HP iLO 4 User Guide

AbstractThis guide provides information about configuring, updating, and operating HP ProLiant Gen8 servers by using the HP iLO 4firmware. This document is intended for system administrators, HP representatives, and HP Authorized Channel Partners whoare involved in configuring and using HP iLO 4 and HP ProLiant Gen8 servers.

This guide discusses HP iLO for HP ProLiant servers and HP ProLiant BladeSystem server blades. For information about iLO forIntegrity servers and server blades, see the HP website at http://www.hp.com/go/integrityiLO.

HP Part Number: 684918-006Published: February 2014Edition: 1

Copyright 2012, 2014 Hewlett-Packard Development Company, L.P

Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial

Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under

vendor's standard commercial license.

The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express

warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall

not be liable for technical or editorial errors or omissions contained herein.

Acknowledgements

Microsoft, Windows, Windows NT , and Windows Vista are U.S. registered trademarks of Microsoft Corporation.

Intel is a trademark of Intel Corporation in the U.S. and other countries.

Java is a registered trademark of Oracle and/or its affiliates.

Contents1 Introduction to iLO....................................................................................14

Overview..............................................................................................................................14HP iLO features......................................................................................................................14iLO web interface...................................................................................................................15ROM-based configuration utilities..............................................................................................15iLO Mobile application............................................................................................................16iLO scripting and command line...............................................................................................16

2 Setting up iLO..........................................................................................17Preparing to set up iLO............................................................................................................17Connecting iLO to the network.................................................................................................19Setting up iLO by using iLO RBSU or the iLO 4 Configuration Utility...............................................20

Configuring a static IP address by using iLO RBSU..................................................................20Configuring a static IP address by using the iLO 4 Configuration Utility.....................................22Managing iLO users by using iLO RBSU................................................................................25

Adding iLO user accounts by using iLO RBSU...................................................................25Editing user accounts.....................................................................................................26Removing user accounts.................................................................................................27

Managing iLO users by using the iLO 4 Configuration Utility...................................................28Adding iLO user accounts by using the iLO 4 Configuration Utility.......................................28Editing or removing user accounts...................................................................................30

Setting up iLO by using the iLO web interface............................................................................32Logging in to iLO for the first time.............................................................................................32Activating iLO licensed features................................................................................................32Installing the iLO drivers...........................................................................................................33

Microsoft device driver support............................................................................................34Linux device driver support..................................................................................................34VMware device driver support.............................................................................................35

3 Configuring iLO.......................................................................................36Updating firmware..................................................................................................................36

Updating firmware by using an online method.......................................................................36Performing an in-band firmware update............................................................................36Performing an out-of-band firmware update.......................................................................37

Updating firmware by using an offline method.......................................................................37Obtaining the iLO firmware image file..................................................................................37Obtaining supported server firmware image files...................................................................38Updating firmware by using a browser.................................................................................38

Using language packs............................................................................................................40Installing a language pack..................................................................................................40Selecting a language pack.................................................................................................41Configuring the default language settings..............................................................................42Configuring the current language settings..............................................................................42Uninstalling a language pack..............................................................................................42

iLO licensing..........................................................................................................................43Free iLO 60-day evaluation license.......................................................................................43Installing an iLO license by using a browser..........................................................................44

Administering users.................................................................................................................44Viewing local users............................................................................................................45Viewing directory groups....................................................................................................46Adding or editing local users..............................................................................................46

IPMI/DCMI users..........................................................................................................48

Contents 3

Administering directory groups............................................................................................48Deleting a user or a directory group.....................................................................................50

Configuring iLO Federation Management..................................................................................50iLO Federation Management network requirements.................................................................51Configuring the multicast options.........................................................................................51Viewing iLO Federation Management group memberships.......................................................53Managing iLO Federation Management group membership....................................................53Removing an iLO system from an iLO Federation Management group........................................54Configuring enclosure support for iLO Federation Management................................................54

Configuring iLO access settings................................................................................................55Configuring service settings.................................................................................................55Configuring IPMI/DCMI settings..........................................................................................57Configuring access options.................................................................................................57Logging in to iLO by using an SSH client...............................................................................60

Configuring iLO security..........................................................................................................60General security guidelines.................................................................................................61

Passwords....................................................................................................................61iLO RBSU and iLO 4 Configuration Utility security..............................................................61iLO Security Override Switch administration......................................................................62

TPM support......................................................................................................................63User accounts and access...................................................................................................63

User privileges..............................................................................................................64Login security................................................................................................................64

Administering SSH keys......................................................................................................64About SSH keys............................................................................................................64Authorizing a new key by using the iLO web interface.......................................................65Authorizing a new key by using the CLI............................................................................66Deleting keys................................................................................................................67Authorizing keys from an HP SIM server...........................................................................67

Administering SSL certificates..............................................................................................67Viewing certificate information........................................................................................68Obtaining and importing a certificate..............................................................................68

Configuring directory settings..............................................................................................70Configuring authentication and directory server settings.....................................................71Running directory tests...................................................................................................73

Viewing directory test results......................................................................................75Using the directory test controls .................................................................................77

Using encryption................................................................................................................77Viewing encryption enforcement settings...........................................................................78Modifying the AES/DES encryption setting.......................................................................79

Connecting to iLO by using AES or 3DES encryption.....................................................79Enabling FIPS Mode......................................................................................................79Disabling FIPS Mode.....................................................................................................80

Configuring iLO for HP SSO................................................................................................80Configuring iLO for HP SSO...........................................................................................81Adding trusted certificates..............................................................................................82

Extracting the HP SIM server certificate........................................................................83Viewing trusted certificates.............................................................................................83Removing trusted certificates...........................................................................................84

Configuring Remote Console security settings.........................................................................84Configuring Remote Console Computer Lock settings..........................................................84Configuring the Integrated Remote Console Trust setting (.NET IRC)......................................86

Configuring the Login Security Banner..................................................................................86Configuring iLO network settings..............................................................................................88

Viewing network settings.....................................................................................................88

4 Contents

Configuring general network settings....................................................................................91Configuring IPv4 settings....................................................................................................94Configuring IPv6 settings....................................................................................................96Configuring SNTP settings...................................................................................................99

Configuring and using the iLO Shared Network Port..................................................................100Enabling the iLO Shared Network Port feature.....................................................................101

Enabling the iLO Shared Network Port feature through iLO RBSU.......................................101Enabling the iLO Shared Network Port feature through the iLO 4 Configuration Utility..........102Enabling the iLO Shared Network Port feature through the iLO web interface......................103

Re-enabling the iLO Dedicated Network Port.......................................................................104Enabling the iLO Dedicated Network Port through iLO RBSU.............................................104Enabling the iLO Dedicated Network Port through the iLO 4 Configuration Utility.................104Enabling the iLO Dedicated Network Port through the web interface..................................106

Configuring iLO Management settings.....................................................................................106Installing AMS or the Insight Management Agents................................................................107

Verifying the AMS installation.......................................................................................108Verifying AMS installation: Windows........................................................................108Verifying AMS installation: SUSE and Red Hat...........................................................109Verifying AMS installation: VMware..........................................................................109Verifying AMS installation: Ubuntu............................................................................109

Configuring SNMP settings...............................................................................................109Configuring SNMPv3 Users...............................................................................................111Configuring the SNMPv3 Engine ID...................................................................................112Configuring SNMP alerts..................................................................................................112

Using the AMS Control Panel to configure SNMP and SNMP alerts (Windows only)............113SNMP traps................................................................................................................114

Configuring Insight Management integration.......................................................................116Configuring AlertMail settings...........................................................................................117

Enabling AlertMail......................................................................................................117Disabling AlertMail.....................................................................................................118

Configuring Remote Syslog settings....................................................................................118Enabling iLO Remote Syslog.........................................................................................118Disabling iLO Remote Syslog........................................................................................119

Configuring Remote Support..................................................................................................119Insight Remote Support Overview.......................................................................................119Data collected by Insight Remote Support............................................................................120Prerequisites....................................................................................................................122Registering for Insight Remote Support by using the iLO web interface.....................................122

Registering for Insight Remote Support by using Direct Connect.........................................122Editing the web proxy settings..................................................................................125

Registering for Insight Remote Support by using Central Connect.......................................125Unregistering from Insight Remote Support by using the iLO web interface...............................127

Unregistering from Insight Remote Support Direct Connect configurations............................127Unregistering from Insight Remote Support Central Connect configurations..........................127

Working with Insight Remote Support service events.............................................................127Using maintenance mode.............................................................................................128Sending a test service event..........................................................................................128Viewing the Service Event Log.......................................................................................129Clearing the Service Event Log......................................................................................129

Viewing and sending Remote Support data collection information..........................................130Sending data collection information...............................................................................130Sending Active Health System reporting information.........................................................131

Configuring iLO by using the ROM-based utilities......................................................................132Using the iLO RBSU..........................................................................................................132

Accessing the iLO RBSU...............................................................................................132

Contents 5

Configuring NIC and TCP/IP settings.............................................................................132Configuring DNS/DHCP settings...................................................................................133Configuring global settings by using iLO RBSU................................................................134Configuring serial CLI options by using iLO RBSU............................................................135

Using the UEFI System Utilities iLO 4 Configuration Utility......................................................136Accessing the iLO 4 Configuration Utility menu...............................................................136Configuring Network Options.......................................................................................137Configuring Advanced Network Options........................................................................139Configuring access settings by using the iLO 4 Configuration Utility...................................140Viewing information about iLO by using the iLO 4 Configuration Utility..............................142

4 Using iLO..............................................................................................144Using the iLO web interface...................................................................................................144

Browser support...............................................................................................................144Logging in to iLO.............................................................................................................144Handling an unknown authority.........................................................................................146Using the iLO controls.......................................................................................................146Starting a remote management tool....................................................................................146Language pack support....................................................................................................146

Viewing iLO overview information...........................................................................................146Viewing system information...............................................................................................147Viewing status information.................................................................................................148Viewing the active iLO sessions..........................................................................................149

Viewing iLO system information..............................................................................................149Viewing health summary information..................................................................................149Viewing fan information....................................................................................................150Viewing temperature information .......................................................................................152

Viewing the temperature graph.....................................................................................153Viewing temperature sensor data...................................................................................153

Viewing power information...............................................................................................155Viewing processor information...........................................................................................159Viewing memory information.............................................................................................160

Advanced Memory Protection.......................................................................................160Memory Summary.......................................................................................................162Memory Details..........................................................................................................162

Viewing network information.............................................................................................164Viewing storage information..............................................................................................165

Controllers.................................................................................................................167Drive Enclosures..........................................................................................................168Logical Drives.............................................................................................................168Physical Drives............................................................................................................168

Viewing firmware information............................................................................................169Using the iLO Event Log.........................................................................................................170

Viewing the iLO Event Log.................................................................................................170Saving the iLO Event Log...................................................................................................171Clearing the iLO Event Log................................................................................................172

Using the Integrated Management Log....................................................................................172Viewing the IML...............................................................................................................173Marking a log entry as repaired........................................................................................174Adding a maintenance note to the IML...............................................................................175Saving the IML................................................................................................................175Clearing the IML..............................................................................................................175

Using the HP Active Health System..........................................................................................176Downloading the Active Health System log for a date range..................................................176Downloading the entire Active Health System log.................................................................178

6 Contents

Extracting the Active Health System log by using curl............................................................178Clearing the Active Health System log................................................................................179

Using iLO diagnostics............................................................................................................179Resetting iLO through the web interface..............................................................................181

Using Location Discovery Services...........................................................................................181Using the HP Insight Management Agents................................................................................183Using iLO Federation Management.........................................................................................183

Viewing the iLO Federation Management Multi-System Map..................................................184Viewing server health and model information......................................................................185Viewing critical and degraded systems...............................................................................186Using the iLO Federation Management group power feature..................................................187

Changing the power state for multiple servers.................................................................187Viewing servers affected by the Virtual Power Button........................................................188

Configuring iLO Federation Management group power settings..............................................189Configuring Automatic Group Power Capping settings.....................................................190

Using the iLO Federation Management firmware update feature.............................................191Updating firmware for multiple servers...........................................................................191Viewing affected systems..............................................................................................193

Using the iLO Federation Management Virtual Media feature................................................193Connecting scripted media for groups............................................................................193Viewing and ejecting scripted media for groups..............................................................194Viewing affected systems..............................................................................................195

Using the Integrated Remote Console......................................................................................195.NET IRC requirements......................................................................................................195

Microsoft .NET Framework............................................................................................196Microsoft ClickOnce....................................................................................................196

Java IRC requirements......................................................................................................196Recommended client settings........................................................................................197Recommended server settings.......................................................................................197

Starting the Remote Console..............................................................................................197Acquiring the Remote Console...........................................................................................199Using the Remote Console power switch.............................................................................200Using iLO Virtual Media from the Remote Console................................................................200Using Shared Remote Console (.NET IRC only)....................................................................200Using Console Capture (.NET IRC only)..............................................................................201

Viewing Server Startup and Server Prefailure sequences...................................................202Saving Server Startup and Server Prefailure video files.....................................................202Capturing video files...................................................................................................203Viewing saved video files.............................................................................................203

Creating Remote Console hot keys.....................................................................................203Creating a hot key......................................................................................................204Resetting hot keys........................................................................................................205

Using the text-based Remote Console......................................................................................205Using the iLO Virtual Serial Port.........................................................................................205

Configuring the iLO Virtual Serial Port in the host system RBSU..........................................206Configuring the iLO Virtual Serial Port in the UEFI System Utilities.......................................209Configuring the iLO Virtual Serial Port for Linux...............................................................213Configuring the iLO Virtual Serial Port for the Windows EMS Console................................213Starting an iLO Virtual Serial Port session........................................................................214Viewing the iLO Virtual Serial Port log............................................................................214

Using the Text-based Remote Console (Textcons)..................................................................215Customizing the Text-based Remote Console...................................................................215Using the Text-based Remote Console............................................................................216Using Linux with the Text-based Remote Console..............................................................216

Using iLO Virtual Media........................................................................................................216

Contents 7

Virtual Media operating system information.........................................................................218Operating system USB requirement................................................................................218Using Virtual Media with Windows 7............................................................................218Operating system considerations: Virtual Floppy/USB key................................................218

Changing diskettes.................................................................................................219Operating system considerations: Virtual CD/DVD-ROM..................................................219

Mounting a USB Virtual Media CD/DVD-ROM on Linux systems...................................219Operating system considerations: Virtual Folder .............................................................220

Using iLO Virtual Media from the iLO web interface.............................................................220Viewing and modifying the Virtual Media port................................................................220Viewing and ejecting local media.................................................................................221Connecting scripted media...........................................................................................221Viewing and ejecting scripted media.............................................................................221

Using iLO Virtual Media from the Remote Console................................................................222Using a Virtual Drive...................................................................................................222

Using a physical drive on a client PC........................................................................222Using an image file................................................................................................222Using an image file through a URL (IIS/Apache).........................................................222

Using the Create Media Image feature (Java IRC only).....................................................222Creating an iLO disk image file................................................................................223Copying data from an image file to a physical disk....................................................223

Using a Virtual Folder (.NET IRC only)............................................................................224Setting up IIS for scripted Virtual Media..............................................................................224

Configuring IIS............................................................................................................224Configuring IIS for read/write access.............................................................................225Inserting Virtual Media with a helper application............................................................226Sample Virtual Media helper application.......................................................................226

Configuring Virtual Media Boot Order................................................................................227Changing the server boot mode....................................................................................227Changing the server boot order....................................................................................228Changing the one-time boot status................................................................................228Using the additional options.........................................................................................229

About server power..............................................................................................................229Powering on the server.....................................................................................................229Brownout recovery...........................................................................................................230Graceful shutdown...........................................................................................................230Power efficiency...............................................................................................................230

Using iLO Power Management...............................................................................................231Managing the server power..............................................................................................231Configuring the System Power Restore Settings.....................................................................232Viewing server power usage..............................................................................................233Viewing the current power state.........................................................................................234Viewing the server power history........................................................................................235Configuring power settings................................................................................................235

Configuring Power Regulator settings.............................................................................236Configuring power capping settings..............................................................................237Configuring SNMP alert settings...................................................................................238Configuring the persistent mouse and keyboard..............................................................238

Using iLO with Onboard Administrator....................................................................................238Using the Active Onboard Administrator.............................................................................238Starting the Onboard Administrator GUI.............................................................................239Toggling the enclosure UID light.........................................................................................239Enclosure bay IP addressing..............................................................................................240Dynamic Power Capping for server blades..........................................................................240iLO virtual fan.................................................................................................................240

8 Contents

iLO option.......................................................................................................................240IPMI server management.......................................................................................................241Using iLO with HP Insight Control server deployment ................................................................242Using HP Enterprise Secure Key Manager with iLO....................................................................242

Configuring key manager servers.......................................................................................243Adding key manager configuration details..........................................................................243Testing the ESKM configuration..........................................................................................244Viewing Enterprise Secure Key Manager events...................................................................245

Viewing remote management tool information..........................................................................245Starting a remote management tool....................................................................................245Deleting a remote manager configuration...........................................................................246Using iLO with HP OneView..............................................................................................246

5 Integrating HP Systems Insight Manager....................................................247HP SIM features....................................................................................................................247Establishing SSO with HP SIM................................................................................................247iLO identification and association...........................................................................................247

Viewing iLO status in HP SIM.............................................................................................247iLO links in HP SIM..........................................................................................................248Viewing iLO in HP SIM System(s) lists..................................................................................248

Receiving SNMP alerts in HP SIM...........................................................................................248HP SIM port matching...........................................................................................................248Reviewing iLO license information in HP SIM............................................................................249

6 Directory services...................................................................................250Directory integration benefits..................................................................................................250Choosing a directory configuration to use with iLO....................................................................250Kerberos support..................................................................................................................251

Domain controller preparation...........................................................................................251Realm names..............................................................................................................251Computer accounts......................................................................................................251User accounts.............................................................................................................252Generating a keytab...................................................................................................252

Key version number................................................................................................252Windows Vista.......................................................................................................253

Universal and global user groups (for authorization)........................................................253Configuring iLO for Kerberos login.....................................................................................253

Using the iLO web interface..........................................................................................253Using XML configuration and control scripts....................................................................254Using the CLI, CLP, or SSH interface..............................................................................254

Time requirement.............................................................................................................254Configuring single sign-on................................................................................................254

Internet Explorer..........................................................................................................255Firefox.......................................................................................................................255Chrome.....................................................................................................................256

Verifying single sign-on (HP Zero Sign In) configuration.........................................................256Login by name................................................................................................................256

Schema-free directory integration............................................................................................256Setting up schema-free directory integration.........................................................................257

Active Directory prerequisites........................................................................................257Introduction to Certificate Services............................................................................257Installing Certificate Services....................................................................................257Verifying Certificate Services....................................................................................257Configuring Automatic Certificate Request.................................................................257

Schema-free setup using the iLO web interface................................................................258Schema-free setup using scripts.....................................................................................258

Contents 9

Schema-free setup with HP Directories Support for ProLiant Management Processors.............258Schema-free setup options............................................................................................259

Minimum login flexibility.........................................................................................259Better login flexibility..............................................................................................259Maximum login flexibility.........................................................................................259

Schema-free nested groups...........................................................................................259Setting up HP extended schema directory integration................................................................260

Features supported by HP schema directory integration.........................................................260Setting up directory services..............................................................................................260Schema documentation.....................................................................................................261Directory services support.................................................................................................261Schema required software.................................................................................................261

Schema Extender........................................................................................................262Schema Preview window.........................................................................................262Setup window........................................................................................................263Results window......................................................................................................263

Management snap-in installer.......................................................................................264Directory services for Active Directory.................................................................................264

Active Directory installation prerequisites........................................................................264Installing Active Directory.............................................................................................265

For the schema-free configuration.............................................................................265For HP extended schema.........................................................................................265

Snap-in installation and initialization for Active Directory..................................................266Creating and configuring directory objects for use with iLO in Active Directory....................266Directory services objects.............................................................................................267

Active Directory snap-ins.........................................................................................268Role Restrictions tab................................................................................................269

Lights Out Management tab.........................................................................................271Directory services for eDirectory.........................................................................................272

eDirectory installation prerequisites................................................................................272Snap-in installation and initialization for eDirectory..........................................................272Example: Creating and configuring directory objects for use with iLO devices in eDirectory...272Directory services objects for eDirectory.........................................................................276

Role Managed Devices...........................................................................................276Members tab.........................................................................................................276

Role Restrictions tab.....................................................................................................277Time restrictions......................................................................................................278Enforced client IP address or DNS name access.........................................................278

eDirectory Lights-Out Management................................................................................279User login using directory services..........................................................................................280Directory-enabled remote management....................................................................................280

Creating roles to follow organizational structure...................................................................281Using existing groups..................................................................................................281Using multiple roles.....................................................................................................281

How directory login restrictions are enforced.......................................................................282Restricting roles...........................................................................................................283

Role time restrictions...............................................................................................283Role address restrictions..........................................................................................283

User restrictions...........................................................................................................283User address restrictions..........................................................................................283User time restrictions...............................................................................................284

Creating multiple restrictions and roles...........................................................................285Using bulk import tools.....................................................................................................286

HP Directories Support for ProLiant Management Processors utility...............................................286Compatibility..................................................................................................................286

10 Contents

HP Directories Support for ProLiant Management Processors package.....................................287Using HP Directories Support for ProLiant Management Processors.........................................287

Finding management processors...................................................................................287Upgrading firmware on management processors.............................................................289Selecting a directory access method..............................................................................291Naming management processors..................................................................................291Configuring directories when HP extended schema is selected...........................................292Configuring directories when schema-free integration is selected........................................296Setting up management processors for directories............................................................296

7 Troubleshooting......................................................................................298Kernel debugging.................................................................................................................298Event log entries...................................................................................................................299Hardware and software link-related issues................................................................................301Login issues.........................................................................................................................302

Login name and password not accepted.............................................................................302Directory user premature logout.........................................................................................302iLO management port not accessible by name.....................................................................303iLO RBSU unavailable after iLO and server reset...................................................................303Unable to access the login page........................................................................................303Secure Connection Failed error when using Firefox browser...................................................303Unable to return to login page after an iLO flash or reset......................................................304Unable to access Virtual Media or graphical Remote Console................................................304Unable to connect to iLO after changing network settings......................................................304Unable to connect to iLO processor through NIC..................................................................304Unable to log in to iLO after installing iLO certificate............................................................305Unable to connect to iLO IP address...................................................................................305Blocked iLO ports.............................................................................................................305

Troubleshooting alert and trap issues.......................................................................................305Unable to receive HP SIM alarms (SNMP traps) from iLO.......................................................306

Using the iLO Security Override Switch for emergency access.....................................................306Troubleshooting license installation..........................................................................................306Troubleshooting directory issues .............................................................................................306

User contexts do not appear to work..................................................................................307Directory user does not log out after directory timeout has expired.........................................307Problems generating keytab by using ktpass.exe..................................................................307

Troubleshooting Remote Console issues...................................................................................307Java IRC applet displays red X when Firefox is used to run Java IRC on Linux client ..................307Unable to navigate single cursor of Remote Console to corners of Remote Console window.......307Remote Console text window not updated correctly..............................................................307Mouse or keyboard not working in .NET IRC or Java IRC......................................................308.NET IRC sends characters continuously after switching windows ...........................................308Java IRC does not display correct floppy and USB-key device.................................................308Caps Lock out of sync between iLO and Java IRC.................................................................309Num Lock out of sync between iLO and Shared Remote Console............................................310Keystrokes repeat unintentionally during Remote Console session............................................310Session leader does not receive connection request when .NET IRC is in replay mode...............310Keyboard LED does not work correctly................................................................................310Inactive .NET IRC.............................................................................................................310.NET IRC failed to connect to server...................................................................................311File not present after copy from .NET IRC virtual drives to USB key..........................................311.NET IRC takes a long time to verify application requirements................................................311.NET IRC fails to start.......................................................................................................312.NET IRC cannot be shared...............................................................................................312.NET IRC launch is blocked by Google Chrome...................................................................313

Contents 11

iLO Virtual Floppy media applet unresponsive......................................................................313Troubleshooting SSH issues....................................................................................................313

Initial PuTTY input slow.....................................................................................................313PuTTY client unresponsive..................................................................................................314SSH text support from text-based Remote Console session......................................................314

Troubleshooting text-based Remote Console issues....................................................................314Unable to view Linux installer in text-based Remote Console...................................................314Unable to pass data through SSH terminal..........................................................................314VSP-driven selection during the serial timeout window sends output to BIOS redirect instead ofVSP................................................................................................................................314Scrolling and text appear irregular during BIOS redirection...................................................314

Troubleshooting Remote Support issues....................................................................................315SSL Bio Error during Insight RS registration..........................................................................315HP ProLiant Gen8 server identified in Insight Online as _ and inInsight RS as ............................................................................................315HP ProLiant Gen8 server OS name and version not listed in Insight RS or Insight Online............315Connection error during iLO Direct Connect registration........................................................316iLO session ends unexpectedly during iLO Direct Connect registration.....................................316

Troubleshooting iLO Federation Management issues..................................................................316Query errors occur on iLO Federation Management pages....................................................316A timeout error is displayed on the Multi-System Map page...................................................317A 502 error is displayed on the Multi-System Map page.......................................................317A 403 error is displayed on the Multi-System Map page.......................................................318iLO peers are not displayed..............................................................................................318iLO peers are displayed with IPv6 addresses on IPv4 networks...............................................318

Troubleshooting miscellaneous issues.......................................................................................318Cookie sharing between browser instances and iLO.............................................................318

Shared instances.........................................................................................................319Cookie order..............................................................................................................319Displaying the current session cookie.............................................................................319Preventing cookie-related issues....................................................................................320

Unable to get SNMP information from HP SIM.....................................................................320Unable to upgrade iLO firmware........................................................................................320iLO Firmware update does not finish...................................................................................320iLO network Failed Flash Recovery.....................................................................................321Testing SSL......................................................................................................................321Resetting iLO...................................................................................................................322

Resetting iLO by using the iLO 4 Configuration Utility.......................................................323Resetting iLO to the factory default settings by using iLO RBSU...............................................324Resetting iLO to the factory default settings by using the iLO 4 Configuration Utility...................325Server name still present after System Erase Utility is executed................................................326Certificate error when navigating to iLO web interface..........................................................327

Resolving a browser certificate error: Internet Explorer......................................................327Resolving a browser certificate error: Firefox...................................................................329Resolving a browser certificate error: Chrome..................................................................330

8 Support and other resources....................................................................331Information to collect before you contact HP.............................................................................331How to contact HP................................................................................................................331Registering for Software Technical Support and Update Service..................................................331

How to use Software Technical Support and Update Service..................................................331HP Support Center................................................................................................................331HP authorized resellers..........................................................................................................332Related information...............................................................................................................332

12 Contents

9 Documentation feedback.........................................................................334A iLO license options.................................................................................335B FlexibleLOM support...............................................................................337C Directory services schema.......................................................................339

HP Management Core LDAP OID classes and attributes.............................................................339Core classes....................................................................................................................339Core attributes.................................................................................................................339Core class definitions.......................................................................................................339

hpqTarget..................................................................................................................339hpqRole.....................................................................................................................340hpqPolicy...................................................................................................................340

Core attribute definitions...................................................................................................340hpqPolicyDN..............................................................................................................340hpqRoleMembership....................................................................................................340hpqTargetMembership.................................................................................................341hpqRoleIPRestrictionDefault...........................................................................................341hpqRoleIPRestrictions...................................................................................................341hpqRoleTimeRestriction.................................................................................................342

Lights-Out Management specific LDAP OID classes and attributes................................................342Lights-Out Management classes.........................................................................................342Lights-Out Management attributes......................................................................................342Lights-Out Management class definitions.............................................................................342

hpqLOMv100.............................................................................................................342Lights-Out Management attribute definitions........................................................................343

hpqLOMRightLogin......................................................................................................343hpqLOMRightRemoteConsole........................................................................................343hpqLOMRightVirtualMedia...........................................................................................343hpqLOMRightServerReset..............................................................................................343hpqLOMRightLocalUserAdmin.......................................................................................344hpqLOMRightConfigureSettings.....................................................................................344

Glossary..................................................................................................345Index.......................................................................................................349

Contents 13

1 Introduction to iLOOverview

The HP iLO Management Engine is a set of embedded management features that support thecomplete life cycle of the server, from initial deployment, to ongoing management, to servicealerting and remote support. HP iLO is one feature of the HP iLO Management Engine.The HP iLO subsystem is a standard component of HP ProLiant servers that simplifies initial serversetup, server health monitoring, power and thermal optimization, and remote server administration.The HP iLO subsystem includes an intelligent microprocessor, secure memory, and a dedicatednetwork interface. This design makes HP iLO independent of the host server and its operatingsystem.HP iLO enables and manages the Active Health System and also features Agentless Management.HP iLO monitors all key internal subsystems. When enabled, SNMP alerts are sent directly by HPiLO, regardless of the host operating system or whether a host operating system is installed.Embedded remote support software is available on HP ProLiant Gen8 servers with iLO 4, regardlessof the operating system software and without installing OS agents on the server.

HP iLO featuresUsing HP iLO, you can do the following:

Monitor server health. iLO monitors temperatures in the server and sends corrective signals tothe fans to maintain proper server cooling. iLO also monitors firmware versions and the statusof fans, memory, the network, processors, power supplies, and internal storage.

Download the Active Health System log. You can send the log file to HP when you have anopen support case.

Manage multiple servers at one time by using the iLO Federation management features.

Access a high-performance and secure Integrated Remote Console to the server from anywherein the world if you have a network connection to the server.There are two versions of the Integrated Remote Console:

.NET IRC

Java IRCGeneral references to the Remote Console apply to both the .NET IRC and Java IRC, unlessotherwise specified.

Use the shared .NET IRC to collaborate with up to four server administrators.

Remotely mount high-performance Virtual Media devices to the server.

Use Virtual Power and Virtual Media from the GUI, the CLI, or the iLO scripting toolkit formany tasks, including the automation of deployment and provisioning.

Securely and remotely control the power state of the managed server.

Monitor the power consumption and server power settings.

Implement true Agentless Management with SNMP alerts from HP iLO, regardless of the stateof the host server.

Register a ProLiant Gen8 server for HP Insight Remote Support.

Use local or directory-based user accounts to log in to iLO.

Configure Kerberos authentication, which adds the HP Zero Sign In button to the login screen.

14 Introduction to iLO

Use iLO language packs to switch between English and another supported language.

Control iLO by using a remote management tool.

iLO web interfaceThe iLO web interface groups similar tasks for easy navigation and workflow. The interface isorganized in a navigational tree view located on the left side of the page. The top-level branchesare Information, iLO Federation, Remote Console, Virtual Media, Power Management, Network,Remote Support, and Administration. If you have a ProLiant server blade, the BL c-Class branch isincluded. When a remote management tool is used with iLO, the page is included.When using the iLO web interface, note the following:

Each high-level iLO branch has a submenu that you can display by clicking the + icon to theleft of that branch. Each menu topic displays a page title that describes the information orsettings available on that page. The page title might not reflect the name that is displayed onthe menu option.

Assistance for all iLO pages is available from the iLO help pages. To access page-specifichelp, click the ? icon on the upper right side of the page.

Typical administrator tasks are available from the iLO Federation, Network, Remote Support,Administration, and branches of the iLO web interface.These tasks are described in Setting up iLO (page 17) and Configuring iLO (page 36).

Typical user tasks are available from the Information, Remote Console, Virtual Media, PowerManagement, iLO Federation, and BL c-Class branches of the iLO web interface. These tasksare described in Using iLO (page 144).

For more information about iLO functionality and integration, see the following:

Integrating HP Systems Insight Manager (page 247)

Directory services (page 250)

Troubleshooting (page 298)

ROM-based configuration utilitiesDepending on your server model, you can use iLO RBSU or the iLO 4 Configuration Utility toconfigure network parameters, global settings, and user accounts. On servers that support UEFI,such as the HP ProLiant DL580 Gen8 server, use the iLO 4 Configuration Utility in the UEFI SystemUtilities. On all other servers, use iLO RBSU.iLO RBSU and the iLO 4 Configuration Utility are designed for the initial iLO setup, and are notintended for continued iLO administration. You can start these utilities when the server is booted,and you can run them remotely with the Remote Console.To determine whether your server supports iLO RBSU or the iLO 4 Configuration Utility, see yourserver documentation.You can configure iLO to require users to log in when they access these utilities, or you can disablethe utilities for all users. These settings can be configured in the iLO access options. Disabling iLORBSU or the iLO 4 Configuration Utility prevents reconfiguration from the host unless the iLO SecurityOverride Switch is set. For more information, see Configuring access options (page 57).To access the ROM-based configuration utilities:

iLO RBSUPress F8 during POST to enter iLO RBSU.

iLO 4 Configuration UtilityPress F9 during POST to enter the UEFI System Utilities, and thenselect System ConfigurationiLO 4 Configuration Utility.

iLO web interface 15

NOTE: On servers that use the system RBSU, the iLO option ROM lists the installed license andthe firmware version. This information is not listed in the option ROM on UEFI systems.

iLO Mobile applicationThe HP iLO Mobile application provides access to the Remote Console of your HP ProLiant serverfrom your mobile device. The mobile application interacts directly with the iLO processor on HPProLiant servers, providing total control of the server at all times as long as the server is pluggedin. For example, you can access the server when it is in a healthy state or when it is powered offwith a blank hard drive. As an IT administrator, you can troubleshoot problems and performsoftware deployments from almost anywhere.For more information about the iLO Mobile application, see http://www.hp.com/go/ilo/mobileapp.

iLO scripting and command lineYou can use the iLO scripting tools to configure multiple iLO systems, to incorporate a standardconfiguration into the deployment process, and to control servers and subsystems.The HP iLO Scripting and Command Line Guide describes the syntax and tools available to useiLO 4 through a command line or scripted interface.

16 Introduction to iLO

2 Setting up iLOThe iLO default settings enable you to use most features without additional configuration. However,the configuration flexibility of iLO enables customization for multiple enterprise environments. Thischapter discusses the initial iLO setup steps. For information about additional configuration options,see Configuring iLO (page 36).Complete the initial setup steps:1. Decide how you want to handle networking and security.

For more information, see Preparing to set up iLO (page 17).

2. Connect iLO to the network.For more information, see Connecting iLO to the network (page 19).

3. If you are not using dynamic IP addressing, configure a static IP address by using iLO RBSU.For more information, see Setting up iLO by using iLO RBSU or the iLO 4 ConfigurationUtility (page 20).

4. If you are using the local accounts feature, set up your user accounts by using iLO RBSU orthe iLO web interface.For more information, see Setting up iLO by using iLO RBSU or the iLO 4 ConfigurationUtility (page 20) or Setting up iLO by using the iLO web interface (page 32).

5. Install an iLO license. For more information, see Activating iLO licensed features (page 32).6. If required, install the iLO drivers.

For more information, see Installing the iLO drivers (page 33).

Preparing to set up iLOBefore setting up an iLO management processor, you must decide how to handle networking andsecurity. The following questions can help you configure iLO:1. How should iLO connect to the network?

For a graphical representation and explanation of the available connections, see ConnectingiLO to the network (page 19).Typically, iLO is connected to the network through one of the following:

A corporate network that both the NIC and the iLO port are connected to. This connectionenables access to iLO from anywhere on the network and reduces the amount ofnetworking hardware and infrastructure required to support iLO. However, on a corporatenetwork, traffic can hinder iLO performance.

A dedicated management network with the iLO port on a separate network. A separatenetwork improves performance and security because you can physically control whichworkstations are connected to the network. A separate network also provides redundantaccess to the server when a hardware failure occurs on the corporate network. In thisconfiguration, iLO cannot be accessed directly from the corporate network.

2. How will iLO acquire an IP address?To access iLO after connecting it to the network, the iLO management processor must acquirean IP address and subnet mask by using either a dynamic or static process.

A dynamic IP address is set by default. iLO obtains the IP address and subnet mask fromDNS or DHCP servers. This method is the simplest.

A static IP address is used if DNS or DHCP servers are not available on the network. Astatic IP address can be configured by using iLO RBSU or the iLO 4 Configuration Utility.

Preparing to set up iLO 17

For more information, see Configuring a static IP address by using iLO RBSU (page 20)and Configuring a static IP address by using the iLO 4 Configuration Utility (page 22).

IMPORTANT: If you plan to use a static IP address, you must have the IP address beforestarting the iLO setup process.

3. What access security is required, and what user accounts and privileges are needed?iLO provides several options to control user access. You must use one of the following methodsto prevent unauthorized access to corporate IT assets:

Local accountsUp to 12 user names and passwords can be stored in iLO. This is idealfor small environments such as labs and small-sized or medium-sized businesses.

Directory servicesUse the corporate directory to manage iLO user access. This is idealfor environments that have a large number of users. If you plan to use directory services,consider enabling at least one local administrator account for alternate access.

For more information about iLO access security, see Configuring iLO security (page 60).

18 Setting up iLO

4. How do you want to configure iLO?iLO supports various interfaces for configuration and operation. This guide discusses thefollowing interfaces:

Use iLO RBSU or the iLO 4 Configuration Utility when the system environment does notuse DHCP, DNS, or WINS. For more information, see Setting up iLO by using iLO RBSUor the iLO 4 Configuration Utility (page 20).

Use the iLO web interface when you can connect to iLO on the network by using a webbrowser. You can also use this method to reconfigure an iLO management processor.For more information, see Setting up iLO by using the iLO web interface (page 32).

Other configuration options not discussed in this guide follow:

HP Intelligent ProvisioningPress F10 during POST to start HP Intelligent Provisioning.For information about the iLO settings you can configure, see the HP Intelligent ProvisioningUser Guide.

HP Scripting ToolkitThis toolkit is a server deployment product for IT experts that providesunattended automated installation for high-volume server deployments. For moreinformation, see the HP Scripting Toolkit for Linux User Guide and the HP Scripting Toolkitfor Windows User Guide.

ScriptingYou can use scripting for advanced setup of multiple iLO managementprocessors. Scripts are XML files written for a scripting language called RIBCL. You canuse RIBCL scripts to configure iLO on the network during initial deployment or from analready deployed host.The following methods are available:

HP Lights-Out Configuration Utility (HPQLOCFG)The HPQLOCFG.EXE utility replacesthe previously used CPQLOCFG.EXE utility. It is a Windows command line utility thatsends XML configuration and control scripts over the network to iLO.

HP Lights-Out Online Configuration Utility (HPONCFG)A local online scripted setuputility that runs on the host and passes RIBCL scripts to the local iLO. HPONCFGrequires the HP iLO Channel Interface Driver.

Custom scripting environmentsThe iLO scripting samples include a Perl sample thatcan be used to send RIBCL scripts to iLO over the network.

SMASH CLPA command-line protocol that can be used when a command line isaccessible through SSH or the physical serial port.

For more information about these methods, see the HP iLO 4 Scripting and CommandLine Guide.

Connecting iLO to the networkYou can connect iLO to the network through a corporate network or a dedicated managementnetwork.

In a corporate network, the server has two network port types (server NICs and one iLO NIC)connected to the corporate network, as shown in Figure 1 (page 20).

Connecting iLO to the network 19

Figure 1 Corporate network diagram

Main NIC

iLO

Main NIC

Hub/Switch

Client PCs

CorporateNetwork

Management Client

iLO

In a dedicated management network, the iLO port is on a separate network, as shown inFigure 2 (page 20).

Figure 2 Dedicated management network diagram

Hub/SwitchMain NIC

iLO

iLO

Main NICHub/Switch

Client PCs

CorporateNetwork

DedicatediLO Management

Network

Management Client

Setting up iLO by using iLO RBSU or the iLO 4 Configuration UtilityHP recommends using iLO RBSU or the iLO 4 Configuration Utility to set up iLO for the first timeand to configure iLO network parameters for environments that do not use DHCP, DNS, or WINS.To determine whether your server supports iLO RBSU or the iLO 4 Configuration Utility, see yourserver documentation.

Configuring a static IP address by using iLO RBSUThis procedure is required only if you are using a static IP address. When you are using dynamicIP addressing, your DHCP server automatically assigns an IP address for iLO.

20 Setting up iLO

NOTE: To simplify installation, HP recommends using DNS or DHCP with iLO.

To configure a static IP address:1. Optional: If you access the server remotely, start an iLO remote console session.

You can use the .NET IRC or Java IRC.

2. Restart or power on the server.3. Press F8 in the HP ProLiant POST screen.

The iLO RBSU screen appears.

4. Disable DHCP:a. Select NetworkDNS/DHCP, and then press Enter.

The Network Autoconfiguration window opens.

b. Select DHCP Enable, as shown in Figure 3 (page 21).

Figure 3 iLO RBSU Network Autoconfiguration window

c. Press the spacebar to set DHCP Enable to OFF, and then press F10 to save the changes.

Setting up iLO by using iLO RBSU or the iLO 4 Configuration Utility 21

5. Enter an IP address and subnet mask:a. Select NetworkNIC and TCP/IP, and then press Enter.

The Network Configuration window opens.

b. Enter the appropriate information in the IP Address, Subnet Mask, and Gateway IP Addressfields, as shown in Figure 4 (page 22).

Figure 4 iLO RBSU Network Configuration window

c. Press F10 to save the changes.6. Select FileExit to exit iLO RBSU.

The changes take effect when you exit iLO RBSU.

Configuring a static IP address by using the iLO 4 Configuration UtilityThis procedure is required only if you are using a static IP address. When you are using dynamicIP addressing, your DHCP server automatically assigns an IP address for iLO.

NOTE: To simplify installation, HP recommends using DNS or DHCP with iLO.

To configure a static IP address:1. Optional: If you access the server remotely, start an iLO remote console session.

You can use the .NET IRC or Java IRC.

2. Restart or power on the server.3. Press F9 in the HP ProLiant POST screen.

The System Configuration screen appears.

4. Use the up or down arrow keys and the Enter key to navigate to the System ConfigurationiLOConfiguration UtilityNetwork Options screen.The System Configuration screen displays the Network Options, as shown in Figure 5 (page23).

22 Setting up iLO

Figure 5 iLO 4 Configuration Utility Network Configuration

5. Disable DHCP:a. Select DHCP Enable, and then press Enter.b. Select OFF, and then press Enter.

6. Enter an IP address, subnet mask, and gateway IP address:a. Select IP Address, and then press Enter.b. Type the IP address, and then press Enter.c. Select Subnet Mask, and then press Enter.d. Type the subnet mask address, and then press Enter.e. Select Gateway IP Address, and then press Enter.f. Type the gateway IP address, and then press Enter.

7. Press F10 to save the changes.The iLO 4 Configuration Utility prompts you to confirm that you want to save all pendingconfiguration changes, as shown in Figure 6 (page 24).

Setting up iLO by using iLO RBSU or the iLO 4 Configuration Utility 23

Figure 6 Saving iLO configuration changes

8. Press Enter.The iLO 4 Configuration Utility notifies you that iLO must be reset in order for the changes totake effect, as shown in Figure 7 (page 24).

Figure 7 iLO 4 Configuration Utility iLO reset message

24 Setting up iLO

9. Press Enter.iLO resets, and the iLO session is automatically ended. You can reconnect in approximately30 seconds.

10. Resume the normal boot process:a. Start the iLO remote console.

The iLO 4 Configuration Utility is still open from the previous session.

b. Press ESC several times to navigate to the System Configuration page.c. Press ESC to exit the System Utilities and resume the n