Dell iDRAC for Blade Servers User Manual

0 (0)

Integrated Dell™ Remote

Access Controller

Firmware Version 1.11

User Guide

w w w . d e l l . c o m | s u p p o r t . d e l l . c o m

Notes and Notices

NOTE: A NOTE indicates important information that helps you make better use of your computer.

NOTICE: A NOTICE indicates either potential damage to hardware or loss of data and tells you how to avoid the problem.

___________________

Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden..

Trademarks used in this text: Dell, the DELL logo, Dell OpenManage, and PowerEdge, are trademarks of Dell Inc.; Microsoft, Windows, Windows Server, MS-DOS, Windows Vista, and Active Directory are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries; Red Hat and Linux are registered trademarks of Red Hat, Inc.; Novell and SUSE are registered trademarks of Novell Corporation. Intel is a registered trademark of Intel Corporation; UNIX is a registered trademark of The Open Group in the United States and other countries.

Copyright 1998-2006 The OpenLDAP Foundation. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. A copy of this license is available in the file LICENSE in the top-level directory of the distribution or, alternatively, at www.OpenLDAP.org/license.html. OpenLDAP is a registered trademark of the OpenLDAP Foundation. Individual files and/or contributed packages may be copyrighted by other parties and subject to additional restrictions. This work is derived from the University of Michigan LDAP v3.3 distribution. This work also contains materials derived from public sources. Information about OpenLDAP can be obtained at www.openldap.org/. Portions Copyright 1998-2004 Kurt D. Zeilenga. Portions Copyright 1998-2004 Net Boolean Incorporated. Portions Copyright 2001-2004 IBM Corporation. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. Portions Copyright 1999-2003 Howard Y.H. Chu. Portions Copyright 1999-2003 Symas Corporation. Portions Copyright 1998-2003 Hallvard B. Furuseth. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that this notice is preserved. The names of the copyright holders may not be used to endorse or promote products derived from this software without their specific prior written permission. This software is provided "as is'' without express or implied warranty. Portions Copyright (c) 1992-1996 Regents of the University of Michigan. All rights reserved. Redistribution and use in source and binary forms are permitted provided that this notice is preserved and that due credit is given to the University of Michigan at Ann Arbor. The name of the University may not be used to endorse or promote products derived from this software without specific prior written permission. This software is provided "as is'' without express or implied warranty. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.

June 2008

Rev. A02

1	iDRAC Overview . . . . . . . . . . . . . . . . . . .	19
	iDRAC Management Features . . . . . . . . . . . . . .	20
	iDRAC Security Features . . . . . . . . . . . . . . . .	21
	Supported Platforms . . . . . . . . . . . . . . . . . .	21
	Supported Operating Systems . . . . . . . . . . . . . .	22
	Supported Web Browsers . . . . . . . . . . . . . . . .	23
	Supported Remote Access Connections . . . . . . . .	24
	iDRAC Ports . . . . . . . . . . . . . . . . . . . . . . .	24
	Other Documents You May Need . . . . . . . . . . . .	25
2	Configuring the iDRAC . . . . . . . . . . . . . .	27
	Before You Begin . . . . . . . . . . . . . . . . . . . .	27
	Interfaces for Configuring the iDRAC . . . . . . . . . .	27
	Configuration Tasks . . . . . . . . . . . . . . . . . . .	29
	Configure the Management Station . . . . . . . .	30
	Configure iDRAC Networking . . . . . . . . . . .	30
	Configure iDRAC Users . . . . . . . . . . . . . .	31
	Configure Active Directory . . . . . . . . . . . . .	31
	Configure IP Filtering and IP Blocking . . . . . . .	31
	Configure Platform Events . . . . . . . . . . . . .	31

Contents 3

Configure Serial Over LAN . . . . . . . . . . . . .	32
Configure iDRAC Services . . . . . . . . . . . . .	32
Configure Secure Sockets Layer (SSL) . . . . . .	32
Configure Virtual Media . . . . . . . . . . . . . .	33
Install the Managed Server Software . . . . . . .	33
Configure the Managed Server for the Last
Crash Screen Feature . . . . . . . . . . . . . . .	33
Configuring Networking Using the CMC Web
Interface . . . . . . . . . . . . . . . . . . . . . . . . .	33
Updating the iDRAC Firmware . . . . . . . . . . . . .	34
Downloading the Firmware or Update
Package . . . . . . . . . . . . . . . . . . . . . .	35
Execute the Firmware Update . . . . . . . . . . .	35
Using the DOS Update Utility . . . . . . . . . . . .	36
Verifying the Digital Signature . . . . . . . . . . .	37

3 Configuring the Management Station . . . 41

Management Station Set Up Steps . . . . . . . . . . .	41
Management Station Network Requirements . . . . .	41
Configuring a Supported Web Browser . . . . . . . . .	42
Configuring Your Web Browser to Connect to the
Web Interface . . . . . . . . . . . . . . . . . . .	42
Adding iDRAC to the List of Trusted Domains . . .	43
Viewing Localized Versions of the Web
Interface . . . . . . . . . . . . . . . . . . . . . .	43
Setting the Locale in Linux . . . . . . . . . . . . .	44
Disabling the Whitelist Feature in Firefox . . . . .	45
Installing a Java Runtime Environment (JRE) . . . . . .	46

4 Contents

Installing Telnet or SSH Clients . . . . . . . . . . . . .	46
Telnet with iDRAC . . . . . . . . . . . . . . . . .	47
Configuring the Backspace Key For Your
Telnet Session . . . . . . . . . . . . . . . . . . .	47
SSH With iDRAC . . . . . . . . . . . . . . . . . .	48
Installing a TFTP Server . . . . . . . . . . . . . . . . .	49
Installing Dell OpenManage IT Assistant . . . . . . .	50

4 Configuring the Managed Server . . . . . .	51
Installing the Software on the Managed Server . . . .	51
Configuring the Managed Server to Capture the
Last Crash Screen . . . . . . . . . . . . . . . . . . . .	52
Disabling the Windows Automatic Reboot Option . . .	53

5Configuring the iDRAC Using the Web Interface 55

Accessing the Web Interface . . . . . . . . . . . . . .	55
Logging In . . . . . . . . . . . . . . . . . . . . .	56
Logging Out . . . . . . . . . . . . . . . . . . . . .	56
Configuring the iDRAC NIC . . . . . . . . . . . . . . .	57
Configuring the Network and IPMI LAN
Settings . . . . . . . . . . . . . . . . . . . . . . .	57
Configuring IP Filtering and IP Blocking . . . . . .	60
Configuring Platform Events . . . . . . . . . . . . . .	61
Configuring Platform Event Filters (PEF) . . . . . .	62
Configuring Platform Event Traps (PET) . . . . . .	63
Configuring E-Mail Alerts . . . . . . . . . . . . .	64

Contents 5

Configuring IPMI . . . . . . . . . . . . . . . . . . . .	64
Adding and Configuring iDRAC Users . . . . . . . . . .	65
Securing iDRAC Communications Using SSL and
Digital Certificates . . . . . . . . . . . . . . . . . . .	69
Secure Sockets Layer (SSL) . . . . . . . . . . . .	69
Certificate Signing Request (CSR) . . . . . . . . .	70
Accessing the SSL Main Menu . . . . . . . . . .	70
Generating a New Certificate Signing
Request . . . . . . . . . . . . . . . . . . . . . . .	71
Uploading a Server Certificate . . . . . . . . . . .	73
Viewing a Server Certificate . . . . . . . . . . . .	74
Configuring and Managing Active Directory
Certificates . . . . . . . . . . . . . . . . . . . . . . .	74
Configuring Active Directory (Standard Schema
and Extended Schema) . . . . . . . . . . . . . . .	76
Uploading an Active Directory CA Certificate . . .	79
Downloading an iDRAC Server Certificate . . . . .	80
Viewing an Active Directory CA Certificate . . . .	80
Configuring Serial Over LAN . . . . . . . . . . . . . .	81
Configuring iDRAC Services . . . . . . . . . . . . . .	82
Updating the iDRAC Firmware . . . . . . . . . . . . .	85
Recovering iDRAC Firmware Using the CMC . . .	86

6 Using the iDRAC with Microsoft Active Directory 89

Advantages and Disadvantages of Extended Schema

and Standard Schema . . . . . . . . . . . . . . . . . . 89

6 Contents

Extended Schema Active Directory Overview . . . . .	90
Active Directory Schema Extensions . . . . . . .	90
Overview of the RAC Schema Extensions . . . . .	91
Active Directory Object Overview . . . . . . . . .	91
Configuring Extended Schema Active Directory
to Access Your iDRAC . . . . . . . . . . . . . . .	95
Extending the Active Directory Schema . . . . . .	95
Installing the Dell Extension to the Active
Directory Users and Computers Snap-In . . . . .	101
Adding iDRAC Users and Privileges to
Active Directory . . . . . . . . . . . . . . . . . .	102
Configuring the iDRAC With Extended
Schema Active Directory Using the
Web Interface . . . . . . . . . . . . . . . . . . .	105
Configuring the iDRAC With Extended Schema
Active Directory Using RACADM . . . . . . . . .	106
Configuring the iDRAC With Extended Schema
Active Directory and SM-CLP . . . . . . . . . . .	107
Active Directory Standard Schema Overview . . . . .	108
Configuring Standard Schema Active Directory
to Access Your iDRAC . . . . . . . . . . . . . . .	110
Configuring the iDRAC With Standard Schema
Active Directory and the Web Interface . . . . . .	110
Configuring the iDRAC With Standard Schema
Active Directory and RACADM . . . . . . . . . .	112
Configuring the iDRAC With Standard Schema
Active Directory and SM-CLP . . . . . . . . . . .	113
Enabling SSL on a Domain Controller . . . . . . . . .	115
Exporting the Domain Controller Root CA
Certificate . . . . . . . . . . . . . . . . . . . . .	116
Importing the iDRAC Firmware SSL
Certificate . . . . . . . . . . . . . . . . . . . . .	117
Using Active Directory to Log In To the iDRAC . . . . .	118
Frequently Asked Questions . . . . . . . . . . . . . .	118
Contents		7
Contents		7

7 Using GUI Console Redirection . . . . . . . 121

Overview . . . . . . . . . . . . . . . . . . . . . . . . .	121
Using Console Redirection . . . . . . . . . . . . . . .	121
Supported Screen Resolutions and Refresh
Rates . . . . . . . . . . . . . . . . . . . . . . . .	122
Configuring Your Management Station . . . . . .	122
Configuring Console Redirection in the iDRAC
Web Interface . . . . . . . . . . . . . . . . . . .	123
Configuring Console Redirection in the SM-CLP
Command Line Interface . . . . . . . . . . . . . .	125
Opening a Console Redirection Session . . . . . .	125
Using the Video Viewer . . . . . . . . . . . . . . . . .	127
Synchronizing the Mouse Pointers . . . . . . . .	130
Disabling or Enabling Local Console . . . . . . . .	131
Frequently Asked Questions . . . . . . . . . . . . . .	132

8 Configuring and Using Virtual Media . . . 137

Overview . . . . . . . . . . . . . . . . . . . . . . . . .	137
Windows-Based Management Station . . . . . .	138
Linux-Based Management Station . . . . . . . . .	139
Configuring Virtual Media . . . . . . . . . . . . . . . .	139
Running Virtual Media . . . . . . . . . . . . . . . . . .	141
Booting From Virtual Media . . . . . . . . . . . .	142
Installing Operating Systems Using Virtual
Media . . . . . . . . . . . . . . . . . . . . . . .	143
Using Virtual Media When the Server’s
Operating System Is Running . . . . . . . . . . . .	144
Frequently Asked Questions . . . . . . . . . . . . . .	144

8 Contents

9Using the Local RACADM Command

Line Interface . . . . . . . . . . . . . . . . . . . . 149

Using the RACADM Command . . . . . . . . . . . . .	149
RACADM Subcommands . . . . . . . . . . . . . . . .	150

Using the RACADM Utility to Configure the iDRAC . . . 151

Displaying Current iDRAC Settings . . . . . . . .	151
Managing iDRAC Users with RACADM . . . . . .	152
Adding an iDRAC User . . . . . . . . . . . . . . .	153
Enabling an iDRAC User With Permissions . . . .	153
Removing an iDRAC User . . . . . . . . . . . . .	154
Testing E-mail Alerting . . . . . . . . . . . . . . .	154
Testing the iDRAC SNMP Trap Alert Feature . . .	155
Configuring iDRAC Network Properties . . . . . .	155
Configuring IPMI . . . . . . . . . . . . . . . . . .	156
Configuring PEF . . . . . . . . . . . . . . . . . .	158
Configuring PET . . . . . . . . . . . . . . . . . .	159
Configuring IP Filtering (IpRange) . . . . . . . . .	161
Configuring IP Filtering . . . . . . . . . . . . . . .	162
Configuring IP Blocking . . . . . . . . . . . . . .	163
Configuring iDRAC Telnet and SSH Services
Using Local RACADM . . . . . . . . . . . . . . .	165
Using an iDRAC Configuration File . . . . . . . . . . .	166
Creating an iDRAC Configuration File . . . . . . .	166
Configuration File Syntax . . . . . . . . . . . . .	167
Modifying the iDRAC IP Address in a
Configuration File . . . . . . . . . . . . . . . . .	169
Loading the Configuration File Into the iDRAC . . . 170
Configuring Multiple iDRACs . . . . . . . . . . . . . .	170

Contents 9

10Using the iDRAC SM-CLP Command

Line Interface . . . . . . . . . . . . . . . . . . . . 173

System Management With SM-CLP . . . . . . . . . . .	173
iDRAC SM-CLP Support . . . . . . . . . . . . . . . . .	174
SM-CLP Features . . . . . . . . . . . . . . . . . . . .	174
Navigating the MAP Address Space . . . . . . . . . .	177
Targets . . . . . . . . . . . . . . . . . . . . . . .	178
Using the Show Verb . . . . . . . . . . . . . . . . . .	178
Using the -display Option . . . . . . . . . . . . . .	179
Using the -level Option . . . . . . . . . . . . . . .	179
Using the -output Option . . . . . . . . . . . . . .	179
iDRAC SM-CLP Examples . . . . . . . . . . . . . . . .	180
Server Power Management . . . . . . . . . . . .	180
SEL Management . . . . . . . . . . . . . . . . . .	180
MAP Target Navigation . . . . . . . . . . . . . .	182
Setting the iDRAC IP Address, Subnet Mask,
and Gateway Address . . . . . . . . . . . . . . .	183
Updating the iDRAC Firmware Using SM-CLP . . . 184

Using Serial Over LAN (SOL) With Telnet or SSH . . . . 185

Using SOL Over Telnet With HyperTerminal on Microsoft Windows . . . . . . . . . . . . . . . . 185

Using SOL Over Telnet With Linux . . . . . . . . . 186 Using SOL Over SSH . . . . . . . . . . . . . . . . 186

10 Contents

11Deploying Your Operating System

Using iVM-CLI . . . . . . . . . . . . . . . . . . . . 187

Before You Begin . . . . . . . . . . . . . . . . . . . .	187
Remote System Requirements . . . . . . . . . . .	187
Network Requirements . . . . . . . . . . . . . .	187
Creating a Bootable Image File . . . . . . . . . . . .	188
Creating an Image File for Linux Systems . . . . .	188
Creating an Image File for Windows Systems . . . 188
Preparing for Deployment . . . . . . . . . . . . . . . .	188
Configuring the Remote Systems . . . . . . . . .	188
Deploying the Operating System . . . . . . . . . . . .	189
Using the Virtual Media Command Line Interface
Utility . . . . . . . . . . . . . . . . . . . . . . . . . .	190
Installing the iVM-CLI Utility . . . . . . . . . . . .	191
Command Line Options . . . . . . . . . . . . . . .	191
iVM-CLI Parameters . . . . . . . . . . . . . . . .	192
iVM-CLI Operating System Shell Options . . . . .	195

12 Using the iDRAC Configuration
Utility	197
Overview . . . . . . . . . . . . . . . . . . .	. . . . .	197
Starting the iDRAC Configuration Utility . . .	. . . . .	198
Using the iDRAC Configuration Utility . . . .	. . . . .	198
LAN . . . . . . . . . . . . . . . . . . . .	. . . . .	199
IPMI Over LAN (On/Off) . . . . . . . . .	. . . . .	199
LAN Parameters . . . . . . . . . . . . .	. . . . .	200
Virtual Media . . . . . . . . . . . . . . .	. . . . .	202
LAN User Configuration . . . . . . . . .	. . . . .	202
	Contents		11
	Contents		11

Reset to Default . . . . . . . . . . . . . . . . . . 203

System Event Log Menu . . . . . . . . . . . . . . 203

Exiting the iDRAC Configuration Utility . . . . . . . 204

13Recovering and Troubleshooting the

Managed Server . . . . . . . . . . . . . . . . . . 205

Safety First–For You and Your System . . . . . . . . . .	205
Trouble Indicators . . . . . . . . . . . . . . . . . . . .	205
LED Indicators . . . . . . . . . . . . . . . . . . .	206
Hardware Trouble Indicators . . . . . . . . . . . .	206
Other Trouble Indicators . . . . . . . . . . . . . .	207
Problem Solving Tools . . . . . . . . . . . . . . . . . .	208
Checking the System Health . . . . . . . . . . . .	208
Checking the System Event Log (SEL) . . . . . . .	209
Checking the Post Codes . . . . . . . . . . . . . .	209
Viewing the Last System Crash Screen . . . . . .	210
Checking the Server Status Screen for Error
Messages . . . . . . . . . . . . . . . . . . . . .	211
Viewing the iDRAC Log . . . . . . . . . . . . . . .	218
Viewing System Information . . . . . . . . . . . .	220
Identifying the Managed Server in the
Chassis . . . . . . . . . . . . . . . . . . . . . . .	221
Using the Diagnostics Console . . . . . . . . . . .	222
Managing Power on a Remote System . . . . . .	223
Troubleshooting and Frequently Asked Questions . . .	224

A RACADM Subcommand Overview . . . . . 231

help . . . . . . . . . . . . . . . . . . . . . . . . . . . 231 config . . . . . . . . . . . . . . . . . . . . . . . . . . 232

12 Contents

getconfig . . . . . . . . . . . . . . . . . . . . . . . . .	234
getssninfo . . . . . . . . . . . . . . . . . . . . . . . .	236
getsysinfo . . . . . . . . . . . . . . . . . . . . . . . .	238
getractime . . . . . . . . . . . . . . . . . . . . . . . .	240
setniccfg . . . . . . . . . . . . . . . . . . . . . . . . .	241
getniccfg . . . . . . . . . . . . . . . . . . . . . . . . .	243
getsvctag . . . . . . . . . . . . . . . . . . . . . . . .	244
racreset . . . . . . . . . . . . . . . . . . . . . . . . .	244
racresetcfg . . . . . . . . . . . . . . . . . . . . . . .	245
serveraction . . . . . . . . . . . . . . . . . . . . . . .	246
getraclog . . . . . . . . . . . . . . . . . . . . . . . .	247
clrraclog . . . . . . . . . . . . . . . . . . . . . . . . .	248
getsel . . . . . . . . . . . . . . . . . . . . . . . . . .	249
clrsel . . . . . . . . . . . . . . . . . . . . . . . . . . .	250
gettracelog . . . . . . . . . . . . . . . . . . . . . . .	250
sslcsrgen . . . . . . . . . . . . . . . . . . . . . . . .	252
sslcertupload . . . . . . . . . . . . . . . . . . . . . .	253
sslcertdownload . . . . . . . . . . . . . . . . . . . .	254
sslcertview . . . . . . . . . . . . . . . . . . . . . . .	255
testemail . . . . . . . . . . . . . . . . . . . . . . . . .	257

Contents 13

testtrap . . . . . . . . . . . . . . . . . . . . . . . . . . 259

vmdisconnect . . . . . . . . . . . . . . . . . . . . . . 260

BiDRAC Property Database Group and Object Definitions . . . . . . . . . . . . . . . . . 261

Displayable Characters . . . . . . . . . . . . . . . . .	261
idRacInfo . . . . . . . . . . . . . . . . . . . . . . . . .	261
idRacProductInfo (Read Only) . . . . . . . . . . .	262
idRacDescriptionInfo (Read Only) . . . . . . . . .	262
idRacVersionInfo (Read Only) . . . . . . . . . . .	262
idRacBuildInfo (Read Only) . . . . . . . . . . . . .	263
idRacName (Read Only) . . . . . . . . . . . . . .	263
idRacType (Read Only) . . . . . . . . . . . . . . .	263
cfgLanNetworking . . . . . . . . . . . . . . . . . . . .	263
cfgDNSDomainNameFromDHCP
(Read/Write) . . . . . . . . . . . . . . . . . . . .	264
cfgDNSDomainName (Read/Write) . . . . . . . .	264
cfgDNSRacName (Read/Write) . . . . . . . . . .	265
cfgDNSRegisterRac (Read/Write) . . . . . . . . .	265
cfgDNSServersFromDHCP (Read/Write) . . . . . .	265
cfgDNSServer1 (Read/Write) . . . . . . . . . . .	266
cfgDNSServer2 (Read/Write) . . . . . . . . . . .	266
cfgNicEnable (Read/Write) . . . . . . . . . . . . .	266
cfgNicIpAddress (Read/Write) . . . . . . . . . . .	267
cfgNicNetmask (Read/Write) . . . . . . . . . . .	267
cfgNicGateway (Read/Write) . . . . . . . . . . .	268
cfgNicUseDhcp (Read/Write) . . . . . . . . . . .	268
cfgNicMacAddress (Read Only) . . . . . . . . . .	269

14 Contents

cfgUserAdmin . . . . . . . . . . . . . . . . . . . . . .	269
cfgUserAdminIpmiLanPrivilege (Read/Write) . . .	269
cfgUserAdminPrivilege (Read/Write) . . . . . . .	270
cfgUserAdminUserName (Read/Write) . . . . . .	271
cfgUserAdminPassword (Write Only) . . . . . . .	271
cfgUserAdminEnable . . . . . . . . . . . . . . . .	272
cfgUserAdminSolEnable . . . . . . . . . . . . . .	272
cfgEmailAlert . . . . . . . . . . . . . . . . . . . . . .	272
cfgEmailAlertIndex (Read Only) . . . . . . . . . .	273
cfgEmailAlertEnable (Read/Write) . . . . . . . . .	273
cfgEmailAlertAddress . . . . . . . . . . . . . . .	273
cfgEmailAlertCustomMsg . . . . . . . . . . . . .	274
cfgSessionManagement . . . . . . . . . . . . . . . .	274
cfgSsnMgtConsRedirMaxSessions
(Read/Write) . . . . . . . . . . . . . . . . . . . .	274
cfgSsnMgtWebserverTimeout (Read/Write) . . .	275
cfgSsnMgtSshIdleTimeout (Read/Write) . . . . .	275
cfgSsnMgtTelnetIdleTimeout (Read/Write) . . . .	276
cfgSerial . . . . . . . . . . . . . . . . . . . . . . . . .	276
cfgSerialSshEnable (Read/Write) . . . . . . . . .	276
cfgSerialTelnetEnable (Read/Write) . . . . . . . .	277
cfgRacTuning . . . . . . . . . . . . . . . . . . . . . .	277
cfgRacTuneHttpPort (Read/Write) . . . . . . . . .	277
cfgRacTuneHttpsPort (Read/Write) . . . . . . . .	278
cfgRacTuneIpRangeEnable . . . . . . . . . . . .	278
cfgRacTuneIpRangeAddr . . . . . . . . . . . . .	278
cfgRacTuneIpRangeMask . . . . . . . . . . . . .	279
cfgRacTuneIpBlkEnable . . . . . . . . . . . . . .	279
cfgRacTuneIpBlkFailCount . . . . . . . . . . . . .	279
cfgRacTuneIpBlkFailWindow . . . . . . . . . . .	280
cfgRacTuneIpBlkPenaltyTime . . . . . . . . . . .	280
Contents		15
Contents		15

cfgRacTuneSshPort (Read/Write) . . . . . . . . .	280
cfgRacTuneTelnetPort (Read/Write) . . . . . . . .	281
cfgRacTuneConRedirEncryptEnable
(Read/Write) . . . . . . . . . . . . . . . . . . . .	281
cfgRacTuneConRedirPort (Read/Write) . . . . . .	281
cfgRacTuneConRedirVideoPort (Read/Write) . . .	282
cfgRacTuneAsrEnable (Read/Write) . . . . . . . .	282
cfgRacTuneWebserverEnable (Read/Write) . . . .	282
cfgRacTuneLocalServerVideo (Read/Write) . . . .	283
ifcRacManagedNodeOs . . . . . . . . . . . . . . . . .	283
ifcRacMnOsHostname (Read/Write) . . . . . . . .	283
ifcRacMnOsOsName (Read/Write) . . . . . . . . .	284
cfgRacSecurity . . . . . . . . . . . . . . . . . . . . .	284
cfgSecCsrCommonName (Read/Write) . . . . . .	284
cfgSecCsrOrganizationName (Read/Write) . . . .	285
cfgSecCsrOrganizationUnit (Read/Write) . . . . .	285
cfgSecCsrLocalityName (Read/Write) . . . . . . .	285
cfgSecCsrStateName (Read/Write) . . . . . . . .	286
cfgSecCsrCountryCode (Read/Write) . . . . . . .	286
cfgSecCsrEmailAddr (Read/Write) . . . . . . . . .	286
cfgSecCsrKeySize (Read/Write) . . . . . . . . . .	287
cfgRacVirtual . . . . . . . . . . . . . . . . . . . . . .	287
cfgVirMediaAttached (Read/Write) . . . . . . . .	287
cfgVirAtapiSrvPort (Read/Write) . . . . . . . . . .	288
cfgVirAtapiSrvPortSsl (Read/Write) . . . . . . . .	288
cfgVirMediaBootOnce (Read/Write) . . . . . . . .	288
cfgFloppyEmulation (Read/Write) . . . . . . . . .	289
cfgActiveDirectory . . . . . . . . . . . . . . . . . . .	289
cfgADRacDomain (Read/Write) . . . . . . . . . .	289
cfgADRacName (Read/Write) . . . . . . . . . . .	290
cfgADEnable (Read/Write) . . . . . . . . . . . . .	290

16 Contents

cfgADAuthTimeout (Read/Write) . . . . . . . . . .	290
cfgADRootDomain (Read/Write) . . . . . . . . . .	291
cfgADSpecifyServerEnable (Read/Write) . . . . .	291
cfgADDomainController (Read/Write) . . . . . . .	291
cfgADGlobalCatalog (Read/Write) . . . . . . . . .	292
cfgADType (Read/Write) . . . . . . . . . . . . . .	292
cfgStandardSchema . . . . . . . . . . . . . . . . . . .	292
cfgSSADRoleGroupIndex (Read Only) . . . . . . .	293
cfgSSADRoleGroupName (Read/Write) . . . . . .	293
cfgSSADRoleGroupDomain (Read/Write) . . . . .	293
cfgSSADRoleGroupPrivilege (Read/Write) . . . .	293
cfgIpmiSol . . . . . . . . . . . . . . . . . . . . . . . .	294
cfgIpmiSolEnable (Read/Write) . . . . . . . . . .	294
cfgIpmiSolBaudRate (Read/Write) . . . . . . . . .	295
cfgIpmiSolMinPrivilege (Read/Write) . . . . . . .	295
cfgIpmiSolAccumulateInterval (Read/Write) . . .	295
cfgIpmiSolSendThreshold (Read/Write) . . . . . .	296
cfgIpmiLan . . . . . . . . . . . . . . . . . . . . . . . .	296
cfgIpmiLanEnable (Read/Write) . . . . . . . . . .	296
cfgIpmiLanPrivLimit (Read/Write) . . . . . . . . .	297
cfgIpmiLanAlertEnable (Read/Write) . . . . . . .	297
cfgIpmiEncryptionKey (Read/Write) . . . . . . . .	297
cfgIpmiPetCommunityName (Read/Write) . . . . .	298
cfgIpmiPef . . . . . . . . . . . . . . . . . . . . . . . .	298
cfgIpmiPefName (Read Only) . . . . . . . . . . .	298
cfgIpmiPefIndex (Read Only) . . . . . . . . . . . .	298
cfgIpmiPefAction (Read/Write) . . . . . . . . . .	299
cfgIpmiPefEnable (Read/Write) . . . . . . . . . .	299
cfgIpmiPet . . . . . . . . . . . . . . . . . . . . . . . .	300
cfgIpmiPetIndex (Read/Write) . . . . . . . . . . .	300

Contents 17

cfgIpmiPetAlertDestIpAddr (Read/Write) . . . . . 300

cfgIpmiPetAlertEnable (Read/Write) . . . . . . . . 300

CRACADM and SM-CLP

Equivalencies . . . . . . . . . . . . . . . . . . . . 303

Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . 315

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 325

18 Contents

iDRAC Overview

The Integrated Dell™ Remote Access Controller (iDRAC) is a systems management hardware and software solution that provides remote management capabilities, crashed system recovery, and power control functions for Dell PowerEdge™ systems.

The iDRAC uses an integrated System-on-Chip microprocessor for the remote monitor/control system. The iDRAC co-exists on the system board with the managed PowerEdge server. The server operating system, which may be a Microsoft® Windows® or Linux operating system, is concerned with executing applications; the iDRAC is concerned with monitoring and managing the server’s environment and state outside of the operating system.

You can configure the iDRAC to send you an e-mail or Simple Network Management Protocol (SNMP) trap alert for warnings or errors. To help you diagnose the probable cause of a system crash, iDRAC can log event data and capture an image of the screen when it detects that the system has crashed.

Managed servers are installed in a Dell M1000-e system enclosure (chassis) with modular power supplies, cooling fans, and a chassis management controller (CMC). The CMC monitors and manages all components installed in the chassis. Redundant CMCs can be added to provide hot failover if the primary CMC fails. The chassis provides access to the iDRACs through its LCD display, local console connections, and its web interface.

All network connections to the iDRAC are through the CMC network interface (CMC RJ45 connection port labelled "GB1"). The CMC routes traffic to the iDRACs on its servers through a private, internal network. This private management network is outside of the server’s data path and outside of the operating system’s control, that is, out-of-band. The managed servers’ inband network interfaces are accessed through I/O modules (IOMs) installed in the chassis.

iDRAC Overview		19

The iDRAC network interface is disabled by default. It must be configured before the iDRAC is accessible. After the iDRAC is enabled and configured on the network, it can be accessed at its assigned IP address with the iDRAC web interface, telnet or SSH, and supported network management protocols, such as Intelligent Platform Management Interface (IPMI).

iDRAC Management Features

The iDRAC provides the following management features:

•Dynamic Domain Name System (DDNS) registration

•Remote system management and monitoring using a Web interface, the local RACADM command line interface via console redirection, and the SM-CLP command line over a telnet/SSH connection

•Support for Microsoft Active Directory® authentication — Centralizes iDRAC user IDs and passwords in Active Directory using the standard schema or an extended schema

•Console Redirection — Provides remote system keyboard, video, and mouse functions

•Virtual Media — Enables a managed server to access a local media drive on the management station or ISO CD/DVD images on a network share

•Monitoring — Provides access to system information and status of components

•Access to system logs — Provides access to the system event log, the iDRAC log, and the last crash screen of the crashed or unresponsive system that is independent of the operating system state

•Dell OpenManage™ software integration — Enables you to launch the iDRAC Web interface from Dell OpenManage Server Administrator or IT Assistant

•iDRAC alert — Alerts you to potential managed node issues through an e- mail message or SNMP trap

•Remote power management — Provides remote power management functions, such as shutdown and reset, from a management console

•Intelligent Platform Management Interface (IPMI) support

•Secure Sockets Layer (SSL) encryption — Provides secure remote system management through the Web interface

20	iDRAC Overview

•Password-level security management — Prevents unauthorized access to a remote system

•Role-based authority — Provides assignable permissions for different systems management tasks

iDRAC Security Features

The iDRAC provides the following security features:

•User authentication through Microsoft Active Directory (optional) or hardware-stored user IDs and passwords

•Role-based authority, which enables an administrator to configure specific privileges for each user

•User ID and password configuration through the Web interface or SM-CLP

•SM-CLP and Web interfaces, which support 128-bit SSL encryption and 40-bit SSL encryption (for countries where 128 bit is not acceptable)

•Session time-out configuration (in seconds) through the Web interface or SM-CLP

•Configurable IP ports (where applicable)

NOTE: Telnet does not support SSL encryption.

•Secure Shell (SSH), which uses an encrypted transport layer for higher security

•Login failure limits per IP address, with login blocking from the IP address when the limit is exceeded

•Limited IP address range for clients connecting to the iDRAC

Supported Platforms

The iDRAC supports the following PowerEdge systems in the Dell PowerEdge M1000-e system enclosure:

•PowerEdge M600

•PowerEdge M605

iDRAC Overview		21

Check the iDRAC Readme file and the Dell PowerEdge Compatibility Guide located on the Dell Support website at support.dell.com for the latest supported platforms.

Supported Operating Systems

Table 1-1 lists the operating systems that support the iDRAC.

See the Dell OpenManage Server Administrator Compatibility Guide located on the Dell Support website at support.dell.com for the latest information.

Table 1-1. Supported Operating Systems

Operating System Operating System

Family

Microsoft

Windows

Red Hat® Linux®

Microsoft® Windows Server® 2003 R2 Standard and Enterprise (32-bit x86) Editions with SP2

Microsoft Windows Server 2003 Web, Standard and Enterprise (32-bit x86) Editions with SP2

Microsoft Windows Server 2003 Standard and Enterprise (x64) Editions with SP2

Microsoft Windows Storage Server 2003 R2 Express, Workgroup,

Standard, and Enterprise x64 Editions

Microsoft Windows Vista® Gold Business and Enterprise

Editions

Microsoft Windows Server 2008 Web, Standard, and Enterprise (32-bit x86) Editions

Microsoft Windows Server 2008 Web, Standard, Enterprise and Datacenter (x64) Editions

NOTE: When installing Windows Server 2003 with Service Pack 1, be aware of changes to DCOM security settings. For more information, see article 903220 from the Microsoft Support website at support.microsoft.com/kb/903220.

Enterprise Linux WS, ES, and AS (version 3) (x86 and x86_64)

Enterprise Linux WS, ES, and AS (version 4) (x86 and x86_64)

Enterprise Linux 5 (x86 and x86-64)

22	iDRAC Overview

Table 1-1. Supported Operating Systems (continued)

Operating System	Operating System
Family

SUSE® Linux	Enterprise Server 9 with Update 2 and Update 3 (x86_64)
	Enterprise Server 10 (Gold) (x86_64)

Supported Web Browsers

NOTICE: Console Redirection and Virtual Media only support 32-bit Web browsers. Using 64-bit Web browsers will generate unexpected results or failure.

Table 1-2 lists the Web browsers that are supported as iDRAC clients.

See the iDRAC Readme file and the Dell OpenManage Server Administrator Compatibility Guide located on the Dell Support website at support.dell.com for the latest information.

Table 1-2. Supported Web Browsers

Operating System	Supported Web Browser

Windows	Internet Explorer 6.0 (32-bit) with Service Pack 2
	(SP2) for Windows XP and Windows 2003 R2 SP2
	only
	Internet Explorer 7.0 for Windows Vista, Windows XP,
	and Windows 2003 R2 SP2 only
Linux	Mozilla Firefox 1.5	(32-bit) on SUSE Linux
	(version 10) only
	Mozilla Firefox 2.0	(32-bit)

iDRAC Overview		23

Supported Remote Access Connections

Table 1-3 lists the connection features.

Table 1-3. Supported Remote Access Connections

Connection	Features

iDRAC NIC	• 10Mbps/100Mbs/1Gbps Ethernet via CMC Gb Ethernet port
	• DHCP support
	• SNMP traps and e-mail event notification
	• Support for SM-CLP (telnet or SSH) command shell, for
	operations such as iDRAC configuration, system boot, reset,
	power-on, and shutdown commands
	• Support for IPMI utilities, such as ipmitool and ipmishell

iDRAC Ports

Table 1-4 lists the ports iDRAC listens on for connections. Table 1-5 identifies the ports that the iDRAC uses as a client. This information is required when opening firewalls for remote access to an iDRAC.

Table 1-4. iDRAC Server Listening Ports

Port Number	Function

22*	Secure Shell (SSH)
23*	Telnet
80*	HTTP
443*	HTTPS
623	RMCP/RMCP+
3668, 3669	Virtual Media Service
3770, 3771	Virtual Media Secure Service
5900*	Console Redirection keyboard/mouse
5901*	Console Redirection video

* Configurable port

24	iDRAC Overview

Table 1-5. iDRAC Client Ports

Port Number	Function

25	SMTP
53	DNS
68	DHCP-assigned IP address
69	TFTP
162	SNMP trap
636	LDAPS
3269	LDAPS for global catalog (GC)

Configuring the iDRAC

This section provides information about how to establish access to the iDRAC and to configure your management environment to use iDRAC.

Before You Begin

Gather the following items prior to configuring the iDRAC:

•Dell Chassis Management Controller User’s Guide

•Dell PowerEdge Installation and Server Management CD

•Dell Systems Management Consoles CD

•Dell PowerEdge Service and Diagnostic Utilities CD

•Dell PowerEdge Documentation CD

Interfaces for Configuring the iDRAC

You can configure the iDRAC using the iDRAC Configuration utility, the iDRAC Web interface, the local RACADM CLI, or the SM-CLP CLI. The local RACADM CLI is available after you have installed the operating system and the Dell PowerEdge server management software on the managed server. Table 2-1 describes these interfaces.

NOTICE: Using more than one configuration interface at the same time may generate unexpected results.

Table 2-1. Configuration Interfaces

Interface	Description

iDRAC	Accessed at boot time, the iDRAC Configuration utility is
Configuration	useful when installing a new PowerEdge server. Use it for
Utility	setting up the network and basic security features and for
	enabling other features.

Configuring the iDRAC		27

Table 2-1. Configuration Interfaces (continued)

Interface	Description

iDRAC Web	The iDRAC Web interface is a browser-based management
Interface	application that you can use to interactively manage the
	iDRAC and monitor the managed server. It is the primary
	interface for day-to-day tasks, such as monitoring system
	health, viewing the system event log, managing local iDRAC
	users, and launching the CMC Web interface and console
	redirection sessions.
CMC Web Interface	In addition to monitoring and managing the chassis, the CMC
	Web interface can be used to view the status of a managed
	server, configure iDRAC network settings, and to start, stop, or
	reset the managed server.
Chassis LCD Panel	The LCD panel on the chassis containing the iDRAC can be
	used to view the high-level status of the servers in the chassis.
	During initial configuration of the CMC, the configuration
	wizard allows you to enable DHCP configuration of iDRAC
	networking.
Local RACADM	The local RACADM command line interface runs on the
	managed server. It is accessed from either the iKVM or a
	console redirection session initiated from the iDRAC Web
	interface. RACADM is installed on the managed server when
	you install Dell OpenManage Server Administrator.
	RACADM commands provide access to nearly all iDRAC
	features. You can inspect sensor data, system event log records,
	and the current status and configuration values maintained in
	the iDRAC. You can alter iDRAC configuration values,
	manage local users, enable and disable features, and perform
	power functions such as shutting down or rebooting the
	managed server.
iVM-CLI	The iDRAC Virtual Media Command Line Interface
	(iVM-CLI) provides the managed server access to media on
	the management station. It is useful for developing scripts to
	install operating systems on multiple managed servers.

28	Configuring the iDRAC

Table 2-1. Configuration Interfaces (continued)

Interface	Description

SM-CLP	SM-CLP is the Server Management Workgroup Server
	Management-Command Line Protocol (SM-CLP)
	implementation incorporated in the iDRAC. The SM-CLP
	command line is accessed by logging into the iDRAC using
	telnet or SSH.
	SM-CLP commands implement a useful subset of the local
	RACADM commands. The commands are useful for scripting
	since they can be executed from a management station
	command line. The output of commands can be retrieved in
	well-defined formats, including XML, facilitating scripting and
	integration with existing reporting and management tools.
	See "RACADM and SM-CLP Equivalencies" on page 303 for a
	comparison of the RACADM and SM-CLP commands.
IPMI	IPMI defines a standard way for embedded management
	subsystems such as the iDRAC to communicate with other
	embedded systems and management applications.
	You can use the iDRAC Web interface, SM-CLP, or RACADM
	commands to configure IPMI Platform Event Filters (PEFs)
	and Platform Event Traps (PETs).
	PEFs cause the iDRAC to perform selectable actions (for
	example, rebooting the managed server) when it detects a
	condition. PETs instruct the iDRAC to send e-mail or IPMI
	alerts when it detects specified events or conditions.
	You can also use standard IPMI tools such as ipmitool and
	ipmishell with iDRAC when you enable IPMI Over LAN.

Configuration Tasks

This section is an overview of the configuration tasks for the management station, the iDRAC, and the managed server. The tasks to be performed include configuring the iDRAC so that it can be used remotely, configuring the iDRAC features you want to use, installing the operating system on the managed server, and installing management software on your management station and the managed server.

Configuring the iDRAC		29

The configuration tasks that can be used to perform each task are listed beneath the task.

NOTE: Before performing configuration procedures in this guide, the CMC and I/O modules must be installed in the chassis and configured, and the PowerEdge server must be physically installed in the chassis.

Configure the Management Station

Set up a management station by installing the Dell OpenManage software, a Web browser, and other software utilities.

•See "Configuring the Management Station" on page 41

Configure iDRAC Networking

Enable the iDRAC network and configure IP, netmask, gateway, and DNS addresses.

NOTE: Changing the iDRAC network settings terminates all current network connections to the iDRAC.

NOTE: The option to configure the server using the LCD panel is available only during the CMC initial configuration. Once the chassis is deployed, the LCD panel cannot be used to reconfigure the iDRAC.

NOTE: The LCD panel can be used to enable DHCP to configure the iDRAC network. If you want to assign static addresses, you must use the iDRAC Configuration Utility or the CMC Web interface.

•Chassis LCD Panel — see the Dell Chassis Management Controller User’s Guide.

•iDRAC configuration utility — see "LAN" on page 199

•CMC Web interface — see "Configuring Networking Using the CMC Web Interface" on page 33

•RACADM — see "cfgLanNetworking" on page 263

30	Configuring the iDRAC

+ 304 hidden pages