Dell iDRAC6 for Monolithic Servers Version 1.8 Manual

Integrated Dell Remote

Access Controller 6 (iDRAC6)

Version 1.7

User’s Guide

Notes and Cautions

NOTE: A NOTE indicates important information that helps you make better use of

your computer.

CAUTION: A CAUTION indicates potential damage to hardware or loss of data if

instructions are not followed.

___________________

Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.

Trademarks used in this text: Dell™, the DELL logo, OpenManage™, and PowerEdge™, are trademarks of Dell Inc.; Microsoft Windows V ista Corporation in the United States and/or other countries; Red Hat registered trademarks of Red Hat, Inc. in the United States and other countries; SUSE trademark of Novell Corporation; Intel in the United States and other countries; UNIX United States and other countries; Java

Copyright 1998-2009 The OpenLDAP Foundation. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted only as au thorized by the OpenLDAP Public License. A copy of this license is available in the file LICENSE in the top-level directory of the distribution or, alternatively, at OpenLDAP.org/license.html. OpenLDAP™ is a trademark of the OpenLDAP Foundation. Individual files and/or contributed packages may be copyrighted by other parties and subject to additional restrictions. This work is derived from the University of Michigan LDAP v3.3 distribution. This work also contains materials derive d from public sources. Information about OpenLDAP can be obtained at openldap.org/. Portions Copyright 19982004 Kurt D. Zeilenga. Portions Copyright 1998-2004 Net Boolean Incor porated. Portions Copyright 2001-2004 IBM Corporation. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. Portions Copyright 1999-2003 Howard Y.H. Chu. Portions Copyright 1999-2003 Symas Corporation. Portions Copyright 1998-2003 Hallvard B. Furuseth. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that this notice is preserved. The names of the copyright holders may no t be used to endorse or promote products derived from this software without their specific prior written permission. This software is provided "as is'' without express or implied warranty. Portions Copyright (c) 1992- 1996 Regents of the University of Michigan. All rights reserved. Redistribution and use in source and binary forms are permitted provided that this notice is preserved and that due credit is given to the University of Michigan at Ann Arbor. The name of the University may not be us ed to endorse or promo te products derived from this software without specific prior written permission. This software is provided "as is'' without express or implied warranty. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.

, and Active Directory® are either trademarks or registered trademarks of Microsoft

, Windows®, Windows Server®, .NET®, Internet Explorer®,

and Red Hat Enterprise Linux® are

and Pentium® are registered trademarks of Intel Corporation

is a registered trademark of The Open Group in the

is a registered trademark of Oracle and/or its affiliates.

is a registered

2011 - 03

1 iDRAC6 Overview. . . . . . . . . . . . . . . . . . . 19

What’s New in This Release. . . . . . . . . . . . . . . 19

iDRAC6 Express Management Features

iDRAC6 Enterprise and vFlash Media . . . . . . . . . . 21

Supported Platforms

Supported Operating Systems

Supported Web Browsers . . . . . . . . . . . . . . . . 25

Supported Remote Access Connections

iDRAC6 Ports

Other Documents You May Need

. . . . . . . . . . . . . . . . . . . 25

. . . . . . . . . . . . . . 25

. . . . . . . . . . . . . . . . . . . . . . . 26

. . . . . . . . . 20

. . . . . . . . 26

. . . . . . . . . . . . 27

2 Getting Started With the iDRAC6 . . . . . . 31

3 Basic Installation of the iDRAC6 . . . . . . . 33

Before You Begin . . . . . . . . . . . . . . . . . . . . 33

Installing the iDRAC6 Express/Enterprise Hardware

. . . . . . . . . . . . . . . . . . . . . . . . 33

Configuring Your System to Use an iDRAC6

Software Installation and Configuration Overview

. . . . . . . 34

Contents 3

. . . 36

Installing iDRAC6 Software . . . . . . . . . . . . . 36

Configuring iDRAC6 . . . . . . . . . . . . . . . . . 36

Installing the Software on the Managed System . . . . 37

Installing the Software on the Management Station

. . . . . . . . . . . . . . . . . . . 37

Installing and Removing RACADM on a Linux Management Station

Installing RACADM

Uninstalling RACADM

. . . . . . . . . . . . . 38

. . . . . . . . . . . . . . . . . 38

. . . . . . . . . . . . . . . . 38

Updating the iDRAC6 Firmware

Before You Begin

Downloading the iDRAC6 Firmware

. . . . . . . . . . . . . 39

. . . . . . . . . . . . . . . . . . 39

. . . . . . . . 39

Updating the iDRAC6 Firmware Using the

Web-Based Interface. . . . . . . . . . . . . . . . 40

Updating the iDRAC6 Firmware Using

RACADM . . . . . . . . . . . . . . . . . . . . . . 40

Updating the iDRAC6 Firmware Using Dell Update Packages for Supported Windows

and Linux Operating Systems . . . . . . . . . . . . 41

Configuring a Supported Web Browser

. . . . . . . . . 41

Configuring Your Web Browser to Connect to the iDRAC6 Web-Based Interface

List of Trusted Domains

. . . . . . . . . . . . . . . 42

. . . . . . . . . 41

Viewing Localized Versions of the

Web-Based Interface. . . . . . . . . . . . . . . . 42

4 Configuring the iDRAC6 Using the

Web Interface

Accessing the Web Interface . . . . . . . . . . . . . . 46

Logging In

Logging Out

. . . . . . . . . . . . . . . . . . . . . 45

. . . . . . . . . . . . . . . . . . . . . . 47

. . . . . . . . . . . . . . . . . . . . . 48

4 Contents

Using Multiple Browser Tabs and Windows . . . . 48

Configuring the iDRAC6 NIC

. . . . . . . . . . . . . . . 49

Configuring the Network and IPMI LAN Settings

. . . . . . . . . . . . . . . . . 49

Configuring IP Filtering and IP Blocking . . . . . . 54

Configuring Platform Events. . . . . . . . . . . . . . . 56

Configuring Platform Event Filters (PEF)

. . . . . . 57

Configuring Platform Event Traps (PET) . . . . . . 58

Configuring E-Mail Alerts

Configuring IPMI Using Web Interface

Configuring iDRAC6 Users

. . . . . . . . . . . . . . 59

. . . . . . . 60

. . . . . . . . . . . . . . . . 62

Securing iDRAC6 Communications Using SSL and Digital Certificates

Secure Sockets Layer (SSL)

Certificate Signing Request (CSR)

. . . . . . . . . . . 62

. . . . . . . . . . . . 63

. . . . . . . . . 63

Accessing SSL Through the

Web-Based Interface. . . . . . . . . . . . . . . . 64

Generating a Certificate Signing Request . . . . . 65

Uploading a Server Certificate

Configuring and Managing Active Directory

. . . . . . . . . . . 66

. . . . . . 67

Configuring and Managing Generic LDAP

Configuring iDRAC6 Services

. . . . . . . . . . . . . . 72

. . . . . . . 71

Updating the iDRAC6 Firmware/System Services Recovery Image

iDRAC6 Firmware Rollback

Remote Syslog

First Boot Device

Remote File Share

. . . . . . . . . . . . . . . . . . . . . 75

. . . . . . . . . . . . . 77

. . . . . . . . . . . . . . . . . . . . . . 78

. . . . . . . . . . . . . . . . . . . . . 79

. . . . . . . . . . . . . . . . . . . . 80

Contents 5

Internal Dual SD Module. . . . . . . . . . . . . . . . . 82

Viewing Internal Dual SD Module Status Using GUI

. . . . . . . . . . . . . . . . . . . . . . 83

5 Advanced iDRAC6 Configuration . . . . . . 85

Before You Begin. . . . . . . . . . . . . . . . . . . . . 85

Configuring iDRAC6 for Viewing Serial Output Remotely Over SSH/Telnet

Configuring the iDRAC6 Settings to Enable SSH/Telnet

Starting a Text Console Through Telnet or SSH

Using a Telnet Console . . . . . . . . . . . . . . . 87

Using the Secure Shell (SSH)

Configuring Linux for Serial Console

During Boot . . . . . . . . . . . . . . . . . . . . . 91

Configuring iDRAC6 for Serial Connection . . . . . . . 97

Configuring iDRAC for Direct Connect Basic Mode and Direct Connect Terminal Mode

Switching Between RAC Serial Interface

Communication Mode and Serial Console . . . . 100

. . . . . . . . . . . . . . . . 85

. . . . . . . . . . . . . . . . . 86

. . . . . . . . . . . . . . . . . . . . 86

. . . . . . . . . . . . 89

. . . . . 98

6 Contents

Connecting the DB-9 or Null Modem Cable for the Serial Console

. . . . . . . . . . . . . . . . . 101

Configuring the Management Station Terminal Emulation Software

. . . . . . . . . . . . . . . . . . 102

Configuring Linux Minicom for Serial Console Emulation

. . . . . . . . . . . . . 102

Configuring HyperTerminal for

Serial Console. . . . . . . . . . . . . . . . . . . 104

Configuring Serial and Terminal Modes

Configuring IPMI and iDRAC6 Serial

. . . . . . . . 105

. . . . . . . 105

Configuring Terminal Mode. . . . . . . . . . . . . 106

Configuring the iDRAC6 Network Settings

Accessing the iDRAC6 Through a Network

. . . . . . . 107

. . . . . . . 108

Using RACADM Remotely . . . . . . . . . . . . . . . . 110

RACADM Synopsis

. . . . . . . . . . . . . . . . . 111

RACADM Options . . . . . . . . . . . . . . . . . . 111

Enabling and Disabling the RACADM Remote Capability

. . . . . . . . . . . . . . . . . . . . . . . . 112

RACADM Subcommands

. . . . . . . . . . . . . . 112

Frequently Asked Questions About RACADM Error Messages

Configuring Multiple iDRAC6 Controllers

Creating an iDRAC6 Configuration File

Parsing Rules

. . . . . . . . . . . . . . . . . . . . 119

. . . . . . . . . . . . . 115

. . . . . . . . 116

. . . . . . . 117

Modifying the iDRAC6 IP Address . . . . . . . . . 120

Configuring iDRAC6 Network Properties

. . . . . . 121

Frequently Asked Questions about Network Security

. . . . . . . . . . . . . . . . . . . . 123

6 Adding and Configuring

iDRAC6 Users . . . . . . . . . . . . . . . . . . . . 127

Using the Web Interface to Configure iDRAC6 Users

Adding and Configuring iDRAC6 Users

Public Key Authentication over SSH

Uploading, Viewing, and Deleting SSH Keys

Using the iDRAC6 Web-Based Interface . . . . . . 134

Uploading, Viewing, and Deleting SSH Keys Using RACADM

. . . . . . . . . . . . . . . . . . . . . . 127

. . . . . . . 127

. . . . . . . . 132

. . . . . . . . . . . . . . . . . . . 135

Contents 7

Using the RACADM Utility to Configure iDRAC6 Users

Before You Begin

Adding an iDRAC6 User

Removing an iDRAC6 User

. . . . . . . . . . . . . . . . . . . . . . 137

. . . . . . . . . . . . . . . . . 137

. . . . . . . . . . . . . . 138

. . . . . . . . . . . . 139

Enabling an iDRAC6 User

With Permissions . . . . . . . . . . . . . . . . . 140

7 Using the iDRAC6 Directory Service . . . 141

Using iDRAC6 With Microsoft Active Directory. . . . 141

Prerequisites for Enabling Microsoft Active Directory Authentication for iDRAC6

Enabling SSL on a Domain Controller

Exporting the Domain Controller Root CA Certificate to the iDRAC6

Importing the iDRAC6 Firmware

SSL Certificate . . . . . . . . . . . . . . . . . . 145

Supported Active Directory Authentication Mechanisms

. . . . . . . . . . . . . . . . . . . . . . 146

. . . . . 143

. . . . . . . 143

. . . . . . . . 144

8 Contents

Extended Schema Active Directory Overview

Active Directory Schema Extensions

. . . . 146

. . . . . . . 146

Overview of the iDRAC Schema Extensions

Active Directory Object Overview . . . . . . . . 147

Accumulating Privileges Using Extended Schema

. . . . . . . . . . . . . . . . . 149

Configuring Extended Schema Active Directory to Access Your iDRAC6

Extending the Active Directory Schema

. . . . . . . 150

. . . . . 151

Installing Dell Extension to Microsoft Active Directory Users and

Computers Snap-In . . . . . . . . . . . . . . . . 157

. . . 147

Adding iDRAC Users and Privileges to Microsoft Active Directory

. . . . . . . . . . . . . 158

Configuring Microsoft Active Directory With Extended Schema Using the

iDRAC6 Web-Based Interface . . . . . . . . . . . 160

Configuring Microsoft Active Directory With Extended Schema Using RACADM

. . . . . . . . . 163

Standard Schema Active Directory Overview

. . . . . 166

Single Domain Versus Multiple Domain Scenarios

. . . . . . . . . . . . . . . . . . . . . . 167

Configuring Standard Schema Microsoft Active Directory to Access iDRAC6

. . . . . . . . . . . 167

Configuring Microsoft Active Directory With Standard Schema Using the iDRAC6 Web-Based Interface

. . . . . . . . . . . . . . . . 168

Configuring Microsoft Active Directory With

Standard Schema Using RACADM . . . . . . . . . 171

Testing Your Configurations . . . . . . . . . . . . . . . 175

Generic LDAP Directory Service

. . . . . . . . . . . . 176

. . . . . . . . . . . . . . . . . . . . . 176

Configuring Generic LDAP Directory Service Using the iDRAC6 Web-Based Interface

. . . . . . 176

Configuring Generic LDAP Directory Service Using RACADM

. . . . . . . . . . . . . . . . . . . 180

Frequently Asked Questions about Active Directory

. . . . . . . . . . . . . . . . . . . . . 181

8 Configuring iDRAC6 for

Single Sign-On or Smart Card Login

About Kerberos Authentication . . . . . . . . . . . . . 185

. . . . . . . . . . . . . . . . . 185

Contents 9

Prerequisites for Active Directory SSO and Smart Card Authentication

. . . . . . . . . . 186

Using Microsoft Active Directory SSO . . . . . . . . 189

Configuring iDRAC6 to Use SSO

. . . . . . . . . 189

Logging Into iDRAC6 Using SSO . . . . . . . . . 190

Configuring Smart Card Authentication . . . . . . . . 191

Configuring Local iDRAC6 Users for Smart Card Logon

. . . . . . . . . . . . . . . . . 191

Configuring Active Directory Users for Smart Card Logon

. . . . . . . . . . . . . . . . . 192

Configuring Smart Card Using iDRAC6 . . . . . . 192

Logging Into the iDRAC6 Using the Smart Card

. . . . . . . . . . . . . . . . . . . . 194

Logging Into the iDRAC6 Using Active Directory

Smart Card Authentication . . . . . . . . . . . . 195

Troubleshooting the Smart Card Logon in iDRAC6

. . . . . . . . . . . . . . . . . . . . . . . . . 196

9 Using GUI Virtual Console . . . . . . . . . . . 201

10 Contents

Frequently Asked Questions About SSO

. . . . . . . . 198

Overview . . . . . . . . . . . . . . . . . . . . . . . . 201

Using Virtual Console

Configuring Your Management Station

Clear Your Browser’s Cache

. . . . . . . . . . . . . . . . . 201

. . . . . . 203

. . . . . . . . . . . 204

Internet Explorer Browser Configurations for ActiveX based Virtual Console and

Virtual Media Applications . . . . . . . . . . . . 205

Supported Screen Resolutions and

Refresh Rates . . . . . . . . . . . . . . . . . . . 206

Configuring Virtual Console in the iDRAC6 Web Interface

. . . . . . . . . . . . . . . 207

Opening a Virtual Console Session

Virtual Console Preview

. . . . . . . . . . . . . . 210

. . . . . . . . . 208

Using iDRAC6 Virtual Console (Video Viewer)

Disabling or Enabling Local Server Video

. . . . . 211

. . . . . 216

Launching Virtual Console and Virtual Media Remotely

Launching Console Using URL Format

General Error Scenarios

Frequently Asked Questions on Virtual Console

. . . . . . . . . . . . . . . . . 217

. . . . . . . 217

. . . . . . . . . . . . . . 218

. . . . 219

10 Using the WS-MAN Interface . . . . . . . . 223

Supported CIM Profiles . . . . . . . . . . . . . . . . . 223

11 Using the iDRAC6 SM-CLP

Command Line Interface . . . . . . . . . . . . 229

iDRAC6 SM-CLP Support . . . . . . . . . . . . . . . . 229

SM-CLP Features

Using SM-CLP

SM-CLP Targets

. . . . . . . . . . . . . . . . . . . . 230

. . . . . . . . . . . . . . . . . . . 230

. . . . . . . . . . . . . . . . . . 231

12 Deploying Your Operating System

Using VMCLI

Before You Begin . . . . . . . . . . . . . . . . . . . . 237

Remote System Requirements

Network Requirements

. . . . . . . . . . . . . . . . . . . . . 237

. . . . . . . . . . . 237

. . . . . . . . . . . . . . . 237

Contents 11

Creating a Bootable Image File . . . . . . . . . . . . 238

Creating an Image File for Linux Systems

. . . . 238

Creating an Image File for

Windows Systems . . . . . . . . . . . . . . . . 238

Preparing for Deployment

Configuring the Remote Systems

. . . . . . . . . . . . . . . 238

. . . . . . . . . 238

Deploying the Operating System. . . . . . . . . . . . 239

Using the VMCLI Utility

Installing the VMCLI Utility

Command Line Options

. . . . . . . . . . . . . . . . 240

. . . . . . . . . . . . 241

. . . . . . . . . . . . . . 242

VMCLI Parameters . . . . . . . . . . . . . . . . 242

VMCLI Operating System Shell Options

. . . . . 246

13 Configuring Intelligent Platform

Management Interface . . . . . . . . . . . . . 247

Configuring IPMI Using Web-Based Interface . . . . 247

Configuring IPMI Using the RACADM CLI

Using the IPMI Remote Access Serial Interface

Configuring Serial Over LAN Using the Web-Based Interface

. . . . . . . . . . . . . . . . . 252

. . . . . . . 248

. . . 252

14 Configuring and Using

Virtual Media . . . . . . . . . . . . . . . . . . . . . 253

12 Contents

Overview . . . . . . . . . . . . . . . . . . . . . . . . 253

Windows-Based Management Station

Linux-Based Management Station

Configuring Virtual Media

. . . . . . . . . . . . . . . 255

. . . . . . 254

. . . . . . . . 255

Running Virtual Media. . . . . . . . . . . . . . . . . . 257

Supported Virtual Media Configurations

. . . . . . 257

Booting From Virtual Media . . . . . . . . . . . . 259

Installing Operating Systems Using Virtual Media

. . . . . . . . . . . . . . . . . . . . 260

Using Virtual Media When the Server’s

Operating System Is Running. . . . . . . . . . . . 261

Frequently Asked Questions about Virtual Media

15 Configuring vFlash SD Card and

Managing vFlash Partitions . . . . . . . . . 267

Configuring vFlash or Standard SD Card Using

iDRAC6 Web Interface. . . . . . . . . . . . . . . . . . 268

Configuring vFlash or Standard SD Card Using RACADM

Displaying the vFlash or Standard SD Card Properties

Enabling or Disabling the vFlash or

Standard SD Card. . . . . . . . . . . . . . . . . . 271

Initializing the vFlash or Standard SD Card . . . . 271

Getting the Last Status on the vFlash or Standard SD Card

Resetting the vFlash or Standard SD Card

Managing vFlash Partitions Using iDRAC6 Web Interface

Creating an Empty Partition

Creating a Partition Using an Image File

Formatting a Partition

Viewing Available Partitions

Modifying a Partition

Attaching and Detaching Partition

Deleting Existing Partitions

. . . . . . . . . . . . . . . . . . . . . 270

. . . . . . . . . . . . . . . . . . . . . . 270

. . . . . . . . . . . . . . . . . . 271

. . . . . 272

. . . . . . . . . . . . . . . . . . . . . . 272

. . . . . . . . . . . . 272

. . . . . . 274

. . . . . . . . . . . . . . . . 276

. . . . . . . . . . . . 277

. . . . . . . . . . . . . . . . 279

. . . . . . . . . 279

. . . . . . . . . . . . . 280

. . . 262

Contents 13

Downloading Partition Contents . . . . . . . . . 281

Booting to a Partition . . . . . . . . . . . . . . . 282

Managing vFlash Partitions Using RACADM . . . . . 282

Creating a Partition

. . . . . . . . . . . . . . . . 284

Deleting a Partition . . . . . . . . . . . . . . . . 284

Getting the Status of a Partition

Viewing Partition Information

. . . . . . . . . 284

. . . . . . . . . . . 284

Booting to a Partition . . . . . . . . . . . . . . . 285

Attaching or Detaching a Partition

Modifying a Partition

. . . . . . . . . . . . . . . 286

. . . . . . . . 285

Frequently Asked Questions

. . . . . . . . . . . . . . 286

16 Power Monitoring and

Management . . . . . . . . . . . . . . . . . . . . . 287

Power Inventory, Power Budgeting, and

Capping. . . . . . . . . . . . . . . . . . . . . . . . . 288

Power Monitoring

Configuring and Managing Power

Viewing the Health Status of the Power Supply Units

Using the Web-Based Interface

Using RACADM

Viewing Power Budget

Using the Web Interface

Using RACADM

Power Budget Threshold

Using the Web-Based Interface

Using RACADM

. . . . . . . . . . . . . . . . . . . 288

. . . . . . . . . . . 288

. . . . . . . . . . . . . . . . . . 289

. . . . . . . . . 289

. . . . . . . . . . . . . . . . . . 290

. . . . . . . . . . . . . . . . 291

. . . . . . . . . . . . . 291

. . . . . . . . . . . . . . . . . . 291

. . . . . . . . . . . . . . . 292

. . . . . . . . . 292

. . . . . . . . . . . . . . . . . . 293

14 Contents

Viewing Power Monitoring . . . . . . . . . . . . . . . 293

Using the Web Interface

. . . . . . . . . . . . . . 293

Using RACADM . . . . . . . . . . . . . . . . . . . 296

Executing Power Control Operations on the Server

Using the Web Interface

Using RACADM

. . . . . . . . . . . . . . . . . . . . . . . 296

. . . . . . . . . . . . . . 296

. . . . . . . . . . . . . . . . . . . 297

17 Using the iDRAC6 Configuration

Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . 299

Overview . . . . . . . . . . . . . . . . . . . . . . . . . 299

Starting the iDRAC6 Configuration Utility

. . . . . . . . 300

Using the iDRAC6 Configuration Utility . . . . . . . . . 300

iDRAC6 LAN

. . . . . . . . . . . . . . . . . . . . . 301

IPMI Over LAN . . . . . . . . . . . . . . . . . . . 301

LAN Parameters

. . . . . . . . . . . . . . . . . . 302

Virtual Media Configuration . . . . . . . . . . . . 305

Smart Card Logon

System Services Configuration

. . . . . . . . . . . . . . . . . . 307

. . . . . . . . . . . 307

LCD Configuration . . . . . . . . . . . . . . . . . 308

LAN User Configuration

Reset to Default

. . . . . . . . . . . . . . 309

. . . . . . . . . . . . . . . . . . . 309

System Event Log Menu . . . . . . . . . . . . . . 312

Exiting the iDRAC6 Configuration Utility

. . . . . . 312

18 Monitoring and Alert Management . . . . 313

Configuring the Managed System to Capture the

Last Crash Screen . . . . . . . . . . . . . . . . . . . . 313

Contents 15

Disabling the Windows Automatic Reboot Option

. . . . . . . . . . . . . . . . . . . . . 314

Disabling the Automatic Reboot Option in Windows 2008 Server

. . . . . . . . . . . . . . . 314

Disabling the Automatic Reboot Option in

Windows Server 2003. . . . . . . . . . . . . . . 314

Configuring Platform Events . . . . . . . . . . . . . . 314

Configuring Platform Event Filters (PEF)

. . . . . 315

Configuring PET . . . . . . . . . . . . . . . . . . 317

Configuring E-Mail Alerts

Testing E-mail Alerting

. . . . . . . . . . . . . 318

. . . . . . . . . . . . . . 319

Testing the RAC SNMP Trap Alert Feature . . . . 320

Frequently Asked Question about SNMP Authentication

. . . . . . . . . . . . . . . . . . . . . 320

19 Recovering and Troubleshooting

the Managed System . . . . . . . . . . . . . . . 323

First Steps to Troubleshoot a Remote System . . . . . 323

16 Contents

Managing Power on a Remote System

. . . . . . . . 324

Selecting Power Control Actions from the iDRAC6 Web-Based Interface

. . . . . . . . . . 324

Selecting Power Control Actions from the iDRAC6 CLI

. . . . . . . . . . . . . . . . . . . . 324

Viewing System Information . . . . . . . . . . . . . . 324

Main System Chassis

. . . . . . . . . . . . . . . 325

Remote Access Controller . . . . . . . . . . . . 327

System Inventory

Using the System Event Log (SEL)

. . . . . . . . . . . . . . . . . 328

. . . . . . . . . . . 330

Using the Command Line to View System Log

. . . . . . . . . . . . . . . . . . . . 331

Using the Work Notes . . . . . . . . . . . . . . . . . . 331

Using the POST Boot Logs

Viewing the Last System Crash Screen

. . . . . . . . . . . . . . . . 333

. . . . . . . . . 334

20 Recovering and Troubleshooting

the iDRAC6 . . . . . . . . . . . . . . . . . . . . . . 335

Using the RAC Log . . . . . . . . . . . . . . . . . . . . 335

Using the Command Line . . . . . . . . . . . . . . . . 336

Using the Diagnostics Console

Using Identify Server

. . . . . . . . . . . . . . . . . . 338

. . . . . . . . . . . . . 336

Using the Trace Log . . . . . . . . . . . . . . . . . . . 338

Using the racdump

Using the coredump

. . . . . . . . . . . . . . . . . . . . 339

. . . . . . . . . . . . . . . . . . . 339

21 Sensors . . . . . . . . . . . . . . . . . . . . . . . . . 341

Battery Probes . . . . . . . . . . . . . . . . . . . . . . 341

Fan Probes

Chassis Intrusion Probes

Power Supplies Probes

Removable Flash Media Probes

Power Monitoring Probes

Temperature Probe

. . . . . . . . . . . . . . . . . . . . . . . . 341

. . . . . . . . . . . . . . . . 341

. . . . . . . . . . . . . . . . . 342

. . . . . . . . . . . . . 342

. . . . . . . . . . . . . . . . 342

. . . . . . . . . . . . . . . . . . . . 342

Contents 17

Voltage Probes . . . . . . . . . . . . . . . . . . . . . 343

22 Configuring Security Features. . . . . . . . 345

Security Options for the iDRAC6 Administrator . . . . 346

Disabling the iDRAC6 Local Configuration

Disabling iDRAC6 Virtual Console

Securing iDRAC6 Communications Using SSL and Digital Certificates

Secure Sockets Layer (SSL)

. . . . . . . . . . . . . . 349

. . . . . . . . . . . 349

Certificate Signing Request (CSR) . . . . . . . . 350

Accessing the SSL Main Menu

. . . . . . . . . . 351

Generating a Certificate Signing Request

Viewing a Server Certificate . . . . . . . . . . . 353

Using the Secure Shell (SSH) . . . . . . . . . . . . . 353

. . . . 346

. . . . . . . . 348

. . . . 351

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 363

18 Contents

Configuring Services

. . . . . . . . . . . . . . . . . . 353

Enabling Additional iDRAC6 Security Options

Configuring the Network Security Settings Using the iDRAC6 GUI

. . . . . . . . . . . . . . . 361

. . . . 356

iDRAC6 Overview

Integrated Dell Remote Access Controller6 (iDRAC6) is a systems management hardware and software solution that provides remote management capabilities, crashed system recovery, and power control functions for the Dell PowerEdge systems.

The iDRAC6 uses an integrated System-on-Chip microprocessor for the remote monitor/control system. The iDRAC6 co-exists on the system board with the managed PowerEdge server. The server operating system is concerned with executing applications; the iDRAC6 is concerned with monitoring and managing the server’s environment and state outside of the operating system.

You can configure the iDRAC6 to send you an e-mail or Simple Network Management Protocol (SNMP) trap alert for warnings or errors. To help you diagnose the probable cause of a system crash, iDRAC6 can log event data and capture an image of the screen when it detects that the system has crashed.

The iDRAC6 network interface is enabled with a static IP address of

192.168.0.120 by default. It must be configured before the iDRAC6 is accessible. After the iDRAC6 is configured on the network, it can be accessed at its assigned IP address with the iDRAC6 Web interface, Telnet, or Shell (SSH) Intelligent Platform Management Interface (IPMI).

, and supported network management protocols, such as

Secure

What’s New in This Release

• Improved Web GUI performance.

• Improved vFlash performance.

• Out of Band Hardware and Firmware Inventory support.

• Console launch without SSO.

•Work notes.

iDRAC6 Overview 19

• Improved System Field Replaceable Unit(FRU) data (Product name, serial number, asset tag, and version in product information area of FRU).

• Identify in Command Line Interface (CLI).

• OEM SEL Event filtering.

• Plain English SEL events.

• Default web certificate update through Command Line Interface.

• Display Life Cycle Controller firmware version display on CLI and GUI.

• Support for platforms PowerEdge(TM) R415, and EqualLogic(TM) DX6000G.

• Support for operating system Redhat Enterprise Linux 6 x64.

• Virtual MAC support.

iDRAC6 Express Management Features

The iDRAC6 Express provides the following management features:

• Provides Dynamic Domain Name System (DDNS) registration.

• Provides remote system management and monitoring using a Web interface and the Server Management Command Line Protocol (SM-CLP) command line over a serial, Telnet, or SSH connection.

• Provides support for Microsoft Active Directory authentication — Centralizes iDRAC6 user IDs and passwords in Active Directory using an extended schema or a standard schema.

• Provides a generic solution to support Lightweight Directory Access Protocol (LDAP) based authentication — This feature does not require any schema extension on your directory services.

• Provides access to system information and status of components for monitoring.

• Provides access to the system event log, the iDRAC6 log, and the last crash screen of the crashed or unresponsive system, that is independent of the operating system state.

• Provides option to add work notes to the Lifecycle Controller Log through the GUI or the CLI.

20 iDRAC6 Overview

• Enables you to launch the iDRAC6 Web interface from Dell OpenManage Server Administrator or Dell OpenManage IT Assistant.

• Alerts you to potential managed node issues through an e-mail message or SNMP trap.

• Provides remote power management functions, such as shutdown and reset, from a management console.

• Provides Intelligent Platform Management Interface (IPMI) support.

• Provides secure remote system management through the Web interface.

• Prevents unauthorized access to a remote system through password-level security management.

• Provides assignable permissions for different systems management tasks through role-based authority.

• Adds IPv6 support such as providing access to the iDRAC6 Web interface using an IPv6 address, specifies iDRAC6 NIC IPv6 address, and specifies a destination number to configure an IPv6 SNMP alert destination.

•

Provides network accessible management using the Web Services for Management (WS-MAN) protocol.

•Adds

• Allows you to boot from (or rollback to) the firmware image of your choice

For more information about iDRAC6 Express, see your Hardware Owner’s Manual at support.dell.com/manuals.

Server Management-Command Line Protocol (SM-CLP) support, which provides standards for systems management CLI implementations.

through Firmware rollback and recovery.

iDRAC6 Enterprise and vFlash Media

iDRAC6 Enterprise with vFlash Media adds support for RACADM, Virtual Console, Virtual Media features, a dedicated NIC, and vFlash (with an optional Dell vFlash Media card). vFlash allows you to store emergency boot images and diagnostic tools on the vFlash Media. For more information about the iDRAC6 Enterprise and vFlash Media, see your Hardware Owner’s Manual at support.dell.com/manuals.

Table 1-1 lists the features available for BMC, iDRAC6 Express, iDRAC6 Enterprise, and vFlash Media.

iDRAC6 Overview 21

Table 1-1. iDRAC6 Feature List

Feature BMC iDRAC6

Express

Interface and Standards Support

IPMI 2.0

Web-based GUI

SNMP

WSMAN

SMASH-CLP (SSHonly)

RACADM Command Line (SSH and local)

RACADM Command Line (remote)

Connectivity

Shared/Failover Network Modes

IPv4

VLAN Tagging

iDRAC6 Enterprise

iDRAC6 Enterprise with vFlash

IPv6

Dynamic DNS

Dedicated NIC

Security and Authentication

Role-based Authority

Local Users

SSL Encryption

22 iDRAC6 Overview

Table 1-1. iDRAC6 Feature List

(continued)

Feature BMC iDRAC6

Express

Active Directory

Generic LDAP Support

Two-factor Authentication

Single sign-on

PK Authentication (for SSH)

Remote Management and Remediation

Remote Firmware

Update

Server Power Control

Serial-over-LAN

(with proxy)

Serial-over-LAN

(no proxy)

Power Capping

iDRAC6 Enterprise

iDRAC6 Enterprise with vFlash

Last Crash Screen Capture

Boot Capture

Virtual Media

Virtual Console

Virtual Console Sharing

Remote Virtual Console Launch

vFlash

iDRAC6 Overview 23

Table 1-1. iDRAC6 Feature List

(continued)

Feature BMC iDRAC6

Express

iDRAC6 Enterprise

iDRAC6 Enterprise with vFlash

Monitoring

Sensor Monitoring and

Alerting

Real-time Power Monitoring

Real-time Power Graphing

Historical Power Counters

Logging

System Event Log (SEL)

RAC Log

Remote Syslog

Lifecycle Controller

Unified Server

Configurator

Remote Services (through WS-MAN)

Part Replacement

Two-factor authentication requires Internet Explorer.

Feature is available only through IPMI and not through a Web GUI.

Virtual Console and Virtual Media are available using both Java and Active-X plug-

ins.

The Unified Server Configurator available through BMC is limited to operating

system installation and diagnostics only.

= Supported; =Not Supported

24 iDRAC6 Overview

The iDRAC6 provides the following security features:

• Single Sign-on, Two-Factor Authentication, and Public Key Authentication.

• User authentication through Active Directory (optional), LDAP authentication (optional) or hardware-stored user IDs and passwords.

• Role-based authorization, which enables an administrator to configure specific privileges for each user.

• User ID and password configuration through the Web-based interface or SM-CLP.

• SM-CLP and Web interfaces, which support 128-bit and 40-bit encryption (for countries where 128 bit is not acceptable), using the SSL 3.0 standard.

• Session time-out configuration (in seconds) through the Web interface or SM-CLP.

• Configurable IP ports (where applicable).

NOTE: Telnet does not support SSL encryption.

• SSH, which uses an encrypted transport layer for higher security.

• Login failure limits per IP address, with login blocking from the IP address when the limit is exceeded.

• Ability to limit the IP address range for clients connecting to the iDRAC6.

Supported Platforms

For the latest supported platforms, see the iDRAC6 Readme file and the Dell Systems Software Support Matrix available at support.dell.com/manuals.

Supported Operating Systems

For the latest information, see the iDRAC6 Readme file and the Dell Systems Software Support Matrix available at support.dell.com/manuals.

Supported Web Browsers

For the latest information, see the iDRAC6 Readme file and the Dell Systems Software Support Matrix available at support.dell.com/manuals.

iDRAC6 Overview 25

NOTE: Due to serious security flaws, support for SSL 2.0 has been discontinued.

Your browser must be configured to enable SSL 3.0 in order to work properly. Internet Explorer 6.0 is not supported.

Supported Remote Access Connections

Table 1-2 lists the connection features.

Table 1-2. Supported Remote Access Connections

Connection Features

iDRAC6 NIC

• 10 Mbps/100 Mbps Ethernet

• DHCP support

• SNMP traps and e-mail event notification

• Support for SM-CLP (Telnet, SSH, and RACADM) command shell, for operations such as iDRAC6 configuration, system boot, reset, power-on, and shutdown commands

• Support for IPMI utilities, such as IPMItool and ipmish

iDRAC6 Ports

Table 1-3 lists the ports iDRAC6 listens on for connections. Table 1-4 identifies the ports that the iDRAC6 uses as a client. This information is required when opening firewalls for remote access to an iDRAC6.

Table 1-3. iDRAC6 Server Listening Ports

Port Number Function

22*

23*

80*

443*

623

5900*

* Configurable port

SSH

Te ln e t

HTTP

HTTPS

RMCP/RMCP+

Virtual Console keyboard/mouse, Virtual Media Service, Virtual Media Secure Service, and Virtual Console video

26 iDRAC6 Overview

Table 1-4. iDRAC6 Client Ports

Port Number Function

162

636

3269

SMTP

DNS

DHCP-assigned IP address

TFTP

SNMP trap

LDAPS

LDAPS for global catalog (GC)

Dell iDRAC6 for Monolithic Servers Version 1.8 Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Contents

iDRAC6 Overview

What’s New in This Release

iDRAC6 Express Management Features

iDRAC6 Enterprise and vFlash Media

Supported Platforms

Supported Operating Systems

Supported Web Browsers

Supported Remote Access Connections

iDRAC6 Ports

Other Documents You May Need