HP E iLO 5 User Manual

HPE iLO 5 User Guide

1.15

Abstract

This guide provides information about configuring, updating, and operating HPE ProLiant Gen10 servers and HPE Synergy compute modules by using the HPE iLO 5 firmware. This document is intended for system administrators, Hewlett Packard Enterprise representatives, and Hewlett Packard Enterprise Authorized Channel Partners who are involved in configuring and using Hewlett Packard Enterprise servers that include iLO 5.

Part Number: 880740-002a Published: January 2018 Edition: 2

Notices

The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.

Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.

Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise website.

Acknowledgments

Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

Java® and Oracle® are registered trademarks of Oracle and/or its affiliates.

Google™ is a trademark of Google Inc.

Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.

Red Hat® is a registered trademark of Red Hat, Inc. in the United States and other countries.

SD is a trademark or registered trademark of SD-3C in the United States, other countries or both.

VMware® is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions.

iLO.......................................................................................................... 16

Setting up iLO........................................................................................19

iLO key features..........................................................................................................................16

ROM-based configuration utility..................................................................................................17

iLO mobile app............................................................................................................................17

iLO RESTful API......................................................................................................................... 18

RESTful Interface Tool................................................................................................................18

iLO scripting and command line..................................................................................................18

Preparing to set up iLO............................................................................................................... 19

iLO network connection options....................................................................................... 19

NIC teaming with Shared Network Port configurations.................................................... 20

iLO IP address acquisition............................................................................................... 21

iLO access security.......................................................................................................... 21

iLO configuration tools..................................................................................................... 22

Initial setup steps: Process overview.......................................................................................... 23

Connecting iLO to the network....................................................................................................23

Setting up iLO by using the iLO 5 Configuration Utility............................................................... 24

Configuring a static IP address (iLO 5 Configuration Utility)............................................ 24

Managing local user accounts with the iLO 5 Configuration Utility.................................. 25

Logging in to iLO for the first time............................................................................................... 27

iLO default credentials................................................................................................................ 27

iLO licensed features.................................................................................................................. 27

iLO driver support........................................................................................................................28

Installing the iLO driver............................................................................................................... 28

Using the iLO web interface.................................................................30

iLO web interface........................................................................................................................ 30

Supported browsers....................................................................................................................30

Browser requirements.................................................................................................................30

Configuring the Internet Explorer JavaScript setting...................................................................30

Logging in to the iLO web interface ........................................................................................... 31

Cookie sharing between browser instances and iLO..................................................................31

iLO web interface........................................................................................................................ 33

Using the iLO controls.................................................................................................................33

Starting a remote management tool from the login page............................................................34

Changing the language from the login page............................................................................... 35

Viewing iLO information and logs....................................................... 36

Viewing iLO overview information...............................................................................................36

System information details............................................................................................... 36

System status details....................................................................................................... 37

Connection to HPE status................................................................................................ 38

Managing iLO sessions...............................................................................................................38

Session list details............................................................................................................38

iLO Event Log ............................................................................................................................ 39

Contents 3

Viewing the event log....................................................................................................... 39

Saving the event log to a CSV file....................................................................................41

Clearing the event log...................................................................................................... 41

Integrated Management Log.......................................................................................................41

Viewing the IML................................................................................................................42

Marking an IML entry as repaired.................................................................................... 44

Adding a maintenance note to the IML............................................................................ 44

Saving the IML to a CSV file............................................................................................ 45

Clearing the IML...............................................................................................................45

Active Health System..................................................................................................................45

Active Health System data collection............................................................................... 46

Active Health System Log................................................................................................ 46

Downloading the Active Health System Log for a date range..........................................46

Downloading the entire Active Health System Log.......................................................... 47

Extracting the Active Health System Log by using curl....................................................48

Clearing the Active Health System Log............................................................................49

Viewing iLO self-test results........................................................................................................50

iLO self-tests.................................................................................................................... 50

Viewing general system information...................................................52

Viewing health summary information.......................................................................................... 52

Redundancy status.......................................................................................................... 52

Subsystem and device status.......................................................................................... 52

Subsystem and device status values............................................................................... 52

Viewing processor information....................................................................................................53

Processor details..............................................................................................................53

Viewing memory information.......................................................................................................54

Advanced Memory Protection details...............................................................................54

Memory Summary............................................................................................................56

Physical Memory Details..................................................................................................57

Logical Memory Details....................................................................................................57

Memory Details pane....................................................................................................... 58

Viewing network information....................................................................................................... 60

Physical Network Adapters.............................................................................................. 60

Logical Network Adapters................................................................................................ 62

Viewing the device inventory.......................................................................................................62

Device Inventory details................................................................................................... 62

Device status values........................................................................................................ 63

Viewing PCI slot details....................................................................................................63

Viewing storage information........................................................................................................63

Supported storage components....................................................................................... 64

Smart Array details...........................................................................................................64

Direct-attached storage details........................................................................................ 66

4 Contents

Managing firmware, OS software, and language packs.................... 68

Firmware updates....................................................................................................................... 68

Online firmware update.................................................................................................... 68

Online firmware update methods..................................................................................... 68

Offline firmware update.................................................................................................... 69

Offline firmware update methods..................................................................................... 69

Viewing and updating firmware from the iLO web interface........................................................70

Updating iLO or server firmware by using the Flash Firmware feature............................70

Viewing installed firmware information.............................................................................73

Replacing the active system ROM with the redundant system ROM...............................74

iLO Repository............................................................................................................................ 74

Adding a component to the iLO Repository..................................................................... 74

Installing a component from the iLO Repository.............................................................. 75

Removing a component from the iLO Repository............................................................ 76

Viewing iLO Repository summary and component details...............................................76

Install Sets...................................................................................................................................77

Installing an install set...................................................................................................... 77

Removing an Install Set................................................................................................... 78

Viewing Install Sets.......................................................................................................... 78

System Recovery Set.......................................................................................................79

Installation Queue....................................................................................................................... 79

Viewing the Installation Queue.........................................................................................80

Removing a task from the Installation Queue.................................................................. 81

Installing language packs............................................................................................................81

Viewing software information...................................................................................................... 81

Product-related Software details...................................................................................... 82

Running Software details................................................................................................. 82

Installed Software details................................................................................................. 82

Configuring and using iLO Federation............................................... 83

iLO Federation............................................................................................................................ 83

Configuring iLO Federation.........................................................................................................83

Prerequisites for using the iLO Federation features.........................................................83

iLO Federation network requirements..............................................................................84

Configuring the multicast options for one iLO system at a time ...................................... 84

iLO Federation groups..................................................................................................... 85

Managing iLO Federation group memberships (local iLO system).................................. 87

Adding iLO Federation group memberships (multiple iLO systems)................................89

Configuring Enclosure iLO Federation Support............................................................... 92

Using the iLO Federation features.............................................................................................. 92

Selected Group list...........................................................................................................92

Exporting iLO Federation information to a CSV file......................................................... 93

iLO Federation Multi-System view....................................................................................94

Viewing the iLO Federation Multi-System Map................................................................ 96

iLO Federation Group Virtual Media.................................................................................96

iLO Federation Group Power........................................................................................... 98

Configuring group power capping.................................................................................. 100

iLO Federation Group Firmware Update........................................................................102

Installing license keys (iLO Federation group) .............................................................. 105

iLO Integrated Remote Console........................................................ 107

.NET IRC requirements.............................................................................................................108

Microsoft .NET Framework.............................................................................................108

Microsoft ClickOnce....................................................................................................... 109

Starting the Integrated Remote Console...................................................................................109

Starting the .NET IRC.....................................................................................................109

Starting the .NET IRC from the Overview page............................................................. 109

Starting the Java IRC (Oracle JRE)................................................................................110

Starting the Java IRC (OpenJDK JRE)...........................................................................110

Starting the Java IRC from the Overview page.............................................................. 111

Acquiring the Remote Console..................................................................................................111

Using the Remote Console virtual power switch.......................................................................112

Virtual Power Button options.......................................................................................... 112

Using iLO Virtual Media from the Remote Console...................................................................113

Contents 5

Shared Remote Console (.NET IRC only).................................................................................113

Joining a Shared Remote Console session....................................................................113

Console Capture (.NET IRC only).............................................................................................114

Viewing Server Startup and Server Prefailure sequences............................................. 114

Saving Server Startup and Server Prefailure video files................................................ 115

Capturing video files with the Remote Console..............................................................115

Viewing saved video files............................................................................................... 116

Remote Console hot keys......................................................................................................... 116

Creating hot keys............................................................................................................117

Keys for configuring Remote Console computer lock keys and hot keys.......................117

Resetting hot keys..........................................................................................................118

Viewing configured remote console hot keys (Java IRC only)....................................... 118

Configuring Remote Console Computer Lock settings............................................................. 119

Remote Console Computer Lock options.......................................................................119

Configuring the Integrated Remote Console Trust setting (.NET IRC)..................................... 119

Using a text-based Remote Console.................................................121

Using the iLO Virtual Serial Port............................................................................................... 121

Configuring the iLO Virtual Serial Port in the UEFI System Utilities...............................122

Configuring Linux to use the iLO Virtual Serial Port.......................................................122

Windows EMS Console with iLO Virtual Serial Port.......................................................125

Configuring Windows for use with the iLO Virtual Serial Port........................................ 125

Starting an iLO Virtual Serial Port session..................................................................... 126

Viewing the iLO Virtual Serial Port log........................................................................... 126

Text-based Remote Console (Textcons)................................................................................... 127

Customizing the Text-based Remote Console............................................................... 127

Using the Text-based Remote Console..........................................................................128

Using Linux with the Text-based Remote Console.........................................................129

Using iLO Virtual Media......................................................................130

iLO Virtual Media.......................................................................................................................130

Virtual Media operating system information..............................................................................131

Operating system USB requirement.............................................................................. 131

Configuring Windows 7 for use with iLO Virtual Media with Windows 7........................ 131

Operating system considerations: Virtual Floppy/USB key............................................132

Operating system considerations: Virtual CD/DVD-ROM.............................................. 132

Operating system considerations: Virtual Folder ...........................................................133

Using Virtual Media from the iLO web interface........................................................................133

Viewing Virtual Media status and port configuration...................................................... 134

Viewing connected local media......................................................................................134

Ejecting a local media device.........................................................................................135

Connecting scripted media.............................................................................................135

Viewing connected scripted media.................................................................................136

Ejecting scripted media.................................................................................................. 136

Remote Console Virtual Media................................................................................................. 136

Virtual Drives..................................................................................................................137

Create Media Image feature (Java IRC only).................................................................138

Using a Virtual Folder (.NET IRC only).......................................................................... 140

Setting up IIS for scripted Virtual Media....................................................................................140

Configuring IIS............................................................................................................... 140

Configuring IIS for read/write access............................................................................. 141

Inserting Virtual Media with a helper application............................................................142

Sample Virtual Media helper application........................................................................142

6 Contents

Using the power and thermal features..............................................145

Server power-on....................................................................................................................... 145

Brownout recovery.................................................................................................................... 145

Graceful shutdown.................................................................................................................... 146

Power efficiency........................................................................................................................146

Power-on protection..................................................................................................................146

Power allocation (blade servers and compute modules).......................................................... 147

Managing the server power...................................................................................................... 147

Virtual Power Button options..........................................................................................148

Configuring the System Power Restore Settings......................................................................148

Auto Power-On...............................................................................................................148

Power-On Delay.............................................................................................................149

Viewing server power usage.....................................................................................................149

Power meter graph display options................................................................................150

Viewing the current power state.....................................................................................151

Viewing the server power history................................................................................... 152

Power settings.......................................................................................................................... 152

Configuring the Power Regulator settings......................................................................152

Configuring power caps................................................................................................. 153

Configuring battery backup unit settings........................................................................ 155

Configuring SNMP alert on breach of power threshold settings.................................... 155

Configuring the persistent mouse and keyboard............................................................156

Viewing power information........................................................................................................157

Power Supply Summary details..................................................................................... 157

Power Supplies list.........................................................................................................159

Power Discovery Services iPDU Summary ...................................................................160

Power Readings.............................................................................................................161

Power Microcontroller.....................................................................................................161

Battery Backup Unit details............................................................................................ 161

Smart Storage Battery details........................................................................................ 161

Power monitoring........................................................................................................... 162

High Efficiency Mode......................................................................................................162

Viewing fan information.............................................................................................................162

Fan details......................................................................................................................162

Fans............................................................................................................................... 163

Temperature information .......................................................................................................... 163

Viewing the temperature graph...................................................................................... 163

Viewing temperature sensor data...................................................................................164

Temperature monitoring................................................................................................. 164

Configuring iLO network settings..................................................... 166

iLO network settings................................................................................................................. 166

Viewing the network configuration summary.............................................................................166

Network configuration summary details......................................................................... 166

IPv4 Summary details.................................................................................................... 167

IPv6 Summary details.................................................................................................... 167

General network settings.......................................................................................................... 168

Configuring the iLO Hostname Settings.........................................................................168

NIC settings....................................................................................................................169

Configuring IPv4 settings.......................................................................................................... 171

IPv4 settings...................................................................................................................172

Configuring IPv6 settings.......................................................................................................... 173

IPv6 settings...................................................................................................................174

Contents 7

iLO features that support IPv6....................................................................................... 175

Configuring iLO SNTP settings................................................................................................. 176

SNTP options................................................................................................................. 177

iLO clock synchronization.............................................................................................. 178

DHCP NTP address selection........................................................................................178

iLO NIC auto-selection..............................................................................................................178

NIC auto-selection support.............................................................................................179

iLO startup behavior with NIC auto-selection enabled................................................... 179

Enabling iLO NIC auto-selection.................................................................................... 180

Configuring NIC failover................................................................................................. 180

Viewing iLO systems in the Windows Network folder............................................................... 180

Managing remote support.................................................................. 182

HPE embedded remote support............................................................................................... 182

Device support............................................................................................................... 183

Data collected by HPE remote support.......................................................................... 183

HPE Proactive Care service...........................................................................................184

Prerequisites for remote support registration............................................................................184

Supported browsers....................................................................................................... 185

Setting up a ProLiant server for remote support registration......................................... 186

Insight Online direct connect network requirements...................................................... 187

Setting up the Insight Remote Support central connect environment............................ 187

Verifying access to Insight Online.................................................................................. 189

Registering for Insight Online direct connect ........................................................................... 189

Registering for Insight Online direct connect (step 1).................................................... 189

Registering for Insight Online direct connect (step 2).................................................... 190

Confirming registration is complete (iLO web interface)................................................ 191

Completing the optional post-registration steps............................................................. 191

Editing the web proxy settings (Insight Online direct connect only) .............................. 191

Registering for Insight Remote Support central connect ......................................................... 191

Unregistering from Insight Online direct connect ..................................................................... 192

Unregistering from Insight Remote Support central connect.................................................... 192

Remote support service events................................................................................................ 193

Service event transmission............................................................................................ 193

Using maintenance mode.............................................................................................. 193

Sending a test service event by using iLO..................................................................... 194

Viewing the Service Event Log.......................................................................................195

Clearing the Service Event Log......................................................................................196

Remote Support data collection................................................................................................196

Sending data collection information .............................................................................. 197

Sending Active Health System reporting information ....................................................197

Viewing data collection status in iLO..............................................................................198

Viewing Active Health System reporting status in iLO................................................... 198

Viewing data collection status in Insight Online............................................................. 198

Viewing data collection status in the Insight RS Console (Insight Remote Support

central connect only)...................................................................................................... 199

Registering a ProLiant server used as a host server for Insight Online direct connect............ 199

Changing the remote support configuration of a supported device.......................................... 200

Changing a supported device from central connect to direct connect........................... 200

Changing a supported device from direct connect to central connect remote support.. 200

8 Contents

Using the iLO administration features.............................................. 202

iLO user accounts..................................................................................................................... 202

Adding local user accounts............................................................................................ 202

Editing local user accounts............................................................................................ 203

Deleting a user account................................................................................................. 203

iLO user account options............................................................................................... 204

iLO user privileges..........................................................................................................204

Password guidelines...................................................................................................... 205

IPMI/DCMI users............................................................................................................206

Viewing local user accounts...........................................................................................206

iLO directory groups..................................................................................................................206

Adding directory groups................................................................................................. 207

Editing directory groups................................................................................................. 207

Deleting a directory group.............................................................................................. 208

Directory group options.................................................................................................. 208

Directory group privileges.............................................................................................. 209

Viewing directory groups................................................................................................210

Boot Order.................................................................................................................................210

Configuring the server boot mode..................................................................................210

Configuring the server boot order.................................................................................. 210

Changing the one-time boot status.................................................................................211

Using the additional Boot Order page options............................................................... 212

Installing a license key by using a browser...............................................................................213

Viewing license information............................................................................................213

Lost license key recovery...............................................................................................214

iLO licensing...................................................................................................................214

Using Enterprise Secure Key Manager with iLO.......................................................................215

Configuring key manager servers.................................................................................. 215

Adding key manager configuration details..................................................................... 216

Testing the ESKM configuration..................................................................................... 216

Viewing ESKM events....................................................................................................217

Clearing the ESKM log...................................................................................................217

Language packs........................................................................................................................217

Selecting a language pack............................................................................................. 218

Configuring the default language settings......................................................................218

Configuring the current iLO web interface session language.........................................219

Uninstalling a language pack......................................................................................... 219

How iLO determines the session language....................................................................219

Firmware verification.................................................................................................................219

Configuring the firmware verification settings................................................................ 220

Running a firmware verification scan............................................................................. 221

Viewing firmware health status.......................................................................................221

iLO Backup & Restore.............................................................................................................. 222

What information is restored?........................................................................................ 222

Backing up the iLO configuration................................................................................... 223

Restoring the iLO configuration......................................................................................223

Restoring the iLO configuration after system board replacement.................................. 224

Using the iLO security features......................................................... 225

iLO security............................................................................................................................... 225

iLO access settings...................................................................................................................226

Configuring iLO service settings.................................................................................... 226

Configuring iLO access options..................................................................................... 228

iLO login with an SSH client...........................................................................................232

iLO Service Port........................................................................................................................233

Downloading the Active Health System Log through the iLO Service Port....................233

Connecting a client to iLO through the iLO Service Port................................................234

Configuring the iLO Service Port settings...................................................................... 234

Contents 9

Configuring a client to connect through the iLO Service Port........................................ 235

iLO Service Port supported devices...............................................................................236

Sample text file for Active Health System Log download through iLO Service Port...... 236

Administering SSH keys........................................................................................................... 238

Authorizing a new SSH key by using the web interface.................................................238

Authorizing a new SSH key by using the CLI.................................................................238

Deleting SSH keys......................................................................................................... 239

Requirements for authorizing SSH keys from an HPE SIM server ............................... 239

SSH keys........................................................................................................................240

Supported SSH key format examples............................................................................ 240

CAC Smartcard Authentication................................................................................................. 241

Configuring CAC Smartcard Authentication settings..................................................... 242

Managing trusted certificates for CAC Smartcard Authentication.................................. 243

Certificate mapping........................................................................................................ 245

Administering SSL certificates.................................................................................................. 246

Viewing SSL certificate information................................................................................246

Obtaining and importing an SSL certificate....................................................................246

Directory authentication and authorization................................................................................249

Prerequisites for configuring authentication and directory server settings.....................249

Configuring Kerberos authentication settings in iLO...................................................... 249

Configuring schema-free directory settings in iLO......................................................... 250

Configuring HPE Extended Schema directory settings in iLO....................................... 252

Directory user contexts...................................................................................................253

Directory Server CA Certificate...................................................................................... 254

Local user accounts with Kerberos authentication and directory integration................. 254

Running directory tests.................................................................................................. 254

Configuring encryption settings.................................................................................................257

Enabling the Production or HighSecurity security state................................................. 257

Enabling the FIPS and SuiteB security states................................................................258

Connecting to iLO when using higher security states.................................................... 259

Configuring a FIPS-validated environment with iLO...................................................... 260

Disabling FIPS mode..................................................................................................... 260

Disabling SuiteB mode...................................................................................................261

iLO security states..........................................................................................................261

SSH cipher, key exchange, and MAC support...............................................................263

SSL cipher and MAC support.........................................................................................263

HPE SSO.................................................................................................................................. 265

Configuring iLO for HPE SSO........................................................................................ 265

Single Sign-On Trust Mode options............................................................................... 266

SSO user privileges........................................................................................................266

Adding trusted certificates..............................................................................................266

Extracting the HPE SIM SSO certificate........................................................................ 267

Importing a direct DNS name.........................................................................................267

Viewing trusted certificates and records.........................................................................268

Removing trusted certificates and records.....................................................................268

Configuring the Login Security Banner..................................................................................... 269

iLO security with the system maintenance switch.....................................................................269

Configuring iLO management settings.............................................271

10 Contents

Agentless Management and AMS............................................................................................ 271

Agentless Management Service............................................................................................... 272

Installing AMS................................................................................................................ 272

Verifying AMS installation...............................................................................................273

Restarting AMS.............................................................................................................. 274

System Management Assistant......................................................................................275

Configuring SNMP settings.......................................................................................................279

SNMP options................................................................................................................ 279

SNMPv3 authentication............................................................................................................ 280

Configuring SNMPv3 users............................................................................................281

Deleting an SNMPv3 user profile................................................................................... 281

Configuring the SNMPv3 Engine ID...............................................................................282

Configuring SNMP alerts.......................................................................................................... 282

SNMP alert settings........................................................................................................283

Using the AMS Control Panel to configure SNMP and SNMP alerts (Windows only).............. 283

SNMP traps...............................................................................................................................284

iLO AlertMail..............................................................................................................................289

Enabling AlertMail.......................................................................................................... 290

Disabling AlertMail..........................................................................................................290

Remote Syslog..........................................................................................................................291

Enabling iLO Remote Syslog......................................................................................... 291

Disabling iLO Remote Syslog........................................................................................ 292

Working with enclosures, frames, and chassis............................... 293

Using the Active Onboard Administrator...................................................................................293

Viewing OA information..................................................................................................293

Starting the OA GUI....................................................................................................... 293

Toggling the enclosure UID LED.................................................................................... 294

iLO option.......................................................................................................................294

Viewing frame information.........................................................................................................294

Frame details..................................................................................................................295

Toggling the frame UID LED.......................................................................................... 295

Server details................................................................................................................. 295

Toggling the server UID LED..........................................................................................296

Viewing chassis information......................................................................................................296

Power Supplies list.........................................................................................................296

Intelligent PDU details....................................................................................................297

Smart Storage Battery details........................................................................................ 297

Using iLO with other software products and tools..........................299

iLO and remote management tools...........................................................................................299

Starting a remote management tool from iLO................................................................ 299

Deleting a remote manager configuration...................................................................... 299

Using iLO with HPE OneView........................................................................................ 300

Starting Intelligent Provisioning from iLO..................................................................................301

IPMI server management..........................................................................................................301

Advanced IPMI tool usage on Linux...............................................................................302

Using iLO with HPE SIM........................................................................................................... 302

HPE SIM features...........................................................................................................303

Establishing SSO with HPE SIM.................................................................................... 303

iLO identification and association...................................................................................303

Receiving SNMP alerts in HPE SIM...............................................................................304

Configuring iLO and HPE SIM to use the same HTTP port........................................... 304

Reviewing iLO license information in HPE SIM............................................................. 305

Using iLO with HPE Insight Control server provisioning .......................................................... 305

Kerberos authentication and Directory services............................. 306

Kerberos authentication with iLO.............................................................................................. 306

Configuring Kerberos authentication..............................................................................306

Contents 11

Configuring the iLO hostname and domain name for Kerberos authentication............. 306

Preparing the domain controller for Kerberos support................................................... 307

Generating a keytab file for iLO in a Windows environment.......................................... 307

Verifying that your environment meets the Kerberos authentication time requirement..309

Configuring Kerberos support in iLO..............................................................................310

Configuring supported browsers for single sign-on........................................................310

Directory integration..................................................................................................................312

Choosing a directory configuration to use with iLO...................................................................313

Schema-free directory authentication....................................................................................... 313

Prerequisites for using schema-free directory integration..............................................314

Process overview: Configuring iLO for schema-free directory integration..................... 315

Schema-free nested groups (Active Directory only).......................................................315

HPE Extended Schema directory authentication...................................................................... 315

Process overview: Configuring the HPE Extended Schema with Active Directory........ 315

Prerequisites for configuring Active Directory with the HPE Extended Schema

configuration...................................................................................................................316

Directory services support..............................................................................................317

Installing the iLO directory support software.................................................................. 317

Running the Schema Extender...................................................................................... 319

Directory services objects.............................................................................................. 320

Managing roles and objects with the Active Directory snap-ins..................................... 320

Sample configuration: Active Directory and HPE Extended Schema............................ 324

Directory-enabled remote management (HPE Extended Schema configuration).....................327

Roles based on organizational structure........................................................................327

How role access restrictions are enforced..................................................................... 328

User access restrictions................................................................................................. 329

Role access restrictions................................................................................................. 330

Tools for configuring multiple iLO systems at a time................................................................. 332

User login using directory services........................................................................................... 332

Directories Support for ProLiant Management Processors (HPLOMIG)...................................333

Configuring directory authentication with HPLOMIG................................................................ 334

Discovering management processors............................................................................335

Optional: Upgrading firmware on management processors (HPLOMIG).......................337

Selecting directory configuration options....................................................................... 338

Naming management processors (HPE Extended Schema only)................................. 340

Configuring directories when HPE Extended Schema is selected.................................341

Configuring management processors (Schema-free configuration only)....................... 344

Setting up management processors for directories........................................................345

Importing an LDAP CA Certificate..................................................................................346

Running directory tests with HPLOMIG (optional)......................................................... 347

Directory services schema........................................................................................................349

HPE Management Core LDAP OID classes and attributes........................................... 349

Core class definitions..................................................................................................... 350

Core attribute definitions................................................................................................ 351

Lights-Out Management specific LDAP OID classes and attributes.............................. 354

Lights-Out Management attributes.................................................................................354

Lights-Out Management class definitions...................................................................... 354

Lights-Out Management attribute definitions................................................................. 355

Managing iLO reboots, factory reset, and NMI.................................357

12 Contents

Rebooting (resetting) iLO..........................................................................................................357

Rebooting (resetting) the iLO processor with the web interface ................................... 357

Rebooting (resetting) iLO with the iLO 5 Configuration Utility........................................357

Rebooting (resetting) iLO with the server UID button.................................................... 358

Reset iLO to the factory default settings................................................................................... 359

Resetting iLO to the factory default settings (iLO 5 Configuration Utility)...................... 359

Generating an NMI....................................................................................................................360

Troubleshooting.................................................................................. 361

Using the iLO Virtual Serial Port with Windbg...........................................................................361

Using the Server Health Summary........................................................................................... 362

Server Health Summary details..................................................................................... 363

Event log entries....................................................................................................................... 364

Incorrect time stamp on iLO Event Log entries.........................................................................364

USB key attached to iLO Service Port fails to mount................................................................364

IML troubleshooting links.......................................................................................................... 365

Login and iLO access issues.................................................................................................... 365

iLO firmware login name and password not accepted .................................................. 365

iLO management port not accessible by name..............................................................365

Unable to access the iLO login page ............................................................................ 366

Unable to connect to iLO after changing network settings.............................................366

Unable to return to iLO login page after iLO reset ........................................................ 367

An iLO connection error occurs after an iLO firmware update ...................................... 367

Unable to connect to iLO processor through NIC ......................................................... 367

Unable to log in to iLO after installing iLO certificate .................................................... 367

Unable to connect to iLO IP address ............................................................................ 368

iLO TCP/IP communication fails ....................................................................................368

Secure Connection Failed error when using Firefox to connect to iLO..........................368

Certificate error when navigating to iLO web interface with Internet Explorer............... 369

Certificate error when navigating to iLO web interface with Chrome............................. 370

Certificate error when navigating to iLO web interface with Firefox............................... 370

iLO login page displays a Website Certified by an Unknown Authority message.......... 371

iLO inaccessible on a server managed by HPE OneView ............................................ 371

Unable connect to an iLO system with the iOS mobile app........................................... 372

iLO responds to pings intermittently or does not respond..............................................372

Running an XML script with iLO fails............................................................................. 373

Directory issues.........................................................................................................................373

Logging in to iLO with Kerberos authentication fails...................................................... 373

iLO credential prompt appears during Kerberos login attempt ......................................374

iLO credential prompt appears during Kerberos login by name attempt .......................375

A directory connection to iLO ends prematurely ........................................................... 375

Configured directory user contexts do not work with iLO login ..................................... 375

iLO directory user account does not log out after directory timeout expires ................. 376

Failure generating Kerberos keytab file for iLO Zero Sign In configuration................... 376

Error when running Setspn for iLO Kerberos configuration .........................................376

OpenLDAP authentication fails when configured with nested groups or posixgroups... 377

iLO Zero Sign In fails after domain controller OS reinstall ............................................ 377

Failed iLO login with Active Directory credentials ......................................................... 377

Directory Server DNS Name test reports a failure......................................................... 378

Ping Directory Server test reports a failure.................................................................... 378

Connect to Directory Server test reports a failure.......................................................... 378

Connect using SSL test reports a failure........................................................................379

Bind to Directory Server test reports a failure................................................................ 379

Directory Administrator Login test reports a failure........................................................ 379

User Authentication test reports a failure....................................................................... 380

User Authorization test reports a failure.........................................................................380

Directory User Contexts test reports a failure................................................................ 380

LOM Object Exists test reports a failure.........................................................................381

Remote Console issues............................................................................................................ 381

iLO Java IRC displays red X when Firefox is used to run Java IRC on Linux client ..... 381

Contents 13

iLO Java IRC does not start .......................................................................................... 381

Cursor cannot reach iLO Remote Console window corners ......................................... 382

iLO Remote Console text window not updated correctly............................................... 382

Mouse or keyboard not working in iLO .NET IRC or Java IRC (Java Web Start).......... 382

Mouse or keyboard not working in iLO Java IRC (Java Applet).....................................383

iLO .NET IRC sends characters continuously after switching windows ........................ 384

iLO Java IRC displays incorrect floppy and USB key device information ..................... 384

Caps Lock out of sync between iLO and Java IRC .......................................................385

Num Lock out of sync between iLO and Shared Remote Console ............................... 385

Keystrokes repeat unintentionally during iLO Remote Console session........................385

Session leader does not receive connection request when iLO .NET IRC is in replay

mode ............................................................................................................................. 386

iLO Remote Console keyboard LED does not work correctly ....................................... 386

iLO .NET IRC becomes inactive or disconnects............................................................ 386

iLO .NET IRC failed to connect to server ...................................................................... 387

File not present after copy from server to iLO Virtual Media USB key ..........................388

iLO .NET IRC takes a long time to verify application requirements .............................. 388

iLO .NET IRC will not start ............................................................................................ 389

iLO .NET IRC cannot be shared ................................................................................... 389

iLO .NET IRC will not start in Firefox .............................................................................389

iLO .NET IRC will not start in Google Chrome .............................................................. 390

Unable to boot to DOS using a USB key mounted with the iLO Remote Console.........390

SSH issues................................................................................................................................391

Initial PuTTY input slow with iLO ...................................................................................391

PuTTY client unresponsive with iLO Shared Network Port............................................391

Text is displayed incorrectly when using an SSH connection to iLO.............................. 391

An SSH session fails to start or terminates unexpectedly..............................................392

Text-based Remote Console issues......................................................................................... 392

Unable to view Linux installer in text-based Remote Console....................................... 392

Unable to pass data through SSH terminal....................................................................392

VSP-driven selection during the serial timeout window sends output to BIOS

redirect instead of VSP.................................................................................................. 393

Scrolling and text appear irregular during BIOS redirection...........................................393

Remote Support issues.............................................................................................................393

SSL Bio Error during Insight RS registration..................................................................393

Server not identified by server name in Insight Online or Insight RS.............................394

Server OS name and version not listed in Insight RS or Insight Online.........................394

Connection error during Insight Online direct connect registration................................ 395

iLO session ends unexpectedly during iLO Insight Online direct connect registration...395

Server health status is red in Insight RS or Insight Online.............................................395

Server not identified by server name in Insight Online or Insight RS.............................396

Server information is overwritten when remote support data is sent to Hewlett

Packard Enterprise.........................................................................................................396

OS information displayed incorrectly in Insight Online...................................................397

Insight Online direct connect stopped working on a server with a replaced system

board.............................................................................................................................. 397

Duplicate central connect device records exist in Insight Online................................... 397

Device warranty is incorrectly listed as expired in Insight RS........................................ 398

Service events and collections display an incorrect time stamp in the Insight RS

Console.......................................................................................................................... 398

iLO Federation issues............................................................................................................... 399

Query errors occur on iLO Federation pages ................................................................399

A timeout error is displayed on the iLO Multi-System Map page .................................. 399

iLO Multi-System Map page displays a 502 error ......................................................... 400

iLO Multi-System Map page displays a 403 error ......................................................... 400

iLO peers are not displayed on iLO Federation pages...................................................401

iLO peers are displayed with IPv6 addresses on IPv4 networks................................... 401

14 Contents

Firmware update issues............................................................................................................401

Unsuccessful iLO firmware update ............................................................................... 401

iLO firmware update error ............................................................................................. 402

iLO firmware update does not finish ..............................................................................402

iLO network Failed Flash Recovery............................................................................... 403

Licensing issues........................................................................................................................404

License key installation errors........................................................................................404

Unable to access Virtual Media or graphical Remote Console...................................... 404

Recovering an iLO license key.......................................................................................405

Agentless Management, AMS, and SNMP issues....................................................................406

AMS is installed but unavailable in iLO ......................................................................... 406

Unable to get SNMP information in HPE SIM................................................................ 406

Unable to receive HPE SIM alarms (SNMP traps) from iLO.......................................... 406

Websites.............................................................................................. 407

Support and other resources.............................................................409

Accessing Hewlett Packard Enterprise Support....................................................................... 409

Accessing updates....................................................................................................................409

Customer self repair..................................................................................................................410

Remote support........................................................................................................................ 410

Warranty information.................................................................................................................410

Regulatory information.............................................................................................................. 411

Documentation feedback...........................................................................................................411

Contents 15

iLO

iLO 5 is a remote server management processor embedded on the system boards of HPE ProLiant servers and Synergy compute modules. iLO enables the monitoring and controlling of servers from remote locations. iLO management is a powerful tool that provides multiple ways to configure, update, monitor, and repair servers remotely. iLO (Standard) comes preconfigured on Hewlett Packard Enterprise servers without an additional cost or license.

Features that enhance server administrator productivity and additional new security features are licensed. For more information, see the iLO licensing guide at the following website:

ilo-docs.

iLO key features

• Server health monitoring—iLO monitors temperatures in the server and sends corrective signals to the fans to maintain proper server cooling. iLO also monitors installed firmware and software versions and the status of fans, memory, the network, processors, power supplies, storage, and devices installed on the system board.

• Agentless Management—With Agentless Management, the management software (SNMP) operates within the iLO firmware instead of the host OS. This configuration frees memory and processor resources on the host OS for use by server applications. iLO monitors all key internal subsystems, and can send SNMP alerts directly to a central management server, even with no host OS installed.

http://www.hpe.com/support/

• Integrated Management Log—View server events and configure notifications through SNMP alerts, remote syslogs, and email alerts.

• Learn more links—Troubleshooting information for supported events is available on the Integrated Management Log page.

• Active Health System Log—Download the Active Health System log. You can send the log file to Hewlett Packard Enterprise when you have an open support case or upload the log to the Active Health System Viewer.

• iLO Federation management—Use the iLO Federation features to discover and manage multiple servers at a time.

• Integrated Remote Console—If you have a network connection to the server, you can access a secure high-performance console to manage the server from any location.

• Virtual Media—Remotely mount high-performance Virtual Media devices to the server.

• Power management—Securely and remotely control the power state of the managed server.

• Deployment and provisioning—Use Virtual Power and Virtual Media for tasks such as the automation of deployment and provisioning.

• Power consumption and power settings—Monitor the server power consumption, configure server power settings, and configure power capping on supported servers.

• Embedded remote support—Register a supported server for HPE remote support.

16 iLO

• User access—Use local or directory-based user accounts to log in to iLO. You can use CAC smartcard authentication with local or directory-based accounts.

• Two-factor authentication—Two-factor authentication is supported with Kerberos and CAC smartcard authentication.

• Secure Recovery—Validates the iLO firmware when power is applied. If the firmware is invalid, the iLO firmware is flashed automatically (iLO Standard license).

Validates the system ROM during server startup. If valid system ROM is not detected, the server is prevented from booting. Recovery options include swapping the active and redundant ROM, and initiating a firmware verification scan and recovery action (the iLO Advanced Premium Security Edition license is required for scheduling and automated recovery).

• Firmware verification and recovery—Run scheduled or on-demand firmware verification scans and configure recovery actions to implement when an issue is detected.

• iLO security states—Configure a security state that fits your environment. iLO supports the Production security state (default) and high security states such as HighSecurity, FIPS, and SuiteB.

• iLO interface controls—For enhanced security, enable or disable selected iLO interfaces and features.

• Firmware management—Save components to the iLO Repository and use SUM to configure install sets and manage the installation queue.

• iLO Service Port—Use a supported USB Ethernet adapter to connect a client to the iLO Service Port to access the server directly. Hewlett Packard Enterprise recommends the HPE USB to Ethernet Adapter (part number Q7Y55A). You can also connect a USB key to download the Active Health System Log.

• IPMI—The iLO firmware provides server management based on the IPMI version 2.0 specification.

• iLO RESTful API and RESTful Interface Tool (iLOrest)—iLO 5 includes the iLO RESTful API, which is Redfish API conformant.

• iLO Backup & Restore—Back up the iLO configuration and then restore it on a system with the same hardware configuration.

• Intelligent System Tuning—Intelligent System Tuning for Gen10 servers consists of several features to increase server performance. Jitter smoothing levels and balances frequency fluctuation in the processor. Workload matching enables the use of preconfigured workload profiles to fine-tune server resources. Core boosting works with selected Intel processors to enable higher performance across more processor cores. For more information, see the HPE Gen10 Servers Intelligent System Tuning white paper.

ROM-based configuration utility

You can use the iLO 5 Configuration Utility in the UEFI System Utilities to configure network parameters, global settings, and user accounts.

The iLO 5 Configuration Utility is designed for the initial iLO setup, and is not intended for continued iLO administration. You can start the utility when the server is booted, and you can run it remotely with the Remote Console.

You can configure iLO to require users to log in when they access the iLO 5 Configuration Utility, or you can disable the utility for all users. These settings can be configured on the Access Settings page. Disabling the iLO 5 Configuration Utility prevents reconfiguration from the host unless the system maintenance switch is set to disable iLO security.

To access the iLO 5 Configuration Utility, press F9 during POST to start the UEFI System Utilities. Click

System Configuration, and then click iLO 5 Configuration Utility.

iLO mobile app

The iLO mobile app provides access to your servers from a mobile device. The mobile app interacts directly with the iLO processor, providing total control of the server at all times as long as the server is plugged in. For example, you can access the server when it is in a healthy state or when it is powered off

ROM-based configuration utility 17

with a blank hard drive. As an IT administrator, you can troubleshoot problems and perform software deployments from almost anywhere.

For more information about the iLO mobile app, see http://www.hpe.com/info/ilo/mobileapp.

iLO RESTful API

iLO includes the iLO RESTful API, which is Redfish API conformant. The iLO RESTful API is a management interface that server management tools can use to perform configuration, inventory, and monitoring tasks by sending basic HTTPS operations (GET, PUT, POST, DELETE, and PATCH) to the iLO web server.

To learn more about the iLO RESTful API, see the Hewlett Packard Enterprise website (http:// www.hpe.com/info/restfulinterface/docs).

For specific information about automating tasks using the iLO RESTful API, see libraries and sample code at http://www.hpe.com/info/redfish.

RESTful Interface Tool

The RESTful Interface Tool (iLOrest) is a scripting tool that allows you to automate HPE server management tasks. It provides a set of simplified commands that take advantage of the iLO RESTful API. You can install the tool on your computer for remote use or install it locally on a server with a Windows or Linux Operating System. The RESTful Interface Tool offers an interactive mode, a scriptable mode, and a file-based mode similar to CONREP to help decrease automation times.

For more information, see the following website:

http://www.hpe.com/info/resttool.

iLO scripting and command line

You can use the iLO scripting tools to configure multiple servers, to incorporate a standard configuration into the deployment process, and to control servers and subsystems.

The iLO scripting and CLI guide describes the syntax and tools available for using iLO through a command line or scripted interface.

18 iLO RESTful API

Setting up iLO

Preparing to set up iLO

Before setting up an iLO management processor, you must decide how to handle networking and security. The following questions can help you configure iLO:

Procedure

1. How will iLO connect to the network?

2. Will NIC Teaming be used with the Shared Network Port configuration?

3. How will iLO acquire an IP address?

4. What access security is required, and what user accounts and privileges are needed?

5. What tools will you use to configure iLO?

iLO network connection options

Typically, iLO is connected to the network through a dedicated management network or a shared connection on the production network.

Dedicated management network

In this configuration, the iLO port is on a separate network. A separate network improves performance and security because you can physically control which workstations are connected to the network. A separate network also provides redundant access to the server when a hardware failure occurs on the production network. In this configuration, iLO cannot be accessed directly from the production network. The Dedicated management network is the preferred iLO network configuration.

Figure 1: Dedicated management network

Production network

In this configuration, both the NIC and the iLO port are connected to the production network. In iLO, this type of connection is called the Shared Network Port configuration. Certain Hewlett Packard Enterprise embedded NICs and add-on cards provide this capability. This connection enables access to iLO from anywhere on the network and it reduces the amount of networking hardware and infrastructure required to support iLO.

There are some drawbacks to using this configuration.

Setting up iLO 19

• With a shared network connection, traffic can hinder iLO performance.

Management Clients

Production Clients

Server NIC/iLO Shared Network Port

HPE Server

Hub/Switch

Management/

Production

Network

• During the server boot process and when the operating system NIC drivers are loading and unloading, there are brief periods of time (2–8 seconds) when iLO cannot be reached from the network. After these short periods, iLO communication is restored and iLO will respond to network traffic.

When this situation occurs, the Remote Console and connected iLO Virtual Media devices might be disconnected.

Figure 2: Shared network connection

NIC teaming with Shared Network Port configurations

NIC teaming is a feature you can use to improve server NIC performance and reliability.

NIC teaming constraints

When you select a teaming mode to use when iLO is configured to use the Shared Network Port:

• iLO network communications will be blocked in the following conditions:

◦ The selected NIC teaming mode causes the switch that iLO is connected with to ignore traffic from

the server NIC/port that iLO is configured to share.

◦ The selected NIC teaming mode sends all traffic destined for iLO to a NIC/port other than the one

that iLO is configured to share.

• Because iLO and the server transmit and receive on the same switch port, the selected NIC teaming mode must allow the switch to tolerate traffic with two different MAC addresses on the same switch port. Some implementations of LACP (802.3ad) will not tolerate multiple MAC addresses on the same link.

Hewlett Packard Enterprise NIC teaming modes

If your server is configured to use Hewlett Packard Enterprise NIC teaming, observe the following guidelines.

Network Fault Tolerance

The server transmits and receives on only one NIC (the primary adapter). The other NICs (secondary adapters) that are part of the team do not transmit server traffic and they ignore received traffic. This mode allows the iLO Shared Network Port to function correctly.

Select the NIC/port iLO uses as the Preferred Primary Adapter.

20 NIC teaming with Shared Network Port configurations

Transmit Load Balancing

The server transmits on multiple adapters but receives only on the primary adapter. This mode allows the iLO Shared Network Port to function correctly.

Select the NIC/port iLO uses as the Preferred Primary Adapter.

Switch Assisted Load Balancing

This mode type refers to the following:

• HPE ProCurve Port Trunking

• Cisco Fast EtherChannel/Gigabit EtherChannel (Static Mode Only, no PAgP)

• IEEE 802.3ad Link Aggregation (Static Mode only, no LACP)

• Bay Network Multi-Link Trunking

• Extreme Network Load Sharing

In this mode, there is no concept of primary and secondary adapters. All adapters are considered equal for the purposes of sending and receiving data. This mode is the most problematic for iLO Shared Network Port configurations because traffic destined for iLO can be received on only one of the server NIC/ports. To determine the constraints that your switch vendor places on their implementation of switch assisted load balancing, see the switch vendor documentation.

For additional information, see the ProLiant Network Adapter Teaming support document.

For information about selecting a NIC teaming mode when your server uses another implementation of NIC teaming, see NIC teaming constraints and the vendor documentation.

iLO IP address acquisition

To enable iLO access after it is connected to the network, the iLO management processor must acquire an IP address and subnet mask. You can use a dynamic address or a static address.

Dynamic IP address

A dynamic IP address is set by default. iLO obtains the IP address and subnet mask from DNS or DHCP servers. This method is the simplest.

If you use DHCP:

• The iLO management port must be connected to a network that is connected to a DHCP server,

and iLO must be on the network before power is applied. DHCP sends a request soon after power is applied. If the DHCP request is not answered when iLO first boots, it will reissue the request at 90-second intervals.

• The DHCP server must be configured to provide DNS and WINS name resolution.

Static IP address

If DNS or DHCP servers are not available on the network, a static IP address is used. A static IP address can be configured by using the iLO 5 Configuration Utility.

If you plan to use a static IP address, you must have the IP address before starting the iLO setup process.

iLO access security

You can use the following methods to manage access to iLO:

iLO IP address acquisition 21

Local accounts

Up to 12 user accounts can be stored in iLO. This configuration is ideal for small environments such as labs and small-sized or medium-sized businesses.

Directory services

Up to six directory groups can be configured in iLO. Use a directory service to authenticate and authorize iLO access. This configuration enables an unlimited number of users and easily scales to the number of iLO devices in an enterprise.

If you plan to use directory services, consider enabling at least one local administrator account for alternate access.

A directory provides a central point of administration for iLO devices and users, and the directory can enforce a strong password policy.

CAC smartcard authentication

You can configure common access smartcards together with local accounts and directory services to manage iLO user access.

iLO configuration tools

iLO supports various interfaces for configuration and operation. This guide discusses the following interfaces:

iLO web interface

Use the iLO web interface when you can connect to iLO on the network by using a web browser. You can also use this method to reconfigure an iLO management processor.

ROM-based setup

Use the iLO 5 Configuration Utility when the system environment does not use DHCP, DNS, or WINS.

Other configuration options not discussed in this guide follow:

Intelligent Provisioning

To start Intelligent Provisioning, press F10 during POST.

You can also access Always On Intelligent Provisioning through the iLO web interface. For more information, see the Intelligent Provisioning user guide.

iLO RESTful API

A management interface that server management tools can use to perform configuration, inventory, and monitoring of a supported server through iLO. For more information, see the following website:

http://www.hpe.com/info/redfish.

HPE OneView

A management tool that interacts with the iLO management processor to configure, monitor, and manage ProLiant servers or Synergy compute modules. For more information, see the HPE OneView user guide.

HPE Scripting Toolkit

This toolkit is a server deployment product for IT experts that provides unattended automated installation for high-volume server deployments. For more information, see the Scripting Toolkit user guide for Windows or Linux.

22 iLO configuration tools

Scripting

You can use scripting to set up multiple iLO management processors. Scripts are XML files written for a scripting language called RIBCL. You can use RIBCL scripts to configure iLO on the network during initial deployment or from a deployed host.

The following methods are available:

• HPQLOCFG—A Windows command-line utility that sends RIBCL scripts over the network to iLO.

• HPONCFG—A local online scripted setup utility that runs on the host and passes RIBCL scripts to

the local iLO.

When iLO is configured to use the SuiteB security state, only HPONCFG for Linux is supported.

• Custom scripting environments (LOCFG.PL)—The iLO scripting samples include a Perl sample

that can be used to send RIBCL scripts to iLO over the network.

• SMASH CLP—A command-line protocol that can be used when a command line is accessible

through SSH or the physical serial port.

For more information about these methods, see the iLO scripting and command-line guide.

iLO sample scripts are available at the following website: http://www.hpe.com/support/ilo5.

Initial setup steps: Process overview

The iLO default settings enable you to use most features without additional configuration. However, the configuration flexibility of iLO enables customization for multiple enterprise environments. This chapter discusses the initial iLO setup steps.

Procedure

1. Connect iLO to the network.

2. If you are not using dynamic IP addressing, use the ROM-based setup utilities to configure a static IP address.

3. If you will use the local accounts feature, use the ROM-based setup utilities to configure user accounts.

4. Optional: Install an iLO license.

5. If necessary, install the iLO drivers.

Connecting iLO to the network

Connect iLO to the network through a production network or a dedicated management network.

iLO uses standard Ethernet cabling, which includes CAT 5 UTP with RJ-45 connectors. Straight-through cabling is necessary for a hardware link to a standard Ethernet hub or switch.

For more information about setting up your hardware, see the server user guide.

More information

iLO network connection options on page 19

Initial setup steps: Process overview 23

Setting up iLO by using the iLO 5 Configuration Utility

Hewlett Packard Enterprise recommends using the iLO 5 Configuration Utility to set up iLO for the first time and to configure iLO network parameters for environments that do not use DHCP, DNS, or WINS.

NOTE:

If you can connect to iLO on the network by using a web browser, you can also use the iLO web interface to configure iLO. Access iLO from a remote network client by using a supported browser and providing the default DNS name, user name, and password.

Configuring a static IP address (iLO 5 Configuration Utility)

This step is required only if you want to use a static IP address. When you use dynamic IP addressing, the DHCP server automatically assigns an IP address for iLO.

To simplify installation, Hewlett Packard Enterprise recommends using DNS or DHCP with iLO.

Procedure

1. Optional: If you access the server remotely, start an iLO remote console session.

2. Restart or power on the server.

3. Press F9 in the server POST screen.

The UEFI System Utilities start.

4. Click System Configuration.

5. Click iLO 5 Configuration Utility.

6. Disable DHCP:

a. Click Network Options.

b. Select OFF in the DHCP Enable menu.

The IP Address, Subnet Mask, and Gateway IP Address boxes become editable. When DHCP Enable is set to ON, you cannot edit these values.

7. Enter values in the IP Address, Subnet Mask, and Gateway IP Address boxes.

8. To save the changes and exit, press F12.

The iLO 5 Configuration Utility prompts you to confirm that you want to save the pending configuration changes.

9. To save and exit, click Yes - Save Changes.

The iLO 5 Configuration Utility notifies you that iLO must be reset in order for the changes to take effect.

10. Click OK.

iLO resets, and the iLO session is automatically ended. You can reconnect in approximately 30 seconds.

11. Resume the normal boot process:

a. Start the iLO remote console.

24 Setting up iLO by using the iLO 5 Configuration Utility

The iLO 5 Configuration Utility is still open from the previous session.

b. Press ESC several times to navigate to the System Configuration page.

c. To exit the System Utilities and resume the normal boot process, click Exit and resume system

boot.

Managing local user accounts with the iLO 5 Configuration Utility

Adding user accounts (iLO 5 Configuration Utility)

Procedure

1. Optional: If you access the server remotely, start an iLO remote console session.

2. Restart or power on the server.

3. Press F9 in the server POST screen.

The UEFI System Utilities start.

4. Click System Configuration, click iLO 5 Configuration Utility, click User Management, and then

click Add User.

5. Select the privileges for the new user.

To assign a privilege, select YES in the menu next to the privilege name. To remove a privilege, select NO.

The Login privilege is assigned to every user by default, so it is not listed in the iLO 5 Configuration Utility.

You cannot assign the Recovery Set privilege through the iLO 5 Configuration Utility, so it is not available in the list.

6. Enter the user name and login name in the New User Name and Login Name boxes.

7. Enter the password.

a. Move the cursor to the Password box, and then press Enter.

The Enter your new password box opens.

b. Type the password, and then press Enter.

The Confirm your new password box opens.

c. Type the password again to confirm, and then press Enter.

The iLO 5 Configuration Utility confirms the new account creation.

8. To close the confirmation dialog box, click OK.

9. Create as many user accounts as needed, and then press F12 to save the changes and exit the

system utilities.

10. When prompted to confirm the changes, click Yes - Save Changes to exit the utility and resume the

boot process.

More information

iLO user privileges on page 204 iLO user account options on page 204

Managing local user accounts with the iLO 5 Configuration Utility 25

Editing user accounts (iLO 5 Configuration Utility)

Procedure

1. Optional: If you access the server remotely, start an iLO remote console session.

2. Restart or power on the server.

3. Press F9 in the server POST screen.

The UEFI System Utilities start.

4. Click System Configuration, click iLO 5 Configuration Utility, click User Management, and then

click Edit/Remove User.

5. In the Action menu for the user you want to edit or remove, select Edit.

The account properties are displayed.

6. Update the Login Name.

7. Update the Password.

a. Move the cursor to the Password box, and then press Enter.

The Enter your new password box opens.

b. Type the password, and then press Enter.

The Confirm your new password box opens.

c. Type the password again to confirm, and then press Enter.

8. Modify the user account privileges.

To assign a privilege, select YES in the menu next to the privilege name. To remove a privilege, select NO.

The Login privilege is assigned to every user by default, so it is not available in the iLO 5 Configuration Utility.

You cannot assign the Recovery Set privilege through the iLO 5 Configuration Utility, so it is not available in the list.

9. Update as many user accounts as needed, and then press F12 to save the changes and exit the

system utilities.

10. When prompted to confirm the changes, click Yes - Save Changes to exit the utility and resume the

boot process.

More information

iLO user privileges on page 204 iLO user account options on page 204

Removing user accounts (iLO 5 Configuration Utility)

Procedure

1. Optional: If you access the server remotely, start an iLO remote console session.

2. Restart or power on the server.

3. Press F9 in the server POST screen.

26 Editing user accounts (iLO 5 Configuration Utility)

The System Utilities start.

4. Click System Configuration, click iLO 5 Configuration Utility, click User Management, and then click Edit/Remove User.

5. In the Action menu for the user you want to remove, select Delete.

The user name is marked to be deleted when you save the changes on this page.

6. If needed, mark other user accounts to delete, and then press F12 to save the changes and exit the system utilities.

7. When prompted to confirm the changes, click Yes - Save Changes to exit the utility and resume the boot process.

Logging in to iLO for the first time

Procedure

1. Enter https://<iLO hostname or IP address>.

HTTPS (HTTP exchanged over an SSL encrypted session) is required for accessing the iLO web interface.

2. Enter the default user credentials, and then click Log In.

iLO default credentials

The iLO firmware is configured with a default user name, password, and DNS name. The default information is on the serial label pull tab attached to the server that contains the iLO management processor. Use these values to access iLO remotely from a network client by using a web browser.

• User name—Administrator

• Password—A random eight-character string

• DNS name—ILOXXXXXXXXXXXX, where the X characters represent the server serial number.

IMPORTANT:

Hewlett Packard Enterprise recommends changing the default password after you log in to iLO for the first time.

If you reset iLO to the factory default settings, use the default iLO account credentials to log in after the reset.

iLO licensed features

iLO (Standard) is preconfigured on Hewlett Packard Enterprise servers without an additional cost or license. Features that enhance productivity are licensed. For more information, see the iLO licensing guide at the following website: http://www.hpe.com/support/ilo-docs.

To activate iLO licensed features, install an iLO license.

Logging in to iLO for the first time 27

iLO driver support

iLO is an independent microprocessor running an embedded operating system. The architecture ensures that most iLO functionality is available, regardless of the host operating system. The iLO driver enables software such as HPONCFG and the Agentless Management Service to communicate with iLO. The installed OS and system configuration determine the installation requirements.

Windows

When you use Windows with iLO, the following driver is available: iLO 5 Channel Interface Driver for Windows.

This driver is required for the operating system to communicate with iLO. Install this driver in all configurations.

Linux

When you use Linux with iLO, the following driver is available: hpilo.

This driver manages agent and tool application access to iLO.

hpilo is part of the Linux kernel for:

• SUSE Linux Enterprise Server 12 SP2

• SUSE Linux Enterprise Server 11 SP4 SUSE Installation Kit and later

• Red Hat Enterprise Linux 7.3 errata kernel-3.10.0-514.6.1.el7

• Red Hat Enterprise Linux 6.9 and later

hpilo is loaded automatically at startup.

On Ubuntu systems, hpilo is loaded automatically at startup after the Linux Management Component Pack package is loaded.

VMware

When you use VMware with iLO, the following driver is available: ilo.

This driver manages Agentless Management Service, WBEM provider, and tool application access to iLO. It is included in the customized Hewlett Packard Enterprise VMware images. For raw VMware images, the driver must be installed manually.

Installing the iLO driver

Procedure

1. Obtain the iLO driver for your OS by downloading the Service Pack for ProLiant, or by downloading

the driver from the Hewlett Packard Enterprise website.

For Red Hat Enterprise Linux and SuSE Linux Enterprise Server, the driver is included in the Linux distribution.

• For Windows—Use the SPP to install the iLO driver or download it from the Hewlett Packard

Enterprise Support Center at http://www.hpe.com/support/hpesc.

See the following websites for information about using the SPP:

28 iLO driver support

◦ SPP documentation: http://www.hpe.com/info/spp/documentation.

◦ SPP Custom Download hosted service: http://www.hpe.com/servers/spp/custom.

• For VMware—Download the iLO driver from the vibsdepot section of the Software Delivery

Repository website: http://www.hpe.com/support/SDR-Linux.

Follow the installation instructions provided with the software.

• For Ubuntu—Subscribe to the Linux Management Component Pack at http://www.hpe.com/

support/SDR-Linux.

Setting up iLO 29

Using the iLO web interface

iLO web interface

You can use the iLO web interface to manage iLO. You can also use a Remote Console, XML configuration and control scripts, SMASH CLP, or the iLO RESTful API.

For more information, see the iLO and iLO RESTful API documentation at the following website:

www.hpe.com/support/ilo-docs.

Supported browsers

iLO 5 supports the latest versions of the following browsers:

• Microsoft Edge

• Mozilla Firefox

• Google Chrome mobile and desktop

• Microsoft Internet Explorer 11

Browser requirements

The iLO web interface requires a browser that meets the following requirements:

• JavaScript—The iLO web interface uses client-side JavaScript extensively.

This setting is not enabled by default in all versions of Internet Explorer. To check or change this setting, see Configuring the Internet Explorer JavaScript setting on page 30.

• Cookies—Cookies must be enabled for certain features to function correctly.

http://

• Pop-up windows—Pop-up windows must be enabled for certain features to function correctly. Verify that pop-up blockers are disabled.

• TLS—To access the iLO web interface, you must enable TLS 1.0 or later in your browser.

Configuring the Internet Explorer JavaScript setting

Some versions of Internet Explorer have JavaScript disabled by default. Use the following procedure to enable JavaScript.

Procedure

1. Start Internet Explorer.

2. Select Tools > Internet options.

3. Click Security.

4. Click Custom level.

5. In the Scripting section, set Active scripting to Enable.

30 Using the iLO web interface

+ 381 hidden pages

HP E iLO 5 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

HPE iLO 5 User Guide

Contents

iLO key features

ROM-based configuration utility

iLO mobile app

iLO RESTful API

RESTful Interface Tool

iLO scripting and command line

Setting up iLO

Preparing to set up iLO

iLO network connection options

NIC teaming with Shared Network Port configurations

iLO IP address acquisition

iLO access security

iLO configuration tools

Initial setup steps: Process overview

Connecting iLO to the network

Setting up iLO by using the iLO 5 Configuration Utility

Configuring a static IP address (iLO 5 Configuration Utility)

Managing local user accounts with the iLO 5 Configuration Utility

Logging in to iLO for the first time

iLO default credentials

iLO licensed features

iLO driver support

Installing the iLO driver

Using the iLO web interface

iLO web interface

Supported browsers

Browser requirements

Configuring the Internet Explorer JavaScript setting