The User Documentation Department would like to
know your opinion of this manual. Your feedback helps
us optimize our documentation to suit your individual
needs.
Feel free to send us your comments by e-mail to
manuals@fujitsu-siemens.com.
Certified documentation
according to DIN EN ISO 9001:2008
To ensure a consistently high quality standard and
user-friendliness, this documentation was created to
meet the regulations of a quality management system
which complies with the requirements of the standard
DIN EN ISO 9001:2008.
cognitas. Gesellschaft für Technik-Dokumentation mbH
12.2.2.5Generating encrypted passwords with iRMC_PWD.exe . . 424
iRMC S2/S3
1Preface
Modern server systems are becoming increasingly complex. The requirements
with respect to the management of such systems are growing accordingly.
In response to this development, a number of vendors founded the “Intelligent
Platform Management Interface” (IPMI) initiative with the objective of defining a
standardized, abstract, message-based interface between the central system
controller (Baseboard Management Controller - BMC) and intelligent hardware
for platform management. For further details on IPMI, please refer to section
"IPMI - technical background" on page 21.
The integrated Remote Management Controllers iRMC S2 and iRMC S3 (in the
following iRMC S2/S3 for short) each represent a BMC with integrated LAN
connection and extended functionality. In this way, the iRMC S2/S3 offers
comprehensive control over PRIMERGY servers, irrespective of the system
status. In particular, the iRMC S2/S3 allows for out-of-band management
(Lights Out Management, LOM) of PRIMERGY servers. Out-of-band
management uses of a dedicated management channel that enables a system
administrator to monitor and manage servers via remote control regardless of
whether the server is powered on.
Figure 1: iRMC S2 on the system board of a PRIMERGY server
iRMC S2/S3 11
Purpose and target groups of the manual
As an autonomous system on the system board of a modern PRIMERGY
server, the iRMC S2/S3 has its own operating system, its own web server,
separate user management and independent alert management. The
iRMC S2/S3 remains powered up even when the server is in stand-by mode.
This manual describes how to configure the iRMC S2/S3 and the various user
interfaces available.
1.1Purpose and target groups of the manual
This manual is aimed at system administrators, network administrators, and
service staff who have a sound knowledge of hardware and software. It provides
basic information on the technology behind IPMI and deals with the following
aspects in detail:
– Logging on to the iRMC S2/S3
– Configuring the iRMC S2/S3
– User management on the iRMC S2/S3
– Advanced Video Redirection via iRMC S2/S3
– Remote Storage via iRMC S2/S3
– iRMC S2/S3 web interface
– Telnet/SSH-based interface (Remote Manager) of the iRMC S2/S3
– Configuring the iRMC S2/S3 with the Server Configuration Manager
– Updating the firmware
– Remote installation of the operating system via iRMC S2/S3
– IPMI OEM Commands
Service
If you have any further questions on remote management for PRIMERGY
servers, contact the service and support partners responsible for you.
Other information
http://www.ts.fujitsu.com
12 iRMC S2/S3
Functions of the iRMC S2/S3
1.2Functions of the iRMC S2/S3 (overview)
The iRMC S2/S3 supports a wide range of functions that are provided by
default. With Advanced Video Redirection (AVR) and Remote Storage, the
iRMC S2/S3 also provides two additional advanced features for the remote
management of PRIMERGY servers. To use AVR and Remote Storage, you
require a valid license key, which can be purchased separately.
Standard functions of the iRMC S2/S3
● Browser access
The iRMC S2/S3 features its own web server which can be accessed by the
management station from a standard web browser.
● Security (SSL, SSH)
Secure access to the Web server and secure graphical console redirection
including mouse and keyboard can be provided over HTTPS/SSL. An
encrypted connection protected using SSH mechanisms can be set up to
access the iRMC S2/S3 using the Remote Manager. The Remote Manager
is an alphanumeric user interface for the iRMC S2/S3.
● ServerView Integration
The ServerView agents detect the iRMC S2/S3 and automatically assign it
to the relevant server. This means that it is possible to start the iRMC S2/S3
web interface and text console redirection using the ServerView Remote
Management Frontend directly from ServerView Operations Manager.
● Power management
Irrespective of the status of the system, you have the following options for
powering the managed server up or down from the remote workstation
– using the iRMC S2/S3 web interface
– using the Remote Manager and the command line interface (CLP)
– with a script.
iRMC S2/S3 13
Functions of the iRMC S2/S3
● Power consumption control
The iRMC S2/S3 allows comprehensive power consumption control on the
managed server. In addition, you can specify the mode (minimum power
consumption or maximum performance) that the iRMC S2/S3 uses to control
power consumption on the managed server. You can switch between these
modes as required.
● Customer Self Service (CSS)
Summary tables for the server components, sensors and the power supply
on the iRMC S2/S3 web interface provide information in a separate column
as to whether the server component affected is a CSS component or not. In
addition, error list of the system event log (SEL) shows for every event
whether it has been triggered by a CSS component.
● Text console redirection
You can start a Telnet/SSH session to the iRMC S2/S3 from the ServerView
Remote Management Frontend. This calls the Remote Manager, via which
you can start a text console redirection session.
● Basic functions of a BMC
The iRMC S2/S3 supports the basic functions of a BMC such as voltage
monitoring, event logging and recovery control.
● “Headless” system operation
The managed server does not require a mouse, monitor or keyboard to be
connected. The benefits of this include lower costs, far simpler cabling in the
rack and increased security.
● Identification LED
To facilitate identification of the system, for instance if it is installed in a fully
populated rack, you can activate the identification LED from the iRMC S2/S3
web interface.
● Global error LED
A global error LED informs you of the status of the managed system at all
times and at the same time shows the CSS (Customer Self Service) status.
● Power LED
The power LED informs you whether the server is currently switched on or
off.
14 iRMC S2/S3
Functions of the iRMC S2/S3
● LAN
On some systems, the LAN interface of the fitted system NIC (Network
Interface Card) on the server is reserved for the management LAN. On other
systems, you have the option of configuring this LAN interface to
– reserve it for the management LAN
– set it up for shared operation with the system or
– make it completely available to the system.
The ports marked with a wrench symbol are assigned to the iRMC S2/S3
(see figure 7 on page 42).
● Command line interface (CLP)
In addition to the Remote Manager, the iRMC S2/S3 also supports SMASH
CLP (System Management Architecture for Server Hardware Command Line Protocol) as standardized by the DMTF (Distributed Management Task
Force).
● Simple configuration - interactive or script-based
The following tools are available for configuring the iRMC S2/S3:
– iRMC web interface
– Server Configuration Manager
– The server management tool IPMIVIEW
– BIOS Setup
It is also possible to carry out configuration with the Server Configuration
Manager or IPMIVIEW using scripts. This means that it is possible to
configure the iRMC S2/S3 when the server is first configured via ServerView
Installation Manager. It is also possible to configure a large number of
servers on the basis of scripts.
● Support for the LocalView service panel
If PRIMERGY servers are equipped with a ServerView local service panel,
this module allows you to determine what module is faulty and whether you
can replace the faulty module yourself.
● Local user management
The iRMC S2/S3 has its own user management function which allows up to
16 users to be created with passwords and to be assigned various rights
depending on the user groups they belong to.
iRMC S2/S3 15
Functions of the iRMC S2/S3
● Global user management using a directory service
The global user IDs for the iRMC S2/S3 are stored centrally in the directory
service's directory. This makes it possible to manage the user identifications
on a central server. They can therefore be used by all the iRMC S2/S3s that
are connected to this server in the network.
The following directory services are currently supported for iRMC S2/S3
user management:
–Microsoft
–Novell
®
Active Directory
®
eDirectory
– OpenLDAP
– OpenDS
● CAS-based single sign-on (SSO) authentication
The iRMC S2/S3 supports Centralized Authentication Service (CAS)
configuration, which allows you to configure the iRMC S2/S3 web interface
for CAS-based single sign-on (SSO) authentication.
The first time a user logs in to an application (e.g. the iRMC S2/S3 web
interface) within the SSO domain of the CAS service, they are prompted for
their credentials by the CAS-specific login screen. Once they have been
successfully authenticated by the CAS service, the user is granted access
to the iRMC S2/S3 web interface as well as to any other service within the
SSO domain without being prompted for login credentials again.
● DNS / DHCP
The iRMC S2/S3 provides support for automatic network configuration. It
has a default name and DHCP support is set by default so that the
iRMC S2/S3 gets its IP address from the DHCP server. The iRMC S2/S3
name is registered by the Domain Name Service (DNS). Up to five DNS
servers are supported. If DNS/DHCP is not available, the iRMC S2/S3 also
supports static IP addresses.
● Power supply
The iRMC S2/S3 is powered by the standby supply of the system.
● Alert management
The alert management facility of the iRMC S2/S3 provides the following
options for forwarding alerts (alerting):
– Platform Event Traps (PET) are sent via SNMP.
– Direct alerting by email.
16 iRMC S2/S3
Functions of the iRMC S2/S3
– A modem can be connected to the serial interface. This can then be used
to send alerts (e.g. to a mobile phone via SMS).
In addition, the iRMC S2/S3 provides the ServerView agents with all the
relevant information.
● Read, filter and save the system event log (SEL).
You can view, save and delete the contents of the SEL
– by using the iRMC S2/S3 web interface or
– by using the Telnet/SSH-based interface (Remote Manager) of the
iRMC S2/S3.
● Read, filter and save the internal event log (iEL).
You can view, save and delete the contents of the iEL
– by using the iRMC S2/S3 web interface or
– by using the Telnet/SSH-based interface (Remote Manager) of the
iRMC S2/S3.
Extended functionality of the iRMC S2/S3
Alongside the standard functionality, the iRMC S2/S3 also supports the
Advanced Video Redirection and Remote Storage functions.
● Advanced Video Redirection (AVR)
The iRMC S2/S3 supports Advanced Video Redirection which offers the
following benefits:
– Operation over a standard web browser. No additional software needs to
be installed in the management station other than the Java Runtime
Environment.
– System-independent graphical and text console redirection (including
mouse and keyboard).
– Remote access for boot monitoring, BIOS administration and operation
of the operating system.
– AVR supports up to two simultaneous “virtual connections” for working
on a server from a different location. It also reduces the load on the
network by using hardware and video compression.
iRMC S2/S3 17
Functions of the iRMC S2/S3
– Local monitor-off support: It is possible to power down the local screen
of the managed PRIMERGY server during an AVR session in order to
prevent unauthorized persons from observing user input and actions
carried out on the local server screen during the AVR session.
– Low bandwidth
In the case of a reduced data transfer rate, you can configure a lower
bandwidth (bits per pixel, bpp) in terms of color depth for your current
AVR session.
● Remote Storage
Remote Storage makes a “virtual” drive available which is physically located
on a remote workstation or made available centrally on the network using a
Remote Storage server.
The “virtual” drives available with Remote Storage are simply managed in
much the same way as local drives and offer the following options:
– Read and write data.
– Boot from Remote Storage.
– Install drivers and small applications.
– Update BIOS from remote workstation.
(BIOS update via USB)
Remote Storage supports the following device types to provide a “virtual
drive” on the remote workstation:
– CD ROM
–DVD ROM
– Memory stick
– Floppy image
– CD ISO image
– DVD ISO image
A Remote Storage server provides an ISO image centrally on the network in
the form of a “virtual drive”.
Remote Storage permits either the simultaneous connection of up to two
“virtual” drives at the remote workstation or the provision of an ISO image
via a Remote Storage server.
18 iRMC S2/S3
Communication interfaces of the iRMC S2/S3
1.3Communication interfaces of the
iRMC S2/S3
The iRMC S2/S3 provides the following communication interfaces:
● iRMC S2/S3 web interface (web interface)
The connection to the iRMC S2/S3 web server is established over a
standard web browser (e.g. Microsoft Internet Explorer, Mozilla Firefox).
Among other things, the web interface of the iRMC S2/S3 provides you with
access to all system information and data from the sensors such as fan
speeds, voltages, etc. You can also configure text-based console redirection
and start graphical console redirection (Advanced Video Redirection, AVR).
In addition, administrators can fully configure the iRMC S2/S3 over the web
interface. Secure access to the iRMC S2/S3 web server can be provided
with HTTPS/SSL.
Operation of the iRMC S2/S3 over the web interface is described in chapter
"iRMC S2/S3 web interface" on page 135.
● Remote Manager: Text-based Telnet/SSH interface via LAN
You can call the Remote Manager
– from the ServerView Remote Management Frontend,
– directly from a Telnet/SSH client.
The alphanumeric user interface of the Remote Manager provides you with
access to system and sensor information, power management functions and
the error event log. In addition, you can launch text console redirection or a
SMASH CLP shell. If you call the Remote Manager over SSH (Secure Shell),
the connection between the Remote Manager and the managed server is
encrypted.
Operation of the iRMC S2/S3 using the Remote Manager is described in
chapter "iRMC S2/S3 via Telnet/SSH (Remote Manager)" on page 321.
● Remote Manager (Serial): Text-based serial interface over Serial 1
The Remote Manager (serial) interface is identical to the Remote Manager
interface.
iRMC S2/S3 19
Communication protocols used by the iRMC S2/S3
1.4Communication protocols used by the
iRMC S2/S3
The communication protocols and ports used by the iRMC S2/S3 are shown in
table 1.
Remote side of the
connection
RMCP→623/UDP
HTTP port→80/TCP
HTTPs port→443/TCP
Telnet→3172/TCP
SSH→22/TCP
Tr a p→162/UDP
Email→25/TCP
Remote Storage→5901/TCP
VNC ports
Standard port→80/TCP
Secure port→443/TCP
Table 1: Communication protocols and ports used by the iRMC S2/S3
Communication
direction
←623/UDP
←80/TCP
←443/TCP
←3172/TCP
←22/TCP
←25/TCP
←5901/TCP
←80/TCP
←443/TCP
iRMC S2/S3 side of the connection
(port number / protocol)
I As of iRMC S2/S3 firmware version 5.00, the Remote Storage port is
used only for the Remote Storage server and client-internal
communications. For integrated Remote Storage (via the Java applet),
the http port is used.
20 iRMC S2/S3
IPMI - technical background
1.5IPMI - technical background
The iRMC S2/S3 makes the BMC functions available over the IPMI interface.
Intelligent Platform Management
The “Intelligent Platform Management” initiative is a response to the increasing
complexity of modern server systems. A number of manufacturers have joined
this initiative in order to come up with a new solution for monitoring these server
systems.
The term “Intelligent Platform Management” expresses the core aspect of this
approach to the solution: Functions for monitoring and recovery of systems are
implemented directly in the hardware and firmware for platform management.
Objective
The objective was to define a standardized, abstract and message-based
interface between the central system controller (Baseboard Management
Controller - BMC) and intelligent platform management hardware.
The standardization committees combined the central characteristics of various
platform management modules into standardized descriptions.
Definition
The IPMI specification defines:
“IPMI is a hardware level interface specification that is ‘management
software neutral’ providing monitoring and control functions that can be
exposed through standard management software interfaces such as
DMI, WMI, CIM, SNMP, etc. As a hardware level interface, it sits at the
bottom of a typical management software stack” [see section "IPMI and
other management standards" on page 22].
iRMC S2/S3 21
IPMI - technical background
Advantage
The IPMI specifications ensure the independence of functions for inventory,
logging, recovery and monitoring of a system by the system processor, BIOS or
operating system.
This means that a system can still be involved in platform management when it
is shut down and turned off.
IPMI and other management standards
IPMI is best used in conjunction with system management software running
under the relevant operating system. Integration of the IPMI functionality into the
management functionality offered by a management application and the
operating system results in a powerful platform management environment.
An overview of the relationship between IPMI and the management software
stack is shown by figure 2:
Figure 2: IPMI in the management software stack (source: IPMI specification, see section
"References" on page 29)
22 iRMC S2/S3
IPMI - technical background
IPMI, IPMB and ICMB
The IPMI initiative resulted in three central standards:
– IPMI. Intelligent Platform Management Interface Specification
describes the higher-level architecture, the current commands, event
formats, data packets and properties that are used in IPMI-based systems.
– IPMB. Intelligent Platform Management Bus
2
is an I
C based (write only) bus, which provides a standardized connection
between various modules in a common housing.
IPMB can also be used as a standardized interface for remote management
modules.
– ICMB. Intelligent Chassis Management Bus
(Not currently implemented in the ServerView remote management
environment.)
provides a standardized interface for exchange of platform management
information and for control across systems. ICMB is designed in such a way
that it can be implemented with a device that is connected to the IPMB.
IPMI implementation
The core element of an IPMI implementation is the Baseboard Management
Controller (BMC).
The BMC performs the following tasks:
– The BMC organizes the interface between the system management
software and the platform management hardware.
– It provides autonomous functions for monitoring, event logging and recovery
control.
– The BMC acts as a gateway between the system management software and
IPMB.
IPMI allows platform management to be extended: Additional management
controllers can be connected via the IPMB. The IPMB is an I
2
C based serial
bus, which runs between the main modules of the system. It is used for
communication with and between the management controllers.
With the support of multiple management controllers, IPMI provides a scalable
architecture: A complex server system can use multiple controllers for
monitoring different subsystems, e.g. power supplies, hot swap RAID drive
modules etc.
iRMC S2/S3 23
IPMI - technical background
In addition, IPMI provides ‘low level’ I2C commands, which can be accessed via
a management controller connected to the IPMB on 'unintelligent' I
2
C modules
that cannot process IPMI commands.
An overview of the fundamental elements of an IPMI implementation is available
in figure 3 on page 25.
24 iRMC S2/S3
IPMI - technical background
Figure 3: IPMI block diagram (source: IPMI specification, see section
"References" on page 29)
iRMC S2/S3 25
IPMI - technical background
IPMI and “in band” and “out of band” management
In the field of system management, a distinction is made between “in-band” and
“out-of-band” management:
– The term “in-band” management is used when the operating system is
running on the managed server.
– The term “out-of-band” management is used when the operating system is
not running on the managed server, for instance if the hardware is faulty.
As different interfaces are available in an environment with IPMI compatible
systems, you can manage IPMI compatible systems either “in band” or “out of
band”.
IPMI-over-LAN
“IPMI-over-LAN” is the current name for the specification of the LAN interface in
the IPMI standard. This specification stipulates how IPMI messages can be sent
to or from the BMC of a managed system - encapsulated in RMCP (Remote
Management Control Protocol) data packets. These RMCP data packets are
transferred via an Ethernet LAN connection using the UDP (User Datagram
Protocol) under IPv4 (Internet Protocol Version 4).
The RMCP protocol has been specified to support the management of system
statuses in which the operating system is not running. The RMCP is a simple
inquiry/response protocol.
The interface for such a connection is provided on an onboard LAN controller
assigned to the BMC.
I The interface can only be provided by an on-board LAN controller, not by
an inserted LAN card.
26 iRMC S2/S3
IPMI - technical background
Of the two ports that RCMP uses under UDP, the BMC communicates with the
LAN controller via port 623 (primary RMCP Port).
Figure 4: BMC and LAN controller
Serial Over LAN interface (SOL)
“Serial Over LAN” is an interface compliant with the IPMI V2.0 standard, which
controls transfer of serial data over a LAN connection. In particular, SOL
specifies the packet formats and protocols for transferring serial data streams
over a LAN between the serial controller on the managed computer and a
remote workstation. SOL is based on the IPMI-over-LAN specification.
In order to establish an SOL connection, a remote management application first
initiates an IPMI-over-LAN session with the BMC. After this has been done, the
SOL services can be activated from the remote workstation. The data traffic
between the serial controller and the remote workstation is handled over the
same IPMI session as the IPMI commands.
As soon as an SOL connection has been established, data transfer between the
serial controller and the remote workstation is carried out as follows:
– Transfer from the serial controller to the remote workstation:
The data stream issued by the serial controller is partitioned by the BMC,
packaged and then sent to the remote workstation over the LAN.
– Transfer from the remote workstation to the serial controller:
BMC unpacks the characters contained in the packages sent by the remote
workstation and forwards them to the serial controller as a character stream.
iRMC S2/S3 27
IPMI - technical background
Figure 5: BMC and SOL
The SOL character data is then exchanged between the BMC of the managed
system and the remote workstation as SOL messages. The SOL messages are
encapsulated in RMCP+ data packets and transferred in UDP datagrams over
an Ethernet LAN connection using IPv4 (Internet Protocol Version 4). The
RMCP+ protocol is based on the RMCP protocol, but includes extensions for
encryption, authentication, etc.
Serial over LAN permits “headless” management by console redirection by both
the BIOS and the operating system of the managed server. High-cost
concentrator solutions are not required.
Channel concept under IPMI
‘Channels’ provide the mechanisms with which IPMI messages are routed to
the BMC via various connection carriers. Up to nine channels can be supported.
The system interface and the primary IPMB are fixed. The other seven channels
are available for the implementation.
Channels can be either ‘session based’ or ‘sessionless’. The ‘session’ concept
has two meanings: It is either a concept for user authentication (see the section
"User identifications" on page 29) or a concept for routing multiple IPMI
message streams via a single channel.
Examples of ‘session based’ channels are LAN channels or serial / modem
channels. Examples of ‘sessionless’ channels are the system interface and the
IPMB.
28 iRMC S2/S3
Data Center Management Interface (DCMI)
User identifications
For ‘session based’ channels (see the section "Channel concept under IPMI" on
page 28), a user login is necessary. By contrast, the ‘sessionless’ channels
have no user authentication.
Under IPMI, the user configuration is channel specific. Thus, users can have
different privileges depending on whether they are accessing the BMC via the
LAN channel or the serial channel.
References
Information about the IPMI standards can be found on the Internet:
The iRMC S2/S3 supports the DCMI (Data Center Management Interface)
protocol, which is compliant with the IPMI V2.0 standard. DCMI has been
designed to improve manageability and energy efficiency of server systems that
are deployed in large data centers.
To meet the hardware management requirements of servers within data
centers, DCMI supports, among others, the following key features:
– Inventory functions (server identification)
– Power Management and power monitoring
– Power consumption monitoring and control
– Event logging
– Temperature monitoring
Detailed information about DCMI can be found on the DCMI home page:
http://www.intel.com/technology/product/DCMI
iRMC S2/S3 29
Changes compared with the previous version
1.7Changes since the previous versions of the
manual
iRMC S2/S3 - integrated Remote Management Controller
(edition Ju
This manual refers to the iRMC S2/S3 firmware version 6.5x and replaces the
following online manual: “iRMC S2/S3 - integrated Remote Management
Controller”, May 2012 edition.
The manual includes the following updates:
● The "0 Watt Technology" feature is described in Chapter "7 iRMC S2/S3 web
interface".
● The former chapter "12 IPMI OEM Commands" has been expanded and is
now an Appendix ("12 Appendix") to the manual, containing the following
sections:
– "12.1 IPMI OEM Commands supported by the iRMC S2/S3" (former
– "12.2 Configuring the iRMC S2/S3 via SCCI and scripted configuration"
ly 2012)
chapter "12 IPMI OEM Commands")
(new section).
iRMC S2/S3 - integrated Remote Management Controller
(edition May 2012)
This manual refers to the iRMC S2/S3 firmware version 6.5x and replaces the
following online manual: “iRMC S2 - integrated Remote Management
Controller”, November 2011 edition.
New iRMC S2/S3 features (described in Chapter "7 iRMC S2/S3 web
interface"):
● Agentless HDD monitoring (iRMC S3 only)
If the managed server supports the "agentless HDD monitoring" feature, the
HDD<n> status of each individual HDD is directly read and reported to the
iRMC S2/S3 via a dedicated lightpath status sensor and thus can be
displayed even in the case no ServerView agents are running.