HPE 804942-B21 Getting Started Guide

QuickSpecs

HPE Synergy Frame Link Module

Overview

HPE Synergy 4-port Frame Link Module (FLM)

The HPE Synergy 4-port Frame Link Module (FLM) is a ‘frame manager’ designed for Composable Infrastructure. The FLM

• File Encryption using Trusted Platform Module (TPM) functionality.

Figure 1: HPE Synergy 4-port Frame Link Module (FLM)

Appliance port connectivity LEDs

LINK port [SFP+]4

USB-C (KVM connection)1

Health LED

LINK port activity LED

USB adapter thumb screw connection

MGMT port activity LED

UID LED button

MGMT port [SFP+]

5, 6

10.

Appliance ports [SFP+]

2, 3

NOTE1: Support for USB-C storage devices at the USB 2.0 level.

efficiently manages the operations of a Synergy Frame in conjunction with HPE Composer, which is powered by HPE OneView.

Key functions of the HPE Synergy Frame Link Module include:

• Scaling the environment by linking Synergy Frames together in a management ring (single management domain),

• Separation of the data & management networks for management performance and resilience against Denial of Service

(DoS) attacks,

• Auto-discovery of resources by collecting asset and inventory info of components in linked frames,

• Control and monitoring of the thermal and power infrastructure resources in an HPE Synergy Frame,

• Provides out-of-band management interface to HPE OneView to configure and manage interconnect modules.

• Reporting the health status for each component installed in a frame, and

• Hosting the HPE Synergy Console user interface.

The HPE Synergy 4-port FLM provides enhanced security in Synergy systems by implementing:

• Secure Start to validate the firmware to prevent tampering,

• Hardware Root of Trust tied to the FLM CPU for further firmware validation, and

NOTE2: Provides a direct network connection to an appliance in bay 2. Reserved for future use.

: Provides a direct network connection to an appliance in bay 1. Reserved for future use.

NOTE

: Use 10GbE transceivers and cables for LINK port connections. NOTE5: 10GbE or 1GbE based on the cable or transceiver used. NOTE6: The transceiver or cable used must match the port speed of the switch used for management network connectivity.

Page

QuickSpecs

HPE Synergy Frame Link Module

Overview

NOTE: HPE Synergy 4-Port FLMs require supported SFP+ DAC cables or SFP+ transceivers for cabling.

What's New

The HPE Synergy Frame Link Module (FLM) is a ‘frame manager’ designed for Composable Infrastructure. The FLM efficiently

NOTE: HPE Synergy FLMs (both 2-port and 4-port versions) are compatible with existing applications and workloads.

manages the operations of a Synergy Frame in conjunction with HPE Composer, which is powered by HPE OneView.

HPE Synergy 4-port FLM is a new product version which implements enhancements for Synergy users.

Enhanced security for Synergy systems is implemented in the

• Secure Start to validate the firmware to prevent tampering,

• Hardware Root of Trus

• File Encryption

using Trusted Platform Module (TPM) functionality.

tied to the FLM CPU for further firmware validation, and

Additional capabilities in the HPE Synergy 4-port Frame Link Module (FLM) include:

• SFP+ ports to enable optical connections for reaching distant frames or remote subnets in a datacenter,

• Two additional direct-to-the-appliance bay ports which are reserved for future use, and

• USB-C connector (USB 2.0) for DisplayPort connectivity via a dongle.

HPE Synergy 4-port FLM:

Page

QuickSpecs

HPE Synergy Frame Link Module

Standard Features

Product Features

Performance

• Management (MGMT) uplink connections can operate at 10 GbE to support multiple users or

administrators and to provide faster downloading of virtual media for firmware/software updates.

• Management (MGMT) port connections on the FLM are able to auto-negotiate down to 1 GbE to

mate with ToR switches.

• Management rings connect multiple Synergy Frames using 10 GbE (LINK) connections

• HPE Synergy 4-port Frame Link Modules have SFP+ ports which enable connections to distant

frames and remote subnets.

Management

• HPE Synergy FLMs are ‘frame managers’ which operate under HPE Composer (powered by HPE

OneView) management control.

• An out-of-band management interface to HPE OneView is provided by HPE Synergy FLMs to

configure and manage interconnect modules.

• User Interface for the Synergy FLM includes USB-C (supported to the USB 2.0 level), Health LED,

User ID (UID), and DisplayPort (via USB Adapter cable).

• Firmware for managing the HPE Synergy Frame Link Module is included in every HPE Synergy

Custom SPP release, as part of HPE Synergy Software Releases.

• HPE Synergy Software Releases provide users with tested sets of firmware, drivers, and related

updates to keep systems up-and-running as stable operating environments. For more information, see HPE Synergy Software Releases - Overview

Security All Synergy Frame Link Modules operate in FIPS (Federal Information Processing Standard) security mode. If HPE Synergy Composer (powered by HPE OneView) is put into CNSA (Commercial National Security Algorithm) mode, then HPE Composer will put the FLM into CNSA mode also.

Security enhancements which are unique to the HPE Synergy 4-Port Frame Link Module include:

• Management data stored on the frame link module is encrypted by default. The encryption is rooted

in the integrated Trusted Platform Module (TPM) on the hardware device,

• Hardware Root of Trust (related to NIST SP800-193) which ensures that only firmware signed by

Hewlett Packard Enterprise can be used to boot the frame link module,

• Secure Start (related to NIST SP800-193) which provides secure firmware updates,

• Firmware Resiliency prevents modification of the current running firmware image which increases

reliability and by ensuring a good firmware image is always available, and

• Hardware-enforced write protection protects the frame link module from unauthorized changes.

Security features which are common to all HPE Synergy Frame Link Modules include:

• Separation of the production (‘data’) network from the management (or ‘control’) network, which

protects against Denial of Service (DoS) attacks,

• Audit logging,

• Verification of certificates for Transport Layer Security (TLS),

• Secure protocols and certifications such as:

– FIPS (Federal Information Processing Standard) 140-2 Level 1, – PCI-DSS compliance, – Commercial National Security Algorithm (CNSA) Suite B, and – General Data Protection Regulation (GDPR),

• Verified boot and Authenticated updates,

• Centralized platform security policies with Certificate management,

• No clear text passwords,

• Scope based access control (SBAC), and

• Secure out-of-the-box experience with Secure Erase of user data.

Page

QuickSpecs

HPE Synergy Frame Link Module

Service and Support

HPE Pointnext operational and Warranty Information

HPE Pointnext Operational Services

Protect your business beyond warranty with HPE Pointnext Operational Service.

HPE Pointnext provides a comprehensive portfolio including Advisory and Transformational, Professional, and Operational Services to help accelerate your digital transformation. From the onset of your transformation journey, Advisory and Transformational S solution roadmap. Professional Services specializes in creative configurations with flawless and on implementation, and on like Flexible Capacity and Datacenter Care, to keep your business at peak performance. HPE is ready to bring together all the pieces of the puzzle for you, with an eye on the future, and make the complex simple.

Choose from services innovative support when your products are connected to Hewlett Packard Enterprise, you choose the precise level of attention and support your business demands.

HPE Technolog

HPE Technology Services delivers confidence, reduces risk and helps customers realize agility and stability. Connect to Hewlett Packard Enterprise to help prevent problems and solve issues faster. Our support technology lets you informed and in control, anywhere, any time.

Protect your business beyond warranty with HPE Support Services

HPE support services offer complete care and support expertise with committed response choices that are designed to meet your IT and business needs.

HPE Foundation Care services

HPE Proactive Care

through proactive service management and enhanced technical

Connect your devices

Unlock all of the benefits of your technology investment by connecting your products to Hewlett Packard Enterprise. environment. By connecting, you will receive 24x7 monitoring, pre automatic parts dispatch. HPE Proactive Care Service and HPE Datacenter Care Service customers benefit fr available to you with your server storage and networking products, securely connected to HPE support. Learn more about getting connected at

HPE Proactive Care Services

HPE Proactive Care Advanced

This service helps achieve a higher return on your product assigned Account Support Manager who will share best practice advice and personalized recommendations designed to help improve availability and performance to increase stability and reduce unplanned downtim parts dispatch. For business critical incidents, this service offers critical event management to reduce mean time to resolution. Basic Software Support, and Collaborative Call Management for selected non hour callback

See https://www.hpe.com/h20195/v2/getdocument.aspx?docname=4AA5-3259ENW.

ervices focus on designing the transformation and creating a

-time

-budget execution. Finally, operational services provides innovative new approaches

aligned to our product offerings and lifecycle. From proactive onsite services to

y Services for HPE Synergy

to tap into the knowledge of millions of devices and thousands of experts to stay

offer scalable reactive support-packages for HPE Synergy and software. You

hoose the type and level of service that is most suitable for your IT and business needs.

keeps your system stable and reliable helping to prevent problems and reduce outages

response.

Reduce down time and increase diagnostic accuracy using a single consolidated view of your

-failure alerts, automatic call logging, and

om proactive activities to prevent issues and increase optimization. All of these benefits are already

http://www.hpe.com/services/getconnected.

- 24x7 coverage, three year Support Service

investment with personalized support from a local

e. Leverage your system’s ability to connect to HPE for pre-failure alerts, automatic call logging and

This recommendation provides 24x7 coverage with four-hour response for hardware and

-HPE software that offers two-

for supported software issues.

also

Page

+ 9 hidden pages