HP Lights-Out 100 User Manual

HP ProLiant Lights Out-100 User Guide

For HP ProLiant G6 and G7 Servers
HP Part Number: Part Number 616302-002 Published: September 2010 Edition: First
© Copyright 2010 Hewlett-Packard Development Company, L.P.
Notices
The informationcontained hereinis subjectto changewithout notice.The onlywarranties for HP products and services are set forth in the express
shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computersoftware. Valid license from HP required for possession, useor copying.Consistent with FAR 12.211 and 12.212,Commercial
Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under
vendor's standard commercial license.
Microsoft, Windows, and Windows Server are U.S. registered trademarks of Microsoft Corporation. Intel, Pentium, and Itanium are trademarks
or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. UNIX is a registered trademark of The
Open Group.
Part Number 616302-001
Intended audience
This document is for the person who installs, administers, and troubleshoots servers and storage systems. HP assumes you are qualified in the
servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels.

Table of Contents

1 Operational overview....................................................................................................5
Overview.................................................................................................................................................5
New features...........................................................................................................................................5
Server management................................................................................................................................5
Server management features..................................................................................................................5
LO100 standard features...................................................................................................................6
LO100 optional (licensed) features....................................................................................................6
2 Configuration..................................................................................................................7
Configuring LO100 with the LO100CFG utility.....................................................................................7
Configuring network access...................................................................................................................7
Configuring user accounts......................................................................................................................8
Accessing BIOS Setup Utility and using function keys..........................................................................8
Using the serial port ...............................................................................................................................8
Enabling serial access........................................................................................................................8
Configuring serial port......................................................................................................................9
Using TCP/IP over Ethernet management port......................................................................................9
Selecting a shared Ethernet management port................................................................................10
Obtaining a DHCP IP address from the BIOS Setup Utility...........................................................10
Using the DNS naming feature.......................................................................................................11
Setting up a static IP address from the BIOS Setup Utility.............................................................12
Enabling or disabling Telnet and HTTP services from the BIOS Setup Utility...............................12
TCP and UDP port numbers used by LO100..................................................................................13
Updating the firmware.........................................................................................................................14
Remotely updating the firmware....................................................................................................14
Installing firmware through a web browser...................................................................................15
Updating the firmware through the online flash utility.................................................................16
3 Using LO100................................................................................................................19
Using SSL..............................................................................................................................................19
Using SSH.............................................................................................................................................19
Using the SSH utility.......................................................................................................................19
Using the PuTTY utility...................................................................................................................20
Using the OpenSSH utility..............................................................................................................20
Using CLP.............................................................................................................................................20
CLP syntax.......................................................................................................................................20
Base commands...............................................................................................................................21
Specific commands..........................................................................................................................25
DCMI 1.0 support.................................................................................................................................25
IPMI 2.0 support...................................................................................................................................25
Logging in to LO100.............................................................................................................................25
Logging in through a web browser.................................................................................................25
Logging in through the CLP............................................................................................................26
Browser main menu options.................................................................................................................26
Controlling server power remotely......................................................................................................27
Controlling server power from a browser.......................................................................................27
Controlling server power through the CLP....................................................................................28
Monitoring sensors...............................................................................................................................28
Viewing sensor data from a web browser.......................................................................................28
Table of Contents 3
Viewing sensor data from the BIOS Setup Utility...........................................................................29
Platform event filtering configuration.............................................................................................29
Platform event trap configuration...................................................................................................31
Using the system event log...................................................................................................................31
Accessing the system event log from a web browser......................................................................32
Accessing the system event log from the CLP................................................................................32
Accessing the system event log from the BIOS Setup Utility..........................................................32
Using Virtual KVM...............................................................................................................................33
Using the remote graphic console...................................................................................................34
Remote graphic console settings................................................................................................35
Mouse synchronization..............................................................................................................36
System buttons................................................................................................................................36
Using Virtual Media........................................................................................................................37
Adding a virtual media device..................................................................................................37
Shared virtual media devices.....................................................................................................38
Accessing the remote console through Telnet......................................................................................39
Redirecting BIOS console text through Telnet.................................................................................39
Redirecting a Linux console............................................................................................................40
Microsoft Windows EMS management...........................................................................................42
Hardware Inventory page.....................................................................................................................43
User administration..............................................................................................................................43
Changing user settings through a web browser.............................................................................44
Changing user settings through the CLP........................................................................................45
Network settings...................................................................................................................................45
Configuring network settings using a web browser.......................................................................45
Configuring network settings using the BIOS Setup Utility...........................................................46
Configuring network settings using the CLP..................................................................................47
Applying a license key..........................................................................................................................48
Importing a certificate...........................................................................................................................48
Creating a certificate........................................................................................................................49
Installing a certificate or private key through a web browser........................................................49
Installing a certificate or private key through the CLP...................................................................50
HP Systems Insight Manager support..................................................................................................51
Resolving character and line feed issues..............................................................................................51
Using VLAN Tagging...........................................................................................................................53
Server Support.................................................................................................................................53
Configuring VLAN Tagging............................................................................................................53
4 Technical support.........................................................................................................55
Software technical support and update service....................................................................................55
HP contact information.........................................................................................................................55
Before you contact HP...........................................................................................................................55
Acronyms and abbreviations..........................................................................................57
Index.................................................................................................................................59
4 Table of Contents

1 Operational overview

Overview

This guide explains the standard and optional operational features of the HP Onboard Administrator Powered by Lights-Out 100 (LO100) available for the following HP ProLiant server models:
ML110 G6 server
ML150 G6 server
DL120 G6 server
DL160 G6 server
DL160se G6 server
DL170h G6 server
DL180 G6 server
SL160z G6 server
SL170z G6 server
SL2x170z G6 server
ML110 G6 server
DL120 G6 server
HP ProLiant DL165 G7 Server
HP ProLiant SL165z G7 Server

New features

This release of LO100 adds support for the following:
HP ProLiant SL 170s G6 Server
VLAN tagging

Server management

LO100 delivers basic remote control of vital server resources, supports IPMI 2.0, DCMI 1.0, and provides system administrators with access to the server at any time, even before an operating system is installed on the server.
LO100 providestext mode console redirection, DMTF SMASH compliant command line interface, and browser access to many of the same system management functions. You can access LO100 through a dedicated Ethernet port or through the server serial port.

Server management features

With LO100, you can perform the following tasks:
Access a remote graphic console (Virtual KVM)
Access the serial console of the host operating system over the network using standards-based client utilities
Switch between serial console redirection or the LO100 command line interface
Communicate securely using SSL and SSH
Remotely control the power button of the server (power on and off the server), or perform warm or cold server reboots
Remotely monitor fan speed and system power state (S0 or S5)
Access the system event log
Access virtual media
Overview 5
Configure TCP/IP settings for the LO100 NIC
Control user access
Discover, identify, and launch LO100 from HP Systems Insight Manager
Access LO100 and server controls using a standard browser or new industry-standard SMASH CLP command line interface
Access command line help
Manage the server with IPMI 2.0 and DCMI 1.0 compliant applications
Access Telnet
Not all of the features displayed and described in the guide are available on all systems. To verify which features are supported on your system, see "LO100 standard features" and "LO100 optional (licensed) features" for more information.

LO100 standard features

For HP ProLiant ML110 G6, ML150 G6, DL120 G6, DL160 G6, DL160se G6, DL170h G6, DL180 G6, SL160z G6, SL170z G6, SL2x170z G6, and SL 170s G6 servers; and HP ProLiant DL165 and SL165z G7 servers, LO100 standard features include the following:
IPMI 2.0 and DCMI 1.0 elements available through the operating system (where supported)
IPMI-over-LAN support
Web browser access (HTTP) to power control, system event log, hardware status, and license key activation of optional features
SMASH CLP interface access to remote power control, system event log, hardware status, and operating system serial console
Support for SSL, SSH, and IPMI 2.0 security with factory-default self-signed certificates and keys

LO100 optional (licensed) features

LO100 optional features are activated with the purchase of the Lights-Out 100i Advanced Pack package. The Lights-Out 100i Advanced Pack includes:
Virtual media access
Virtual KVM
6 Operational overview

2 Configuration

Configuring LO100 with the LO100CFG utility

The SmartStart Scripting Toolkit is a server deployment product that delivers unattended automated installation for high volume ProLiant server installations. Available in Win32 and Linux editions, the Toolkit supports ProLiant DL and ML 300, 500, 700 and ProLiant BL servers in both Windows and Linux environments and now includes limited ProLiant 100 series support. The toolkit includes a modular set of utilities and important documentation that describes how to apply these new tools to build an automated server deployment process.
The toolkit contains an important tool for high volume LO100 configuration and deployment  the LO100CFG utility. Using this and other configuration tools in the SmartStart Scripting Toolkit will allow allow rapid, scripted installation of LO100 and other 100 series configurations. See the following Web page for the SmartStart Scripting Toolkit user guides for Windows and Linux, download links, and additional information regarding the LO100CFG utility: http://
h18000.www1.hp.com/products/servers/management/toolkit/index.html

Configuring network access

Through your server network connection, you can access the remote management CLP, verify POST (power-on self test) remotely, access the server through a web browser, and access the BIOS Setup Utility remotely.
To configure network access:
1. Connect a standard Ethernet cable from the LO100 NICto a network jack.
2. Press the F10 key to access BIOS.
3. Obtain the DHCP IP address.
If you are using ML110 G6 or DL120 G6:
a. Press the right arrow () key to scroll to the Advanced tab, and then scroll down
to IPMI. Press the Enter key.
b. Click LAN Settings, and then click Set IP Address Assignment to DHCP.
If you are using or ML150 G6, press the right arrow () key to scroll to the Advanced
tab, and then scroll down to IPMI.
If you are using DL160 G6, DL160se G6, DL170h G6, DL180 G6, SL160z G6, SL170z G6, SL2x170z G6, SL 170s G6 servers, or DL165 or SL 165 G7 servers, press the right arrow () key to scroll to the Advanced tab, and then use either of the following methods:
a. Press the down arrow () key to scroll to IPMI Configuration. Press the Enter key. b. Click Set LAN Configuration.
Obtain the IP address from BIOS Setup Utility under Advanced/IPMI Configuration/LAN Configuration. For more information, see "Obtaining a DHCP IP address from the BIOS Setup Utility (“Obtaining a DHCP IP address from the BIOS Setup Utility”).
Alternatively, you can perform one of the following methods:
Look at the DHCP clients table.
Look at the DNS client records for an entry of LO100<serial server number>. (The default DNS host name for each LO100 is unique.)
By default, LO100 has DHCP enabled and automatically negotiates an IP address.
4. With the DHCP IP address, use Telnet to log in to the remote management CLP, or use a
web browser to access the HTML interface.
To set up a static IP address, see "Setting up a static IP address from the BIOS Setup Utility".
Configuring LO100 with the LO100CFG utility 7

Configuring user accounts

LO100 supports four accounts types, with varying levels of permissions to view and control features. For more information on user accounts, see the "User administration" section. Two accounts are available by default, one of type administrator and one of type operator.
The administrator account enables the user to execute the full set of CLP commands and change management processor configuration. The default administrator account user name is admin, and the default password is admin.
The operator account enables the user to execute common commands and functions but restricts access to specific functions, such as adding and changing user account information and changing the configuration of the management processor. HP recommends logging in with the operator account to perform common functions. The default user name is Operator, and the default password is Operator.
For more information on how to log in to LO100, see the "Logging in to LO100" section.

Accessing BIOS Setup Utility and using function keys

Throughout the document, the F10 key is listed as the standard method of accessing the BIOS Setup Utility, saving changes, and exiting the utility. In some cases, the function keys (F keys) might not pass through the telnet client correctly to the remote system. If this occurs, use the following ESC key equivalents:
F8–ESC+8
F10–ESC+0
F12–ESC+@

Using the serial port

The server serial port provides basic serial port functionality and serves as an interface to LO100. You can configure the system serial port for exclusive use with LO100.
CAUTION: After enabling the serial port for use with LO100, legacy serial devices might not function correctly if attached to the serial port.
You must configure the LO100 serial port hardware parameters to work with your respective serial port communications software. LO100 serial port configuration is controlled through the BIOS Setup Utility.

Enabling serial access

1. Power up the server.
2. When POST displays the message, ROM-Based Setup, press the F10 key. If the server has
an administrator password configured, the system prompts you to enter the password. If the server does not have a password configured, the main screen of the BIOS Setup Utility appears.
3. Press the right arrow () key to navigate to the Advanced menu.
4. Choose one of these options:
NOTE: If you change the Serial Port Assignment, the BMC IP Address resets. The BMC IP address might not be the same after reboot.
On ML110 G6 and DL120 G6 servers:
On ML150 G6 servers:
8 Configuration
a. Press the down arrow () key to scroll to Console Redirection. b. Set the BIOS Serial Console Port to Enabled.
a. Press the down arrow () key to scroll to IPMI. Press the Enter key. b. Set Serial Port Assignment to BMC. c. Set Serial Port Switching to Enabled. d. Set Serial Port Connection Mode to Direct.
On DL160 G6, DL160se G6, DL170h, DL180 G6, SL160z G6, SL170z G6, SL 170s G6, SL2x170z G6 servers and DL165 and SL165z G7 servers:
a. Press the down arrow () key to scroll to IPMI Configuration. Press the Enter key. b. Scroll down to Serial Port Configuration. c. Set Serial Port Assignment to BMC. d. Set Serial Port Connection Mode to Direct.
5. Press the F10 key to save and exit.

Configuring serial port

1. Power on the server by pressing the Power On/Off button on the front panel.
2. When POST displays the message, ROM-Based Setup, press the F10 key. If the server has
an administrator password configured, the system prompts you to enter the password. If the server does not have a password configured, the main screen of the BIOS Setup Utility appears.
3. Press the right arrow () key to navigate to the Advanced menu.
4. Press the down arrow () key to scroll to IO Device Configuration, or, if you are using SL160z
G6 servers or DL165 or SL165z G7 servers, scroll to Super IO Configurations. Press the Enter key.
5. Set Embedded Serial Port to 3F8/IRQ4.
6. From the Remote Access Configuration, configure the BIOS Serial Console as follows:
BIOS Serial Console-Enabled
EMS Support-Disabled (for ML150 G6)
Base Address/IRQ-3F8h, 4
Serial Port Mode-9600 8, n, 1
Flow Control-None
Redirection after BIOS/POST-Enabled
Terminal Type-VT100
7. For DL 165 G7 and SL 165 G7 servers, from the Remote Access Configuration, configure the
BIOS Serial Console as follows:
BIOS Serial Console Port-Enabled
BIOS Serial Console Port Baud Rate-[115200 8, n, 1]
Redirection after BIOS POST-Always
Terminal Type-ANSI
VT-UTF8 Combo Key Support-Enabled
8. Review the serial port settings, and make sure the settings match the serial port
communications software settings used to connect to LO100.
9. To return to the previous screen, press the Esc key, or to save the changes and exit Setup, press the F10 key.

Using TCP/IP over Ethernet management port

You can configure LO100 LAN port access using two different Ethernet ports: the dedicated 10/100 LO100 management port or through a side-band connection using the server embedded NIC. The side-band, shared, or UMP options utilize one server Ethernet port for both server
Using TCP/IP over Ethernet management port 9
network traffic and LO100 network traffic reducing the number of network cables that you must attach to the server.
NOTE: Not all servers come with the option of selecting a sideband or dedicated NIC. Some have only one option.

Selecting a shared Ethernet management port

1. Power on the server by pressing the Power On/Off button on the front panel.
2. When POST displays the message, ROM-Based Setup, press the F10 key. If the server has
an administrator password configured, the system prompts you to enter the password. If the server does not have a password configured, the main screen of the BIOS Setup Utility appears.
3. Press the right arrow () key to navigate to the Advanced menu.
NOTE: On the ML150 G6, ML110 G6, and DL120 G6 systems, the Virtual KVM and Virtual Media functions are not available when used with the Shared NIC function. If you want LO100 Advanced Pack features on the ML150 G6, use the dedicated NIC mode.
4. Press the down arrow () key to scroll to IPMI Configuration. Press the Enter key.
5. Scroll to the LAN Configuration menu by pressing the down arrow () key. Press the Enter
key.
6. Choose one of these options:
On ML110 G6 or DL120 G6, press the down arrow () key to IPMI. Press the Enter key,
and then set BMC NIC Allocation to Shared.
On ML150 G6, set BMC NIC Mode to Shared.
On DL160 G6, DL160se G6, DL170h G6, DL180 G6, and SL160z G6, SL170z G6, or
SL2x170z G6, set BMC NIC Allocation to Enabled.
On DL165 G7, press the down arrow () key to BMC NIC Allocation, then select
Dedicated/Shared. Press the Enter key.
7. To return to the previous screen, press the Esc key, or to save the changes and exit Setup, press the F10 key.
The TCP/IP over Ethernet management port, whether dedicated or shared, is a standard Ethernet 10/100Mb interface that connects to the network using a standard Ethernet cable. Before using the dedicated management port, you must determine the DHCP IP address or set a static IP address.

Obtaining a DHCP IP address from the BIOS Setup Utility

By default, LO100 has DHCP enabled and automatically negotiates an IP address. To view the DHCP IP address, run the BIOS Setup Utility or retrieve the DHCP IP address using CLP through the serial port connection. To view the DHCP IP address using the BIOS Setup Utility:
1. Power on the server by pressing the Power On/Off button on the front panel.
2. When POST displays the message, ROM-Based Setup, press the F10 key. If the server has
an administrator password configured, the system prompts you to enter the password. If the server does not have a password configured, the main screen of the BIOS Setup Utility appears.
3. Press the right arrow () key to navigate to the Advanced menu.
4. To obtain the DHCP IP address, choose one of these options based on the server model:
On ML110 G6 and DL120 G6 servers:
10 Configuration
a. Press the down arrow () key to navigate to IPMI. Press the Enter key. b. Press the down arrow () key to navigate to LAN Settings. Press the Enter key. c. Set IP Address Assignment to DHCP.
On ML150 G6 servers:
a. Press the down arrow () key to navigate to IPMI. b. Scroll to BMC LAN Configuration. Press the Enter key.
On DL160 G6, DL160se G6, DL180 G6, and SL160z G6 servers:
a. Press the down arrow () key to navigate to IPMI Configuration. b. Scroll to Set LAN Configuration, and then scroll to BMC LAN Configuration. Press
the Enter key.
On DL170h G6, SL170z G6, SL170s G6, and SL2x170z G6 servers:
a. Press the down arrow () key to navigate to IPMI Configuration. b. Scroll to LAN Configuration, and then scroll to DHCP IP Source. c. Select either of the following:
To set BMC NIC to DHCP, scroll down to DHCP IP Source, and then to enable,
press the Enter key.
To save all changes and exit, press the F10 key.
5. To return to the previous screen, press the Esc key, or to save the changes and exit Setup, press the F10 key.
To configure or change your network settings, see "“Network settings”.

Using the DNS naming feature

The DNS naming feature enablesyou to reference the server nameassigned to the server without having to know the server IP address or obtaining the IP address for a given server. This ability to reference the server name occurs after the server has registered its name with the DNS, using the default naming sequence assigned by LO100, LO100 - {Server Serial Number}. (For example, LO100 - CNQ123456.)
NOTE: This requires DHCP and will not work with static IP addresses.
To obtain the serial number, look at the pull-out tab usually located in the front panel of the server.
You can change the server name through the Network Settings page of the LO100 web interface.
You can also change the server name through the telnet interface.
To do this, type the following in the telnet interface:
cd map1/nic1 set oemhp_hostname=<new_name>
where
<new_name>
is the new DNS host name your server will have.
To retrieve a server IP address using the DNS naming feature, use a system connected to the same network, open a DOS command prompt, and thentype nslookup {server name}. (For example, nslookup {CBQ123456}.)
Depending on your DNS server configuration, it might take up to 45 minutes for the DNS to register a server name. For more DNS options in LO100, see "Configuring network settings using a web browser".
Using TCP/IP over Ethernet management port 11

Setting up a static IP address from the BIOS Setup Utility

By default, LO100 has DHCP enabled and automatically negotiates an IP address. To disable DHCP and enable a static IP address:
1. Press the F10 key during POST to enter the BIOS Setup Utility.
2. Press the right arrow () key to navigate to the Advanced menu.
3. To set your network BIOS settings, choose one of these options:
On ML110 G6 and DL120 G6 servers:
a. Press the down arrow () key to scroll to IPMI. Press the Enter key. b. Press the down arrow () key to scroll to the LAN Settings menu. Press the Enter
key.
c. On IP Address Assignment, select Static.
On ML150 G6 servers:
a. Press the down arrow () key to scroll to IPMI. Press the Enter key. b. Press the down arrow () key to scroll to the end, and then select BMC LAN
Configuration.
c. On BMC LAN Configuration, select Static. d. Press the down arrow () key to scroll down and enter a valid IP address, subnet
mask, and gateway address (press the Tab key to move between address fields).
On DL160 G6, DL160se G6, DL180 G6, and SL160z G6 servers:
a. Press the down arrow () key to scroll to IPMI. Press the Enter key. b. Press the down arrow () key to scroll to the LAN Configuration menu. Press the
Enter key.
c. On DHCP IP Source, select Disabled. d. Press the down arrow () key to scroll down and enter a valid IP address, subnet
mask, and gateway address (press the Tab or period (.) key to move between address fields).
On DL170h G6, SL170z G6, SL170s G6 and SL2x170z G6 servers:
a. Press the down arrow () key to scroll to IPMI Configuration. Press the Enter key. b. Press the down arrow () key to scroll to the LAN Configuration menu. Press the
Enter key.
c. Press the down arrow () key to scroll to the end, and then select DHCP IP Source. d. Select either of the following:
To set BMC NIC to Disabled, press the Enter key.
On DL165 G7 and And SL 165 G7 servers:
a. Press the down arrow () key to scroll to IPMI Configuration. Press the Enter key. b. Press the down arrow () key to scroll to the LAN Configuration menu. Press the
Enter key.
c. Press the down arrow () key to scroll to the BMC LAN Configuration menu. Press
the Enter key.
d. Select DHCP/static, then press the Enter key.
To save all changes and exit, press the F10 key. To save all changes and exit, press
the F10 key.
4. Press the F10 key to save and exit.
To restore DHCP, see "Configuring network settings using the BIOS Setup Utility."

Enabling or disabling Telnet and HTTP services from the BIOS Setup Utility

On ML110 G6 and DL120 G6 servers:
12 Configuration
1. Press the down arrow () key to scroll to IPMI. Press the Enter key.
2. Press the down arrow () key to scroll to the LAN Settings menu. Press the Enter key.
3. Press the down arrow () key to scroll to the Telnet Services and HTTP Services. Press the Enable or Disable key as appropriate.
On ML150 G6 servers:
1. Select Advanced>IPMI.
2. Set the following:
BMC HTTP Service-Enabled or Disabled, as appropriate
BMC Telnet Service-Enabled or Disabled, as appropriate
On DL160 G6, DL160se G6, DL180 G6, and SL160z G6 servers and DL165 and SL165z G7 servers:
1. Select either of the following:
If you are enabling or disabling Telnet, select Advanced>IPMI Configuration>LAN
Configuration>BMC Telnet Service.
If you are enabling or disabling HTTP, select Advanced>IPMI Configuration>LAN
Configuration>BMC HTTP Service.
2. To enable or disable, press Enter.
3. Press the F10 key to save all changes and exit.
On DL170h G6, SL170z G6, SL170s G6, and SL2x170z G6 servers:
1. Press the right arrow key () to scroll to the Advanced tab. Press the Enter key.
2. Press the down arrow () key to scroll to IPMI Configuration. Press the Enter key.
3. Press the down arrow (¯) key to scroll to Set LAN Configuration. Press the Enter key.
4. Scroll to LAN Protocol Control. Press the Enter key.
5. Press the Enable or Disable key to enable or disable the Telnet or HTTP as appropriate.

TCP and UDP port numbers used by LO100

The following table lists the TCP and UDP port numbers used by the various LO100 network-accessible features. You can use this information to configure networking infrastructure or security settings.
Telnet23
SNMP trap162
HTTPS443
Embedded by defaultSupportProtocolPort number
YesSecure Shell connectionsSSH22
YesCommand line interface,
Remote text console
YesFirmware upgradeTFTP69
YesFirmware upgradeHTTP80
YesWeb-based user interface
and LO100
Virtual KVM
YesSecure access to the web-based user interfaceVirtual KVM
YesIPMI-over-LAN connectionsIPMI RMCP+623
YesIPMI-over-LAN connectionsSecure IPMI RMCP+664
YesStorageStorage5901
Using TCP/IP over Ethernet management port 13

Updating the firmware

To update the LO100 firmware, use the ROMPaq utility. Downloads for the ROMPaq utility are available on the HP website (http://www.hp.com/support). For more information about using the ROMPaq utility, refer to the HP website (http://www.hp.com/servers/manage).
NOTE: LO100 does not support ROMPAQ flashing from virtual media.
After the ROMPaq utility flashes the selected device, cycle power manually to reboot the operating system.

Remotely updating the firmware

Use the load command to remotely update the LO100 firmware. The firmware file must be an uncompressed firmware image file created using the DOS ROMPAQ utility found on the Lights-Out 100 Firmware Upgrade Diskette Utility, which is available for download from the HP website (http://www.hp.com/servers/lights-out).
To create an uncompressed image file, enter the following command at the DOS prompt:
ROMPAQ /D <infile> <outfile>
where <infile> is the ROMPAQ firmware image file and <outfile> is the file name for the uncompressed binary image file. For example:
ROMPAQ /D cpqq0801.D14 ldrImage.bin ROMPAQ Firmware Upgrade Utility, Version 5.02 (R) Copyright (c) Hewlett-Packard Corporation, 1994-2006 Input file: CPQQ0801.D14 Output file: LDRIMAGE.BIN
The load command is used to retrieve a binary image from a specific source location (specified as a URL) and place it at the specified target address.
The load command can download and flash a firmware image file using TFTP from the specified location.
To flash the firmware using TFTP settings:
On a Windows operating system:
1. Copy the BMC firmware into a directory on the server.
2. Run TFTP by launching the executable file tftpd32.exe.
3. Navigate to TFTP configuration>Settings, and set Timeout to 4 seconds and Max Retransmit to 10.
4. Enter the Base Directory and TFTP Server IP Address. Base Directory is the path where
the BMC firmware is residing. TFTP Server IP Address is the IP address of the TFTP server (for example, 10.141.38.157).
On a Linux operating system:
1. Navigate to Applications>Systems Settings>Server Settings>Services and make sure that TFTP and xinetd are running.
2. Open the /etc/xinetd.d/tftp file and modify the parameter server_args to include
-T 4000000. For example,server_args = -c -s /tftpboot -T 4000000
While in this directory, to modify server parameters, type gedit.
3. Reset xinetd to allow it update. Open a terminal and type service xinetd restart. On non-RHEL Linux platforms, open the Services menu and reset xinetd manually.
4. If a firewall is enabled, disable it or modify the settings to allow the firewall to connect to the TFTP port. To change the firewall settings, navigate to Applications>System
Settings>Security Level, and enter 69:udp in the parameter of the other port.
5. Place the image file in the /tftpboot folder, which is in the TFTP servers root directory.
14 Configuration
To update the firmware, log in to LO100 as the administrator through the CLP interface, and issue the load command to upload and install the firmware from the map1/firmware directory.
1. Start a CLP session. To access CLP: a. Navigate to Start>All Programs>Accessories>Command Prompt. b. At the command prompt, enter telnet <IP address>.
2. At the CLP prompt, enter cd map1/firmware.
3. At the CLP prompt, enter
load -source <URI> -oemhpfiletype csr
where:
<URI> is the //<tftpserver IP>/<filename> to be downloaded.
<tftp server IP> is the URL or IP address of the TFTP server containing the firmware.
<filename> is the file name of the image file (LdrImage.bin in this example).
For example, enter:
load -source //10.141.38.157/LdrImage.bin -oemhpfiletype csr
Alternatively, you can also install the firmware through a browser. For more information, see "Installing firmware through a web browser".
The TFTP application might report an error in the early part of the firmware upload process, during the firmware image validation process. An error does not necessarily indicate failure of the firmware upload and does not prevent successful firmware uploads. A successful firmware upload typically takes several minutes. After the firmware upgrade process is complete, verify that the new version of the firmware is active.
If the firmware upgrade process fails after sufficient time (at least 5 minutes), reboot the server, and verify that the previous version of the firmware is still active. Always reboot the server before retrying the firmware upgrade process.
Do not reset the system or the BMC during download; the server may become corrupt.
After installing the firmware, the IP address of the server might reset to the default value. You must locally reset the IP address to the desired address.
NOTE: After using the load command LO100 will reset ending your CLP interface session. You must reconnect to the CLP interface.
NOTE: When you use the CLP load command with TFTPD32, HP recommends using a 4-second timeout and 10 retries.
Reset the system after the download is complete to load the SDRR and CFGs so that LO100 can recognize the individual server platform and not a "ProLiant Generic G6."

Installing firmware through a web browser

The Firmware Download page enables you to install new firmware images. To install firmware through the browser:
1. Log in to LO100 as an administrator.
2. On the browser main menu recognition box, click Firmware Download.
3. In the TFTP server IP address field, enter the IP address of the TFTP server.
4. Enter the file name of the firmware image in the File Name field. Include the path relative
to the TFTP server root in the file name.
5. If you are using Linux to install the firmware: a. Place the image file in the /tftpboot folder, which is in the TFTP servers root directory. b. Enter the file name of the firmware image in the Firmware File name field. Include the
path to the TFTP server root in the file name.
Updating the firmware 15
6. Click Apply. The BMC is reset.
7. Reconnect to the web browser. A typical flash can take several minutes.

Updating the firmware through the online flash utility

The Lights-Out 100 Online Flash Utility allows a user to update the BMC firmware through a supported operating system without resetting the server. The online flash utilities may be downloaded at http://www.hp.com/ under the downloads section for each platform.
Supported operating systems include the following:
Red Hat Enterprise Linux 5.4 (i386, x86_64)
Red Hat Enterprise Linux 4.8 (i386, x86_64)
SuSE Linux Enterprise Server 10 (i386, x86_64)
SuSE Linux Enterprise Server 11 (i386, x86_64)
Windows Server 2008 (x86, x64) - All Editions
Windows Server 2008 R2 – All Editions
NOTE: Windows Server 2003 is not supported.
To use the online flash component on a Windows operating system, perform the following steps:
1. Copy the LO-100 online flash utility to a directory on the server file system.
2. Double click the executable file.
3. Click “Install.”
4. Wait for the installation process to complete.
NOTE: This may take up to 45 minutes on some servers. Do not shut down the server or interrupt the flash process.
5. Click “Finish.” No restart is necessary upon completion.
To use the online flash component on a Linux operating system, perform the following steps:
1. Copy the LO-100 online flash utility to a directory on the server file system.
2. Open a bash shell at the directory where the online flash component is located.
16 Configuration
3. Execute the following commands:
chmod 777 CPxxxxxx.scexe
./CPxxxxxx.scexe
4. Wait for the installation process to complete.
NOTE: This may take up to 15 minutes on some servers. Do not shut down the server or interrupt the flash process.
5. Click “Finish.” No restart is necessary upon completion.
Updating the firmware 17
18

3 Using LO100

Using SSL

SSL is a protocol used to transmit private documents through the Internet and uses a private key or certificate to encrypt data transferred over the SSL connection. The Lights-Out 100 provides security for remote management in distributed IT environments by using an industry-standard encryption protocol for data traveling on unsecured networks. SSL is available by default.
LO100 comes preinstalled with a certificate. To install a user-specific certificate, see the one-time "Importing a certificate" setup procedure.
If you cannot access the login page, you must verify the SSL encryption level of your browser is set to 128 bits. The SSL encryption level within the management processor is set to 128 bits and cannot be changed. The browser and management processor encryption levels must be the same.
To use the preinstalled certificate, enter https://ipaddress in the address line of the browser, which uses SSL-encrypted communication. Enter http://ipaddress to use non-SSL encrypted communication.

Using SSH

SSH is a Telnet-like protocol for logging in to and executing commands on a remote machine, which includes security with authentication, encryption, and data integrity features. The Lights-Out 100 remote management processor can support simultaneous access from four SSH clients. After SSH is connected and authenticated, the command line interface is available. LO100 supports two simultaneous SSH connections. SSH is available by default.
LO100 supports the SSH version 2 and the following client utilities:
PuTTY 0.54 or later
OpenSSH
LO100 comes preinstalled with a certificate. To install a user-specific certificate, see the one-time "Importing a certificate" setup procedure.

Using the SSH utility

When using a SSH utility to connect to a server for the first time, the utility prompts you to accept the server public key, sometimes referred to as a host key. Accepting this key authorizes the utility to store a copy of the public key in its own database. The utility recognizes the server when future connections are attempted by comparing the public key to the one stored in its database.
NOTE: Logging in to an SSH session could take up to 90 seconds. Depending on the client used, you might not see on-screen activity during this time.
To access the remote management processor using SSH:
1. Open an SSH window.
2. When prompted, enter the IP address, login name, and password.
Using SSL 19
Loading...
+ 43 hidden pages