • • Rack Name Enclo...

104 User Guide Integrated Lights-Out • Enable Rack Alert Logging (IML) (on page 350 ) Server Blade Management Module The Server Blade Management Module screen: • • • • • Displays devices discovered in the BL p-Class server blade enclosure Reads and displays the current firmware version of the contro...

Using iLO 105 • • • Reads and displays the current firmware version of the controller for the power supply enclosure Displays the current power output, maximum power output, and temperature information for the power supply Enables you to activate the power management module Unit Identification LEDs ...

106 User Guide Integrated Lights-Out Server POST Tracking Feedback is limited while the server is booting because of the headless nature of the ProLiant BL p-Class servers. iLO provides boot-time feedback by flashing the Server Health LED green during server POST. The LED is set to solid amber if th...

Using iLO 107 • • • Hot-unplugging a keyboard—Disconnecting a local keyboard from the server while the server is in a powered on state. Hot-Plug Keyboard Recommended Usage For best results, follow these guidelines: Only hot-plug a local keyboard after the operating system has booted. Do not hot-unpl...

Using iLO 109 Terminal Services Pass-Through Option Terminal Services is provided by the Microsoft® Windows® operating systems. The iLO Terminal Services pass-through option provides a connection between the Terminal Services server on the host system and the Terminal Services client on the client s...

110 User Guide Integrated Lights-Out Microsoft® Windows® 2000 servers require the installation of Microsoft® .NET Framework to support the use of Terminal Services. After .NET Framework is installed, the Terminal Services client must be installed from diskettes created by the Terminal Services serve...

Using iLO 111 Terminal Services Pass-Through Installation • • Microsoft® Windows® 2000 and Windows® 2003 Microsoft® Windows® 2000 servers require Microsoft® .NET Framework to support the use of Terminal Services. The Terminal Services pass-through service and the iLO Management Interface Driver for ...

112 User Guide Integrated Lights-Out Errors during installation and during execution of the pass-through service will be logged in the server's Application Event Log. The pass-through service may be removed using Add or Remove Programs in the Control Panel. Windows® 2000 Terminal Services Port Chang...

Using iLO 113 When the Terminal Services pass-through option is set to Enabled or Automatic on the Global Settings page and the Terminal Services Client is installed on the Windows® client (installs by default on Windows® XP), the Terminal Services button is enabled. When the Terminal Services butto...

114 User Guide Integrated Lights-Out Terminal Services Button Display This version of the iLO firmware does not accurately display through the Terminal Services button whether the host operating system is enabled for Terminal Services operation. Even if the operating system is not enabled (for examp...

Using iLO 115 Terminal Services can be disabled or enabled at any time. Changing the Terminal Services configuration causes the iLO firmware to reset. Resetting the iLO firmware interrupts any open connections to iLO. When the Terminal Services client is launched by the Remote Console, Remote Consol...

116 User Guide Integrated Lights-Out The Terminal Services Pass-through service might experience start-up problems when the operating system Application Event Log is full. To view the event log, select Computer Management>System Tools>Event Viewer>Application. 7. Verify that the Terminal Se...

Using iLO 117 Using Telnet To use telnet, the iLO Remote Console Port Configuration and Remote Console Data Encryption on the Global Settings screen must be configured as follows: 1. Set the Remote Console Port Configuration to Enabled. 2. Set the Remote Console Data Encryption to No. You can open e...

118 User Guide Integrated Lights-Out Action Key Sequence Comments POWER OFF CTRL P 0 CTRL P is the prefix for the Power commands. The 0 indicates an OFF selection. ACPI PRESS CTRL P 6 CTRL P is the prefix for the Power commands. The 6 indicates an ACPI power press. The ACPI power press is equivalent...

122 User Guide Integrated Lights-Out VT100+ Codes for the F-Keys Key Sequence F1_KEY \eOP F2_KEY \eOQ F3_KEY \eOR F4_KEY \eOS F5_KEY \eOT F6_KEY \eOU F7_KEY \eOV F8_KEY \eOW F9_KEY \eOX F10_KEY \eOY F11_KEY eOZ F12_KEY \eO[ Linux Codes for the F-Keys Key Sequence F5_KEY \e[15~ F6_KEY \e[17~ F7_KEY \...

Using iLO 123 Key Sequence END_KEY \e[4~ PG_UP \e[5~ PG_DOWN \e[6~ • • • Secure Shell SSH is a telnet-like program for logging into and for executing commands on a remote machine, which includes security with authentication, encryption, and data integrity features. iLO can support simultaneous acces...

124 User Guide Integrated Lights-Out 1. Open an SSH window. 2. When prompted, enter the IP address or DNS name, login name, and password. Using OpenSSH To start an OpenSSH client in Linux, use: ssh -l loginname ipaddress/dns name Using PuTTY • • To start a PuTTY session, double-click the PuTTY icon ...

Using iLO 125 Feature Language English Client/User authentication method Password Authentication timeout 2 minutes Authentication attempts 3 Default SSH port 22 iLO Shared Network Port The iLO Shared Network Port enables you to choose either the system NIC or the dedicated iLO NIC for server managem...

126 User Guide Integrated Lights-Out iLO Shared Management Port Features and Restrictions Only the iLO Shared Network Port or the iLO Dedicated Management NIC port can be used for iLO server management at one time. The iLO Shared Network Port and the iLO Dedicated Management NIC port cannot operate ...

Using iLO 127 When the Shared Network Port is selected, iLO must be configured through either the iLO RBSU or XML. Configuration through RBSU requires that the system be rebooted. Enabling the iLO Shared Network Port Feature The iLO Shared Network Port feature is disabled by default. This feature ca...

128 User Guide Integrated Lights-Out 4. In the Network Configuration menu, toggle the Network Interface Adapter Field to Shared Network Port by pressing the space bar. The Shared Network Port option is only available on supported servers. 5. Press the F10 key to save the configuration. 6. Select Fil...

Using iLO 129 After iLO resets, the Shared Network Port feature will be active. Any network traffic going to or originating from iLO is directed through the system's NIC port 1. The iLO web interface is no longer available after iLO resets. To restore the use of the web interface, iLO's Dedicated Ma...

130 User Guide Integrated Lights-Out To re-enable the dedicated management port: 1. Connect the iLO dedicated management NIC port to a LAN from which the server is managed. 2. Reboot the server. 3. When prompted during POST, press the F8 key to enter iLO RBSU. 4. Select Network>NIC>TCP/IP, and...

Using iLO 131 − SSH allowing two simultaneous connections. IP address or DNS name, login name and password are required to start a CLI session using SSH. − Telnet protocol using three simultaneous connections All six connections can be active simultaneously. After serial CLI is enabled on the Global...

132 User Guide Integrated Lights-Out The following commands display help messages : − help − ? Entering help or ? displays all the supported commands. Entering <command help/?> or <help/? command> displays the help message specific to that command. • • • • Power The power command is used...

Using iLO 133 • • Vsp The vsp command invokes a virtual serial port session. When in virtual serial port session, press <ESC>( to return to the CLI. Vm The vm command allows Virtual Media scripting commands to be entered at the CLI. vm device insert path inserts an image. vm device eject eject...

135 iLO Security In This Section Security Features ........................................................................................................................ 135 General Security Guidelines ...................................................................................................

136 User Guide Integrated Lights-Out • • • • • • • • • • • iLO should not be connected directly to the Internet. A 128-bit cipher strength browser must be used. Encryption iLO provides strong security for remote management in distributed IT environments by using 128-bit SSL encryption of HTTP data t...

iLO Security 137 • • • • The boot block is exposed for programming. A warning message is displayed on iLO browser pages indicating that the iLO Security Override Switch is currently in use. An iLO log entry records the use of the iLO Security Override Switch. An SNMP alert can also be sent upon sett...

138 User Guide Integrated Lights-Out An alternative to local iLO user accounts is to integrate iLO user authentication into directory services. This configuration allows a virtually unlimited number of users, and easily scales to the number of Lights-Out devices in an enterprise. Additionally, the d...

iLO Security 139 Global Security Settings Global security settings allow the administrator to control access to functions or to control specific actions of functions that have been enabled globally. For example, you can control access to iLO RBSU, enable or disable Lights-Out Functionality, set the ...

140 User Guide Integrated Lights-Out Certificates By default, iLO creates a self-signed certificate for use in SSL connections. This certificate enables the iLO to work without any additional configuration steps. The security features of the iLO can be enhanced by importing a trusted certificate. • ...

iLO Security 141 Securing RBSU The iLO RBSU allows user access for viewing and modifying the iLO configuration. RBSU access settings can be configured using RBSU, browser, RIBCL scripts, and the iLO Security Override Switch. RBSU has three levels of security: • • • RBSU Disabled (most secure) If iLO...

143 Directory Services In This Section Benefits of Directory Integration ................................................................................................ 143 Features Supported by Directory Integration ............................................................................. 144 ...

144 User Guide Integrated Lights-Out • • • • • • • • • Single point of administration—You can use native administrative tools like MMC and ConsoleOne to administrate Lights-Out users. Immediacy—A single change in the directory rolls-out immediately to associated Lights-Out processors. This eliminate...

Directory Services 145 Installing Directory Services To successfully enable directory-enabled management on any Lights-Out management processor: 1. Plan Review the following sections: − "Directory Services (on page 143 )" − "Directory Services Schema (on page 353 )" − "Directory-...

146 User Guide Integrated Lights-Out For more information on managing the directory service, refer to "Directory-Enabled Remote Management (on page 193 )." Examples are available in the "Directory Services for Active Directory (on page 153 )" and "Directory Services for eDirector...

Directory Services 147 Directory Services Support iLO supports the following directory services: • • • • • • • • • • • • • Microsoft® Active Directory Microsoft® Windows® Server 2003 Active Directory Novell eDirectory 8.6.2 Novell eDirectory 8.7 iLO software is designed to run within the Microsoft® ...

148 User Guide Integrated Lights-Out eDirectory Installation Prerequisites Directory Services for iLO uses LDAP over SSL to communicate with the directory servers. iLO software is designed to install in an eDirectory version 8.6.1 (and above) tree. HP does not recommend installing this product if yo...

Directory Services 149 • • • Schema Preview Setup Results Schema Preview The Schema Preview screen enables the user to view the proposed extensions to the schema. This screen reads the selected schema files, parses the XML, and displays it as a tree view. It lists all of the details of the attribute...

150 User Guide Integrated Lights-Out Setup The Setup screen is used to enter the appropriate information before extending the schema. The Directory Server section of the Setup screen enables you to select whether you will be using Active Directory or eDirectory, and to set the computer name and the ...

152 User Guide Integrated Lights-Out Results The Results screen displays the results of the installation, including whether the schema could be extended and what attributes were changed. Management Snap-In Installer The management snap-in installer installs the snap-ins required to manage iLO object...

Directory Services 153 • Making the associations between iLO objects and the role (or policy) objects Directory Services for Active Directory The following sections provide installation prerequisites, preparation, and a working example of Directory Services for Active Directory. HP provides a utilit...

154 User Guide Integrated Lights-Out These articles are accessed using the Knowledge Base Article ID Number Search option at Microsoft® website ( http://support.microsoft.com/ ). − 216999 Installing the Remote Server Administration Tools in Windows® 2000 − 314978 Using the Adminpak.msi to Install a ...

Directory Services 155 3. In Windows® 2000, the safety interlock that prevents accidental writes to the schema must be temporarily disabled. The schema extender utility can do this if the remote registry service is running and the user has sufficient rights. This can also be done by setting HKEY_LOC...

156 User Guide Integrated Lights-Out 6. Download the Smart Component, which contains the installers for the schema extender and the snap-ins. The Smart Component can be downloaded from the HP website ( http://www.hp.com/servers/lights-out ). 7. Run the schema installer application to extend the sche...

158 User Guide Integrated Lights-Out a. Right-click the RILOES organizational unit found in the testdomain.local domain, and select NewHPObject. b. Select Device for the type on the Create New HP Management Object dialog box. c. Enter an appropriate name in the Name field of the dialog box. In this ...

Directory Services 159 a. Right-click the Roles organizational unit, select New then Object. b. Select Role for the type field in the Create New HP Management Object dialog box. c. Enter an appropriate name in the Name field of the New HP Management Object dialog box. In this example, the role will ...

Directory Services 161 d. Add users to the role. Click the Members tab, and add users using the Add button and the Select Users dialog box. The devices and users are now associated. 5. Use the Lights Out Management tab to set the rights for the role. All users and groups within a role will have the ...

162 User Guide Integrated Lights-Out User rights to any iLO are calculated as the sum of all the rights assigned by all the roles in which the user is a member, and in which the iLO is a Managed Device. Following the preceding examples, if a user is in both the remoteAdmins and remoteMonitors roles,...

Directory Services 163 After the snap-in is installed, iLO objects and iLO roles can be created in the directory. Using the Users and Computers tool, the user will: • • • Create iLO and role objects. Add users to the role objects. Set the rights and restrictions of the role objects. Active Directory...

164 User Guide Integrated Lights-Out HP Devices The HP Devices tab is used to add the HP devices to be managed within a role. Clicking Add enables you to browse to a specific HP device and add it to the list of member devices. Clicking Remove enables you to browse to a specific HP device and remove ...

Directory Services 165 Members After user objects are created, the Members tab enables you to manage the users within the role. Clicking Add enables you to browse to the specific user you want to add. Highlighting an existing user and clicking Remove removes the user from the list of valid members. ...

Directory Services 167 Time Restrictions You can manage the hours available for logon by members of the role by clicking Effective Hours in the Role Restrictions tab. In the Logon Hours pop-up window, you can select the times available for logon for each day of the week in half-hour increments. You ...

168 User Guide Integrated Lights-Out Enforced Client IP Address or DNS Name Access Access can be granted or denied to an IP address, IP address range, or DNS names. 1. In the By Default dropdown menu, select whether to Grant or Deny access from all addresses except the specified IP addresses, IP add...

170 User Guide Integrated Lights-Out Active Directory Lights-Out Management After a role is created, rights for the role can be selected. Users and group objects can now be made members of the role, giving the users or group of users the rights granted by the role. Rights are managed on the Lights O...

Directory Services 171 • • • • • • Login—This option controls whether users can log in to the associated devices. Remote Console—This option enables the user access to the Remote Console. Virtual Media—This option enables the user access to the iLO virtual media functionality. Server Reset and Power...

172 User Guide Integrated Lights-Out Assume samplecorp has an enterprise directory arranged according to the following screen. 1. Begin by creating organizational units in each region, which will contain the Lights-Out Management devices and roles specific to that region. In this example, two organi...

Directory Services 173 d. The Select Object Subtype dialog box is displayed. Select Lights Out Management Device from the list, and click OK. e. Repeat the process for several more iLO devices with DNS names rib- nntp-server and rib-file-server-users1 in hp devices under region1, and rib-file-server...

174 User Guide Integrated Lights-Out d. The Select Object Subtype dialog box is displayed. Because this role will be managing the rights to Lights-Out Management devices, select Lights Out Management Devices from the list, and click OK. e. Repeat the process, creating a role for remote server monito...

Directory Services 175 e. The devices and users are now associated. Use the Lights Out Management Device Rights subtab of the HP Management tab to set the rights for the role. All users within a role will have the rights assigned to the role on all of the iLO devices managed by the role. In this exa...

176 User Guide Integrated Lights-Out c. Then, using the Lights Out Management Device Rights subtab of the HP Management tab, select the check box next to Login, and click Apply and Close. Members of the remoteMonitors role will be able to authenticate and view the server status. User rights to any I...

Directory Services 177 Role Managed Devices The Role Managed Devices subtab under the HP Management tab is used to add the HP devices to be managed within a role. Clicking Add allows you to browse to the specific HP device and add it as a managed device.

178 User Guide Integrated Lights-Out Members After user objects are created, the Members tab allows you to manage the users within the role. Clicking Add allows you to browse to the specific user you want to add. Highlighting an existing user and clicking Delete removes the user from the list of val...

Directory Services 179 − IP Range • DNS Name eDirectory Role Restrictions The Role Restrictions subtab allows you to set login restrictions for the role. These restrictions include: • • Time Restrictions IP Network Address Restrictions − IP/Mask − IP Range

Directory Services 181 1. In the By Default dropdown menu, select whether to Allow or Deny access from all addresses except the specified IP addresses, IP address ranges, and DNS names. 2. Select the addresses to be added, select the type of restriction, and click Add. 3. In the Add New Restriction ...

182 User Guide Integrated Lights-Out Lights-Out Management After a role is created, rights for the role can be selected. Users and group objects can now be made members of the role, giving the users or group of users the rights granted by the role. Rights are managed on the Lights Out Management Dev...

184 User Guide Integrated Lights-Out Configuring Directory Settings The Directory Settings screen contains the following settings options: • Enable Directory Authentication (on page 351 ) • Enable Local User Accounts (on page 351 ) • Directory Server Address (on page 351 ) • • Directory Server LDAP ...

Directory Services 185 • Directory User Context ("Directory User Context 1, Directory User Context 2, Directory User Context 3" on page 352 ) Click Apply Settings to save any changes. To test the communication between the directory server and iLO, click Test Settings. Refer to "Testing D...

186 User Guide Integrated Lights-Out Directory Tests To validate current directory settings for iLO, click Test Settings on the Directory Settings page. The Directory Tests page will display.

Directory Services 187 The test page displays the results of a series of simple tests designed to validate the current directory settings. Additionally, it includes a test log that shows test results as well as any problems that have been detected. After your directory settings are configured correc...

189 Certificate Services In This Section Introduction to Certificate Services ............................................................................................ 189 Installing Certificate Services ................................................................................................

190 User Guide Integrated Lights-Out 6. Enter the information appropriate for your site and organization. Accept the default time period of two years for the Valid for field. Click Next. 7. Accept the default locations of the certificate database and the database log. Click Next. 8. Browse to the c:...

Certificate Services 191 8. Click Next when the Automatic Certificate Request Setup wizard starts. 9. Select the Domain Controller template, and click Next. 10. Select the certificate authority listed. (It is the same CA defined during the Certificate Services installation.) Click Next. 11. Click Fi...

193 Directory-Enabled Remote Management In This Section Introduction to Directory-Enabled Remote Management .......................................................... 193 Using Bulk Import Tools ............................................................................................................

194 User Guide Integrated Lights-Out Every LOM device that uses the directory service to authenticate and authorize users must be configured with the appropriate directory settings. Refer to "Configuring Directory Settings (on page 184 )" for details on the specific directory settings. In ge...

Directory-Enabled Remote Management 195 − Discover the LOM devices as management processors using CPQLOCFG to send a RIBCL XML script file to a group of LOM devices to manage those LOM devices. The LOM devices perform the actions designated by the RIBCL file and send a response to the CPQLOCFG log f...

196 User Guide Integrated Lights-Out When using Microsoft® Active Directory, it is possible to place one group within another or nested groups. Role objects are considered groups and can include other groups directly. Add the existing nested group directly to the role, and assign the appropriate rig...

198 User Guide Integrated Lights-Out Creating Roles to Follow Organizational Structure Often, the administrators within an organization are placed into a hierarchy in which subordinate administrators must assign rights independently of ranking administrators. In this case, it is useful to have one r...

Directory-Enabled Remote Management 199 IP Address Range Restrictions IP address range restrictions enable the administrator to specify network addresses that are granted or denied access by the restriction. The address range is typically specified in a low-to-high range format. An address range can...

200 User Guide Integrated Lights-Out Using DNS-based restrictions can create some security complications. Name service protocols are insecure. Any individual with malicious intent and access to the network can place a rogue DNS service on the network creating fake address restriction criteria. Organ...

Directory-Enabled Remote Management 201 How User Time Restrictions are Enforced Administrators can place a time restriction on directory user accounts. Time restrictions limit the ability of the user to log in (authenticate) to the directory. Typically, time restrictions are enforced using the time ...

202 User Guide Integrated Lights-Out Network address restrictions placed on the user in the directory might not be enforced in the expected manner if the directory user logs in through a proxy server. When a user logs in to a LOM device as a directory user, the LOM device attempts authentication to ...

205 Lights-Out Directories Migration Utilities In This Section Introduction to Lights-Out Migration Utilities ........................................................................... 205 Compatibility ...................................................................................................

206 User Guide Integrated Lights-Out HPQLOMGC is a command line utility enabling you to migrate individual management processors. Used in conjunction with Insight Manager 7 or Systems Insight Manager, HPQLOMGC upgrades the firmware of the management processor, if necessary, configures the management...

Lights-Out Directories Migration Utilities 207 Management Processor Minimum Firmware Version RILOE II any version iLO 1.10 2. Install Microsoft® .NET Framework. 3. Download the management processor firmware supporting Directory Services from the HP website ( http://www.hp.com/servers/lights-out ). 4...

208 User Guide Integrated Lights-Out HPQLOMIG Operation The command line utility is intended to be used in conjunction with Insight Manager 7 and Systems Insight Manager. If you are not using Insight Manager 7 or Systems Insight Manager, consider using the HPQLOMIG utility. IMPORTANT: Installing dir...

Lights-Out Directories Migration Utilities 209 If you click Next, Back, or exit the application during discovery, operations on the current network address are completed but those on subsequent network addresses are cancelled. To start the process of discovering your management processors: 1. Select...

210 User Guide Integrated Lights-Out 4. Enter your Login Name>Password and click Find. IMPORTANT: The HPQLOMIG wizard assumes a common user name and password for management processors are employed. If unique user names and passwords are used, the command line version of the migration utility shou...

Lights-Out Directories Migration Utilities 211 3. Click Upgrade Firmware. The selected management processors will now be upgraded. Although this utility enables you to upgrade hundreds of management processors, only 25 management processors are upgraded simultaneously. Network activity is considerab...

212 User Guide Integrated Lights-Out Naming Management Processors This screen enables you to name Lights-Out Management device objects in the directory and create corresponding device objects for all management processors to be managed. You can create names using one or more of the following: • • • ...

Lights-Out Directories Migration Utilities 213 5. After the names are correct, click Next. Configuring Directories The Configure Directory screen enables you to create a device object for each discovered management processor and to associate the new device object to a previously defined role. For ex...

214 User Guide Integrated Lights-Out • • • • • Network Address—This is the network address of the directory server and can either be a valid DNS name or IP address. Port—The port is the SSL port to the directory. The default entry is 636. Management processors can only communicate with the directory...

Lights-Out Directories Migration Utilities 215 5. After the device objects have been associated with a role, click Next. Setting Up Management Processors for Directories The last step in the migration process is to configure the management processors to communicate with the directory. This screen en...

Lights-Out Directories Migration Utilities 217 NOTE: The feature associated with the Management Processor Password field is not available at this time. This field is provided for forward compatibility with future releases. HPQLOMGC Operation The command line utility is intended to be used in conjunc...

218 User Guide Integrated Lights-Out IMPORTANT: Installing directory support for any management processor requires downloading the HP Smart Component. Refer to the "Pre-Migration Checklist (on page 206 )" and the "HP Lights-Out Directory Package" sections for additional information. ...

220 User Guide Integrated Lights-Out 9. Select the query that had been created earlier, for example "Mgmt Processors." 10. Click Schedule to define when the Application Launch task will run. A schedule configuration window is displayed. 11. Click OK to set the schedule. NOTE: The default sch...

223 Insight Manager 7 Integration In This Section Integrating iLO with Insight Manager 7 ..................................................................................... 223 Functional Overview ........................................................................................................

224 User Guide Integrated Lights-Out All iLO devices can be grouped together logically and displayed on one page. This capability provides access to iLO from one point in Insight Manager 7. • • • • • • • • iLO hyperlinks Insight Manager 7 provides a hyperlink on the server device page to launch and ...

Insight Manager 7 Integration 225 Status In Insight Manager 7, iLO is identified as a management processor. Insight Manager 7 displays the management processor status within the device list. The iLO management processor is displayed as an icon in the device list on the same row as its host server. T...

226 User Guide Integrated Lights-Out • • • • • • • • • iLO and the host server from the Insight Manager 7 home page iLO from the Query Results page The server from the Query Results page The server from the Device Summary page of iLO iLO from the Device Summary page of the server The Home page and Q...

Insight Manager 7 Integration 227 Display Information Low Medium High None Server State Y Management Processor Status Y Y Y Management Processor Serial Number Y Y iLO Advanced License Status and Data Y Y Hardware Revision Information Y Firmware Revision Information Y Rack Topology Y Y Single Sign On...

228 User Guide Integrated Lights-Out 1. Select SNMP/Insight Manager Settings in the Administration tab of the iLO navigation frame to enable SNMP alerting and to provide an SNMP trap IP address to iLO. This IP address should be the address of the computer running Insight Manager 7. Refer to the "...

Insight Manager 7 Integration 229 To change the port number in Insight Manager 7, add the port to the \ADDITIONALWSDISC.PROPS file. Port 80 does not need an entry in this props file, but any other port designated for iLO must be specified so that Insight Manager 7 can use it during HTTP identificati...

Insight Manager 7 Integration 231 ProLiant BL p-Class Rack Visualization Insight Manager 7 can draw a visualization of the ProLiant BL p-Class rack, enclosures, and servers using information from iLO. The SNMP/Insight Manager setting for the level of data to be returned must be Medium or High for In...

233 Systems Insight Manager Integration In This Section Integrating iLO with Systems Insight Manager.......................................................................... 233 Systems Insight Manager Functional Overview ......................................................................... 234...

234 User Guide Integrated Lights-Out Systems Insight Manager adds support for a new device type, the management processor. All iLO devices installed in servers on the network are discovered in Systems Insight Manager as management processors. The management processors are associated with the servers...

Systems Insight Manager Integration 235 System Insight Manager Identification and Association Systems Insight Manager can identify an iLO processor and create an association between iLO and server. The administrator of the iLO device may configure iLO to respond to Systems Insight Manager identifica...

236 User Guide Integrated Lights-Out For a complete list of device statuses, refer to the HP Systems Insight Manager Installation and User Guide. System Insight Manager Links For ease of management, Systems Insight Manager creates links to the following locations: • • • iLO and the host server from ...

Systems Insight Manager Integration 237 Receiving SNMP Alerts in Systems Insight Manager iLO can be configured to forward alerts from the host operating system management agents, and it can also be configured to send iLO-generated alerts to Systems Insight Manager. Systems Insight Manager provides s...

238 User Guide Integrated Lights-Out d. You may need to edit the SNMP monitor community string (for example, by changing it to "public") so that iLO is displayed in the list of monitored devices. The SNMP read community string can be changed by accessing the Systems Protocol Settings page. C...

241 Group Administration and iLO Scripting In This Section Lights-Out Configuration Utility ................................................................................................ 241 Group Administration Using the Lights-Out Configuration Utility ..............................................

Group Administration and iLO Scripting 243 − Create a Task (on page 246 ) Using the Lights-Out Configuration Utility with Insight Manager 7 Insight Manager 7 can manage the group administration of iLO devices using query definitions ("Query Definition in Insight Manager 7" on page 243 ) and ...

244 User Guide Integrated Lights-Out 14. Click Overview on the left side of the screen after the verification has taken place. The initial page for devices opens. Application Launch Using Insight Manager 7 The Application Launch combines the RIBCL, the Lights-Out Configuration Utility, and the query...

Group Administration and iLO Scripting 245 10. Click Schedule to define when the Application Launch task will run. A schedule configuration window is displayed. 11. Click OK to set the schedule. NOTE: The default schedule for a control task is Now. 12. Click Finish to save the Application Launch tas...

246 User Guide Integrated Lights-Out 2. In the New Custom Command screen, enter the appropriate information in the Name, Description, and Comments fields. 3. In the Command field, be sure to enter the full path and the file name of the application. If the CPQLOCFG.EXE file is in the root directory o...

Group Administration and iLO Scripting 247 − If you click Schedule, the schedule task screen appears. Schedule the task. For more information on the scheduling options, see the HP Systems Insight Manager documentation. The Schedule option is available only if the tool can be scheduled. − If you clic...

249 Lights-Out DOS Utility In This Section Overview of the Lights-Out DOS Utility ................................................................................... 249 CPQLODOS Recommended Usage ........................................................................................... 250 CPQLODO...

250 User Guide Integrated Lights-Out CPQLODOS Recommended Usage HP recommends using CPQLODOS /WRITE_XML=filename.ext to capture the current iLO settings. The output from the /WRITE_XML command should be used as a template for further CPQLODOS scripting. For security reasons, the /WRITE_XML command d...

252 User Guide Integrated Lights-Out RIBCL XML Commands for CPQLODOS CPQLODOS uses the same RIBCL XML commands as CPQLOCFG for the <MOD_NETWORK_SETTINGS>, and the <MOD_DIR_CONFIG> XML scripting language blocks. Only those parameters unique to CPQLODOS are discussed. For more information ...

Lights-Out DOS Utility 253 ADD_USER This command is used to add a user to iLO. If multiple ADD_USER commands are in the XML script, CPQLODOS will use only the settings from the last command. Example: <ADD_USER USER_NAME = "James Madison" USER_LOGIN = "jmadison" PASSWORD = "pre...

254 User Guide Integrated Lights-Out • • • • Blank user login name not allowed. Maximum length is 39 characters. SET_LICENSE This command is used to apply the iLO Advanced Pack License key to the iLO. On a ProLiant BL p-class server, this parameter is not necessary because the advanced features are ...

255 Perl Scripting In This Section Using Perl with the XML Scripting Interface............................................................................. 255 XML Enhancements ................................................................................................................... 255 Ope...

Perl Scripting 257 Opening an SSL Connection Perl scripts must open an SSL connection to the device's HTTPS port, by default port 443. For example: use Socket; use Net::SSLeay qw(die_now die_if_ssl_error); Net::SSLeay::load_error_strings(); Net::SSLeay::SSLeay_add_ssl_algorithms(); Net::SSLeay::rand...

258 User Guide Integrated Lights-Out Net::SSLeay::connect($ssl) and die_if_ssl_error("ERROR: ssl connect"); print STDERR 'SSL Connected '; print 'Using Cipher: ' . Net::SSLeay::get_cipher($ssl) if $debug; print STDERR "\n\n"; # usage: sendscript(host, script) sub sendscript($$) { $ss...

261 HPONCFG Online Configuration Utility 261 In This Section HPONCFG .................................................................................................................................HPONCFG Supported Operating Systems .....................................................................

262 User Guide Integrated Lights-Out • • • Red Hat Linux 8.0 SLES 7 United-Linux 1.0 HPONCFG Requirements HPONCFG requires that the appropriate management interface driver be installed. The drivers are provided with SmartStart or can be downloaded from the HP website ( http://h18004.www1.hp.com/supp...

HPONCFG Online Configuration Utility 263 Windows Server Installation 1. To install HPONCFG, run the self-extracting executable delivered in the Softpaq from within a directory of your choice on the managed server. Choose the directory from which the HPONCFG utility is executed. This directory will a...

264 User Guide Integrated Lights-Out Using HPONCFG Start the HPONCFG configuration utility from the command line. When using Microsoft® Windows®, cmd.exe is available by selecting Start>Run>cmd. HPONCFG displays a usage page if HPONCFG is entered with no command line parameters. HPONCFG accept...

HPONCFG Online Configuration Utility 265 HPONCFG /f add_user.xml /l log.txt > output.txt HPONCFG Usage Model HPONCFG is best used to configure iLO after the host operating system has been deployed or redeployed to: • • Capture iLO configuration parameters. Create a known user account. Obtaining a...

266 User Guide Integrated Lights-Out <SUBNET_MASK VALUE = "255.255.252.0"/> <GATEWAY_IP_ADDRESS VALUE = "192.168.1.254"/> <DNS_NAME VALUE = "ILOD234KJ44D002"/> <PRIM_DNS_SERVER value = "192.168.1.254"/> <DHCP_ENABLE VALUE = "Y"/> ...

269 Remote Insight Command Language In This Section Overview of the Remote Insight Board Command Language.................................................... 270 RIBCL and ProLiant BL p-Class Servers................................................................................... 270 RIBCL Sample ...

270 User Guide Integrated Lights-Out GET_DIAGPORT_SETTINGS ................................................................................................. 313 MOD_DIAGPORT_SETTINGS ................................................................................................ 314 GET_TOPOLOGY ......

Remote Insight Command Language 271 RIBCL Sample Scripts Sample scripts for all iLO commands described in this section are available for download from the HP website ( http://www.hp.com/servers/lights-out ). RIBCL General Guidelines In this section, all of the commands are grouped by functionality. ...

272 User Guide Integrated Lights-Out • • Specific string Boolean string String A string is any text enclosed in quotes. It can include spaces, numbers, or any printable character. A string may start with either a double or single quote and it must end with the same type of quote. The string may cont...

Remote Insight Command Language 273 /> • • • RESPONSE This tag name indicates that iLO is sending a response to the previous commands back to the client application to indicate the success or failure of the commands that have been sent to iLO. STATUS This parameter contains an error number. The n...

274 User Guide Integrated Lights-Out Version must not be blank. LOGIN The LOGIN command provides the information that is used to authenticate the user whose permission level will be used when performing RIBCL actions. The specified user must have a valid account on the respective iLO to execute RIBC...

Remote Insight Command Language 275 • Logged-in user does not have required privilege for this command. USER_INFO The USER_INFO command can only appear within a LOGIN command block. When the command is parsed, it reads the local user information database into memory and prepares to edit it. Only com...

Remote Insight Command Language 279 • • • • • • • The possible DELETE_USER errors include: User table is full. No room for new user. Cannot add user. The user name already exists. User information is open for read-only access. Write access is required for this operation. User name cannot be blank. U...

280 User Guide Integrated Lights-Out • • • • • </LOGIN> • User information is open for read-only access. Write access is required for this operation. Cannot delete user information for currently logged in user. User login name was not found. User login name must not be blank. User does not hav...

Remote Insight Command Language 281 • • <MOD_USER USER_LOGIN="loginname"> User login name was not found. User does not have correct privilege for action. ADMIN_PRIV required. GET_USER Return Messages A possible GET_USER return message includes: <RESPONSE STATUS="0x0000" MSG=...

Remote Insight Command Language 283 RESET_SERVER_PRIV is a Boolean parameter that gives the user permission to remotely manipulate the server power setting. This parameter is optional, and the Boolean string must be set to "Yes" if the user should have this privilege. If this parameter is us...

Remote Insight Command Language 287 RIB_INFO Parameter MODE is a specific string parameter with a maximum length of 10 characters that specifies what you intend to do with the information. Valid arguments are "read" and "write." Write mode enables both reading and writing of iLO info...

296 User Guide Integrated Lights-Out F8_LOGIN_REQUIRED determines if login credentials are required to access the RBSU for iLO. The possible values are "Yes" or "No." REMOTE_CONSOLE_PORT_STATUS determines the behavior of remote console service. The possible values are: • • • • • • • ...

Remote Insight Command Language 301 • • • • RIB information is open for read-only access. Write access is required for this operation. User does not have correct privilege for action. CONFIG_ILO_PRIV required. CLEAR_EVENTLOG The CLEAR_EVENTLOG command clears the iLO Event Log. For this command to pa...

304 User Guide Integrated Lights-Out HOTKEY_CONFIG The HOTKEY_CONFIG command configures the remote console hot key settings in iLO. For this command to parse correctly, the command must appear within a RIB_INFO command block, and RIB_INFO MODE must be set to write. The user must have the configure i...

Remote Insight Command Language 305 CTRL_U specifies settings for the CTRL_U hot key. The settings must be separated by commas. For example, CTRL_U="CTRL,ALT,ESC." Up to five keystrokes can be configured for each hot key. CTRL_V specifies settings for the CTRL_V hot key. The settings must be...

306 User Guide Integrated Lights-Out On a ProLiant BL Class server, there is no need for a licensing key. Advanced features are automatically activated. Example: <RIBCL VERSION="2.0"> <LOGIN USER_LOGIN="adminname" PASSWORD="password"> <RIB_INFO MODE="write&...

Remote Insight Command Language 307 DIR_INFO The DIR_INFO command can only appear within a LOGIN command block. When the command is parsed, it reads the local directory information database into memory and prepares to edit it. Only commands that are DIR_INFO type commands are valid inside the DIR_IN...

Remote Insight Command Language 311 This command block is only valid on ProLiant BL Class servers. Example: <RACK_INFO MODE=”read”> ……… RACK_INFO commands ……… </RACK_INFO> RACK_INFO Parameters MODE is a specific string parameter with a maximum length of 10 characters that specifies what ...

316 User Guide Integrated Lights-Out Example: <RIBCL VERSION="2.0"> <LOGIN USER_LOGIN="adminname" PASSWORD="password"> <RACK_INFO MODE="read"> <GET_TOPOLOGY/> </RACK_INFO> </LOGIN> </RIBCL> GET_TOPOLOGY Parameters None GET_TOP...

Remote Insight Command Language 317 Example: <SERVER_INFO MODE="read"> ……… SERVER_INFO commands ……… </SERVER_INFO> SERVER_INFO Parameter MODE is a specific string parameter with a maximum length of 10 characters that specifies what you intend to do with the information. Valid arg...

320 User Guide Integrated Lights-Out RESET_SERVER Parameters None • • • </SERVER_INFO> RESET_SERVER Errors The possible RESET_SERVER error messages include: Server information is open for read-only access. Write access is required for this operation. Server is currently powered off. User does ...

Remote Insight Command Language 325 UID_CONTROL Parameters UID determines the state of the UID. A value of "Yes" turns the UID light on, and a value of "No" turns the UID light off. UID_CONTROL Errors The possible UID_CONTROL error messages include: • • UID is already ON. UID is alre...

331 331 iLO Parameters In This Section iLO Parameters Table .................................................................................................................iLO Status .......................................................................................................................

336 User Guide Integrated Lights-Out Parameters Default Value or Setting Your Value Directory User Context 2 Directory User Context 3 • • • • • iLO Status The iLO Status option provides comprehensive iLO status information, including: Current user Status and availability of the Remote Console Status...

iLO Parameters 337 • Product version (iLO Standard or iLO Advanced) of iLO Server Status Parameters The following parameters provide information about the host server. Server Name If the Insight Management agents are being used with the host server operating system, they will provide iLO with the se...

338 User Guide Integrated Lights-Out Server Power Status Displays whether the host is powered ON, or in STANDBY (OFF) mode. Server Video Mode Displays the state of the host server video controller as interpreted by Remote Console. Server Keyboard Displays the keyboard type as emulated by Remote Cons...

340 User Guide Integrated Lights-Out Idle Connection Timeout (Minutes) This option specifies the interval of user inactivity, in minutes, before the Web server and Remote Console session are automatically terminated. Enable Lights-Out Functionality • • If iLO functionality, including the iLO Diagnos...

iLO Parameters 341 • • • • Disabled means that the pass-through feature is off. Require Login for iLO RBSU This option specifies whether the user is required to provide a login name and password to access iLO RBSU. The default setting is No. Show iLO During POST This option specifies if iLO is displ...

342 User Guide Integrated Lights-Out Web Server Non-SSL Port The embedded Web server in iLO is configured by default to use port 80 for unencrypted communications. This port setting is configurable in the Global Settings option of the Administration tab. Web Server SSL Port The embedded Web server i...

iLO Parameters 343 Secure Shell (SSH) Status This setting enables you to specify if the SSH feature on iLO is enabled or disabled. The default is enabled. • • • Network Settings Parameters Serial Command Line Interface Status Enabled (authentication required) Enabled (no authentication) The default ...

344 User Guide Integrated Lights-Out Enable NIC Shared Network Port This parameter enables the NIC to reflect the state of iLO. The default setting for the NIC is Yes, which is enabled. If DHCP is disabled, you must assign a static IP address to iLO. Assign the IP address using the iLO IP Address pa...

iLO Parameters 345 • • Use DHCP Supplied DNS Servers • • • Ping Gateway on Startup Use DHCP Supplied Gateway Use DHCP Supplied WINS Servers Use DHCP Supplied Static Routes Use DHCP Supplied DNS Name If DHCP has been disabled, these settings may have to be assigned. Registering with WINS Server iLO a...

iLO Parameters 347 SNMP/Insight Manager Settings Parameters iLO supports SNMP settings on a device level. These parameters are not designated on a per-user basis but are specific to iLO. SNMP Alert Destinations Enter the IP address of the remote management PC that will receive SNMP trap alerts from ...

348 User Guide Integrated Lights-Out Insight Manager Web Agent URL The Insight Manager Web Agent URL option enables you to enter the IP address or the DNS name of the host server on which the Insight Manager Web Agents are running. Entering this data in the field provided enables iLO to create a lin...

350 User Guide Integrated Lights-Out Blade Serial Number The blade serial number identifies the serial number for the server blade product. Power Source The server blade enclosure can be installed in a rack by using one of two configurations: • • As the server blade receives alerts, these events can...

352 User Guide Integrated Lights-Out Directory User Context 1, Directory User Context 2, Directory User Context 3 This parameter enables you to specify up to three searchable contexts used to locate the user when the user is trying to authenticate using the directory. Directory User Contexts are lim...

353 In This Section 353 Directory Services Schema HP Management Core LDAP OID Classes and Attributes ........................................................Lights-Out Management Specific LDAP OID Classes and Attributes....................................... 358 HP Management Core LDAP OID Classes a...

354 User Guide Integrated Lights-Out Attribute Name Assigned OID hpqRoleIPRestrictions 1.3.6.1.4.1.232.1001.1.1.2.5 hpqRoleTimeRestriction 1.3.6.1.4.1.232.1001.1.1.2.6 Core Class Definitions The following defines the HP Management core classes. hpqTarget OID 1.3.6.1.4.1.232.1001.1.1.1.1 This class d...

Directory Services Schema 355 Remarks None hpqPolicy OID 1.3.6.1.4.1.232.1001.1.1.1.3 Description This class defines Policy objects, providing the basis for HP products using directory-enabled management. Class Type Structural SuperClasses top Attributes hpqPolicyDN—1.3.6.1.4.1.232.1001.1.1.2.1 Rema...

356 User Guide Integrated Lights-Out Remarks None hpqTargetMembership OID 1.3.6.1.4.1.232.1001.1.1.2.3 Description Provides a list of hpqTarget objects that belong to this object. Syntax Distinguished Name—1.3.6.1.4.1.1466.115.121.1.12 Options Multi Valued Remarks None hpqRoleIPRestrictionDefault OI...

Directory Services Schema 357 Remarks This attribute is only used on role objects. IP restrictions are satisfied when the address matches and general access is denied, and unsatisfied when the address matches and general access is allowed. Values are an identifier byte followed by a type-specific nu...

358 User Guide Integrated Lights-Out Remarks This attribute is only used on ROLE objects. Time restrictions are satisfied when the bit corresponding to the current local side real time of the device is 1 and unsatisfied when the bit is 0. • • • The least significant bit of the first byte corresponds...

Directory Services Schema 359 Class Name Assigned OID hpqLOMRightLocalUserAdmin 1.3.6.1.4.1.232.1001.1.8.2.5 hpqLOMRightConfigureSettings 1.3.6.1.4.1.232.1001.1.8.2.6 Lights-Out Management Class Definitions The following defines the Lights-Out Management core class. hpqLOMv100 OID 1.3.6.1.4.1.232.10...

360 User Guide Integrated Lights-Out hpqLOMRightLogin OID 1.3.6.1.4.1.232.1001.1.8.2.1 Description Login Right for HP Lights-Out Management products Syntax Boolean—1.3.6.1.4.1.1466.115.121.1.7 Options Single Valued Remarks Meaningful only on ROLE objects, if TRUE, members of the role are granted the...

Directory Services Schema 361 hpqLOMRightServerReset OID 1.3.6.1.4.1.232.1001.1.8.2.4 Description Remote Server Reset and Power Button Right for HP Lights-Out Management products Syntax Boolean—1.3.6.1.4.1.1466.115.121.1.7 Options Single valued Remarks This attribute is only used on ROLE objects. If...

363 Troubleshooting iLO In This Section Minimum Requirements ............................................................................................................. 363 iLO POST LED Indicators ........................................................................................................

364 User Guide Integrated Lights-Out To download the recommended JVM for your system configuration, refer to the HP website ( http://www.hp.com/servers/manage/jvml ). NOTE: You will be redirected from the main site to the java.sun.com site. HP recommends using the version specified in the Remote Con...

366 User Guide Integrated Lights-Out FEH Code Consistency Check Explanation 9902 TXAPICHK An RTOS function was called with an inappropriate value, or was called from an inappropriate caller. 9903 TXCONTEXT The saved context of one or more threads has been corrupted. 9905 TRAP A stack probe failed, r...

370 User Guide Integrated Lights-Out Event Log Display Event Log Explanation Virtual Serial Port session login failure from: User Displays when there is a login failure for a Virtual Serial Port session. • • • • • • • MS-DOS® Error Codes The CPQLODOS utility sends the MS-DOS® shell a 0 (zero) when n...

Troubleshooting iLO 371 Hardware iLO uses standard Ethernet cabling, which includes CAT5 UTP with RJ-45 connectors. Straight-through cabling is necessary for a hardware link to a standard Ethernet hub. Use a crossover cable for a direct PC connection. Software The iLO Management Port must be connect...

372 User Guide Integrated Lights-Out − Is the password complying with password restrictions? For example, are there case-sensitive characters in the password? − Is an unsupported browser being used? Login Name and Password Not Accepted If you have connected to iLO but it does not accept your login n...

Troubleshooting iLO 373 In addition, the iLO Management Port must be configured with the IP address of the WINS or DDNS server. You can use DHCP to configure the DHCP server with the necessary IP addresses. You can also enter the IP addresses through RBSU or by selecting Network Settings on the Admi...

374 User Guide Integrated Lights-Out Inability to Access iLO Using Telnet If you cannot access iLO using Telnet, you must verify the Remote Console Port Configuration and Remote Console Data Encryption on the Global Settings screen. If Remote Console Port Configuration is set to Automatic, the Remot...

Troubleshooting iLO 375 − Firmware upgrade • • • • • • • • − Remote Console session − SSL initialization If you are using a client workstation that contains more than one enabled NIC, such as a wireless card and a network card, a routing issue might prevent you from accessing the diagnostic port. To...

376 User Guide Integrated Lights-Out NOTE: If a network connection is established, you may have to wait up to 90 seconds for the DHCP server request. ProLiant BL p-Class servers have a diagnostic port available. Connecting a live network cable to the diagnostic port will cause iLO to automatically s...

Troubleshooting iLO 377 Proxy Server Issues If the Web browser software is configured to use a proxy server, it will not connect to the iLO IP address. To resolve this issue, configure the browser not to use the proxy server for the IP address of iLO. For example, in Internet Explorer, select Tools,...

378 User Guide Integrated Lights-Out iLO Security Override Switch The iLO Security Override Switch allows emergency access to the administrator with physical control over the server system board. Setting the iLO Security Override Switch allows login access, with all privileges, without a user ID and...

Troubleshooting iLO 379 Troubleshooting Mouse Problems The following sections discuss troubleshooting mouse hardware or software issues. Local USB Mouse and Linux If you are running Linux on your server and the local mouse is USB, your mouse will not work in Remote Console. To correct this issue, co...

380 User Guide Integrated Lights-Out Format is operating-system based. You might need to change the format of the examples for your operating system. For example, Red Hat 3.0 uses Mouse0 for the default label, but SUSE 8 uses Mouse[1]. Follow the naming conventions for your operating system. Use a u...

Troubleshooting iLO 381 1. Select Start>Settings>Control Panel>Display>Settings>Advanced>Troubleshooting> from the Windows® Server 2003 desktop applet. 2. Set the slider control to full hardware acceleration. For more information, refer to the "Optimizing Performance for Gra...

Troubleshooting iLO 383 Remote Console No Longer Opens on the Existing Browser Session With the addition of the Terminal Services Pass-Through function, the behavior of the Remote Console applet is slightly different from previous versions of iLO firmware. If a Remote Console session is already open...

384 User Guide Integrated Lights-Out One known example of this issue is during the Linux booting and posting process, in which some of the POST messages can be lost. A possible repercussion is that a keyboard response will be requested by the boot process and will be missed. To avoid this issue, the...

Troubleshooting iLO 385 SSH Text Support from a Remote Conosle Session The telnet and SSH access from text Remote Console supports the standard 80 x 25 configuration of the text screen. This mode is compatible for text Remote Console for the majority of available text mode interfaces in current oper...

386 User Guide Integrated Lights-Out Troubleshooting Video and Monitor Problems The following sections discuss items to be aware of when attempting to resolve video and monitor issues. General Guidelines • • • • • Some video applications, such as Microsoft® Media Player, will not display, or will di...

Troubleshooting iLO 387 Troubleshooting Virtual Media Problems The following sections discuss troubleshooting Virtual Media issues. Virtual Drive Listing When using Terminal Services pass-through on a server running Windows® 2000, a Virtual CD-ROM session does not appear on the server. This issue do...

388 User Guide Integrated Lights-Out Cookie Sharing Between Browser Instances and iLO iLO uses browser session cookies in part to distinguish separate logins—each browser window displays as a separate user login—while actually sharing the same active session with the iLO. These multiple logins can c...

390 User Guide Integrated Lights-Out Displaying the Current Session Cookie After logging in, you can force the browser to display the current session cookie by entering javascript:alert(document.cookie) in the URL navigation bar. The first field visible is the session ID. If the session ID is the sa...

Troubleshooting iLO 391 Incorrect Time or Date of the Entries in the Event Log You can update the time and date on iLO by running the RBSU. This utility automatically sets the time and date on the processor using the server time and date. The time and date are also updated by Insight Management agen...

392 User Guide Integrated Lights-Out 1. Attempt to connect to iLO through the Web browser. If you are unable to connect, then there is a communication problem. 3. 395 2. Attempt to ping iLO. If you are successful, then the network is working. Attempt to open an FTP session to the IP address or DNS n...

Troubleshooting iLO 393 NOTE: This process will take a few seconds while the recovery payload decrypts the stored hash and computes a hash for the image to compare against. If the image is valid, the FTP server begins programming the image into the flash part and providing status updates. When compl...

394 User Guide Integrated Lights-Out 8. Press the Enter key to reprogram another device, or press the Esc key to return to the A:\ prompt. It might be necessary to set the Security Override Switch to perform the ROMPaq upgrade. The ROMPaq program informs you if the Security Override Switch must be s...

Troubleshooting iLO 395 2. If SSL is operating correctly on the domain controller (a certificate is issued), you are prompted with a security message asking if you want to proceed with accessing the site, or view the server’s certificate. Clicking Yes does not display a web page. This is normal. Thi...

396 User Guide Integrated Lights-Out You can also manually force the iLO management processor to reset by clicking Apply on the Network Settings page. You do not need to change any parameters before clicking Apply. Server Name Still Present after ERASE Utility is Executed The Server Name field is co...

397 Technical Support In This Section HP Contact Information.............................................................................................................. 397 Before You Contact HP ..........................................................................................................

399 Acronyms and Abbreviations ACPI Advanced Configuration and Power Interface ARP Address Resolution Protocol ASCII American Standard Code for Information Interchange ASM Advanced Server Management ASR Automatic Server Recovery CA certificate authority CGI Common Gateway Interface CLI Command Line ...

407 Index A accessing software, browser 20, 25, 31 activation 30, 354 Active Directory 155 ADD_USER 280 D additional information 403 administration 88, 89, 102, 237, 245, 246, 247, 248, 251, 344 alert and trap problems 383 alerts 231 application launch 209 ASR (Automatic Server Recovery) 405 authori...