Configuring the HP iLO on ArcSight Appliances

Background ArcSight provides limited support and assistance for an embedded management feature, HP iLO (Integrated Lights-Out Management), which comes standard with select ArcSight appliances. This document describes the procedures for enabling, setting up and accessing iLO using the web interface. Since this feature is provided through the hardware vendor directly, no additional support or assistance from ArcSight other than what is described below should be inferred.

The iLO web functionality can only be accessed via the procedures outlined below and cannot be configured or administered through the ArcSight web interface.

Supported Models This feature is supported only on the following ArcSight products: C5400, C3400, E7400, L7400, L7400-SAN, N5400, M7400, V7400, and L3400.

Description of HP iLO Functionality The iLO on ArcSight appliances enables out-of-band management of ArcSight appliances. This capability can be helpful when physical access to the appliance is difficult, e.g. a remote location, or a data center with strict access restrictions. It gives administrators secure remote management capabilities regardless of server status or location. iLO is available whenever the appliance is connected to a power source even if the server main power switch is in the OFF position.

Multiple methods are available to access iLO. However, Arcsight has documented the process using the web graphical user interface (GUI) to set up iLO for a remote KVM connection. Further details for this procedure can be found at: http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02111169/c02111169.pdf

The iLO has a LAN port that is separate from the system LAN port. It is labeled “ilo”. The method by which iLO acquires an IP address is dependent upon whether DHCP is enabled or disabled on the server.

• For users with DHCP enabled (RECOMMENDED), you will not require the BIOS password to initially configure iLO. However you will need the host name (located on the machine) before proceeding.. The detailed procedure for configuring HP iLO using DHCP is found on page 20 in the following manual: http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02111169/c02111169.pdf

Once you have set up access to iLO, you will also be able to configure a static IP address from web interface if desired.

• For user with DHCP disabled, you will need to contact ArcSight support and obtain the BIOS password before proceeding with the steps below for initially setting up a static IP address.

This iLO network interface needs to be configured and assigned a valid network configuration. Furthermore, access to the iLO is protected using a user name and password. Integrity iLO comes preconfigured with an Administrator account and a randomly generated password. Arcsight recommends creating additional users if desired (see below). The default login information with all rights (Administrator level) is:

• login = Administrator

• password = randomly generated password found on the iLO Network Information Tag (located on the front panel)

Once configured, the iLO offers the following features that are most relevant for ArcSight appliances:

• Power Management allows a user to control the power on the appliance. Turn on, off or reboot the appliance.

• Remote Console allows a user to access the system console remotely and perform tasks that would normally require physically attaching a keyboard, monitor and mouse to the system.

ArcSight highly recommends configuring iLO when the appliance is originally deployed, if you intend to use this troubleshooting and debugging functionality. This will ensure that it is available for use when you need it.

Configuring HP iLO For the initial configuration of iLO on an appliance, a keyboard and monitor attached to the appliance are required. It is also necessary to reboot the appliance during this process.

1. Reboot the appliance, following the directions in the product documentation.

2. Closely watch the POST (Power On Self Test) on the monitor.

3. Once you see the following prompt Press F8 to launch Integrated Lights Out menu.

4. Enter the Setup Password when prompted (Skip if DHCP enabled and go to Step 10)

5. Disable DHCP setting. Integrated Lights Out menu launched > Set network > DNS/DHCP

6. Set DHCP Enable to OFF (hit the space bar to changes the setting from ON to OFF). Enter [F10] to save the setting.

7. For more advanced options for setting up name, like configuring DNS server, you can enter [F1] to configure more network options.

8. Configuring the network setting for the iLO interface. Select Network NIC and TCP/ IP option from the menu.

9. Enter the IP address, subnet mask, and gateway. Enter [F10] to save the setting.

10. Adding user to access HP iLO web interface. This step is optional because iLO comes preconfigured with an Administrator. In this step we can create an additional user “admin.”

User > Add > Add user.

Set all administrator privilege to “Yes.”

11. After making the changes, exit. File > exit > You will be prompted with message “Are you sure?” > Hit [Enter] for ”OK.”

Accessing the iLO web GUI Now that you have configured the HP iLO network setting and admin user, you can use the web interface to access the appliance’s remote console. iLO web GUI functions are supported by Mozilla Firefox and Microsoft Internet Explorer.

To access the remote console to the appliance:

1. Open a web browser and enter the IP address you assigned for the HP iLO.

2. Confirm the SSL Security Warning.

3. The Integrated Lights-Out login page appears. On the login prompt, enter the user name and password you assigned or you can use the default administrator account.

4. In remote console section, there are two options to use to console for the System KVM

o Integrated Remote Console: Access the system KVM and control Virtual Power & Media from a single console under Microsoft Internet Explorer or Mozilla Firefox. (Microsoft .NET Framework 3.5., available through Windows Update, is required.)

o Java Integrated Remote Console: Access the system KVM from a Java applet-based console requiring the availability of a JVM.

5. In the example, select Java Integrated Remote Console which will launch console KVM session in the Java applet.

Further Information For further information, please refer to the iLO documentation, available online at:

http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02111169/c02111169.pdf

The ArcSight 3400 and 5400 series are based on the HP ProLiant DL360 G7 servers and the ArcSight 7400 series are based on the HP ProLiant DL360 G7 and DL380 G7 servers.

_____________________________________________________________________________________

Copyright © 2011 ArcSight, Inc., an HP Company, ArcSight, the ArcSight logo, ArcSight TRM, ArcSight NCM, ArcSight Enterprise Security Alliance, ArcSight Enterprise Security Alliance logo, ArcSight Interactive Discovery, ArcSight Pattern Discovery, ArcSight Logger, FlexConnector, SmartConnector, SmartStorage and CounterACT are trademarks of ArcSight, Inc. All other brands, products and company names used herein may be trademarks of their respective owners. Follow this link to see a complete statement of ArcSight's copyrights, trademarks, and acknowledgements: http://www.arcsight.com/company/copyright/ The network information used in the examples in this document (including IP addresses and hostnames) is for illustration purposes only. This document is ArcSight Confidential.