HP iLO 3 User Guide

AbstractThe HP iLO 3 firmware provides ways to configure, update, and operate HP ProLiant servers remotely. This guide describesthese features and how to use them with the iLO web interface and iLO RBSU.

This guide discusses HP iLO for HP ProLiant servers and HP ProLiant blade systems. For information about iLO for Integrityservers and server blades, see the HP website at http://www.hp.com/go/integrityiLO.

HP Part Number: 616301-004Published: October 2012Edition: 1

Copyright 2011, 2012 Hewlett-Packard Development Company, L.P

Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial

Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under

vendor's standard commercial license.

The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express

warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall

not be liable for technical or editorial errors or omissions contained herein.

Acknowledgements

Microsoft, Windows, Windows NT, Windows XP, and Windows Vista are U.S. registered trademarks of Microsoft Corporation.

Intel is a trademark of Intel Corporation in the U.S. and other countries.

Java is a registered trademark of Oracle and/or its affiliates.

Contents1 Introduction to iLO....................................................................................12

iLO web interface...................................................................................................................12iLO RBSU...............................................................................................................................13iLO Mobile application............................................................................................................13

2 Setting up iLO..........................................................................................14Preparing to set up iLO............................................................................................................14Connecting iLO to the network.................................................................................................15Setting up iLO by using iLO RBSU.............................................................................................16

Configuring the network settings (static IP addresses only).......................................................16Setting up iLO user accounts by using iLO RBSU.....................................................................18

Setting up iLO by using the iLO web interface............................................................................19Logging in to iLO for the first time.............................................................................................19Activating iLO licensed features................................................................................................20Installing the iLO drivers...........................................................................................................20

Microsoft device driver support............................................................................................20Linux device driver support..................................................................................................21VMware device driver support.............................................................................................21

3 Configuring iLO.......................................................................................22Updating iLO firmware............................................................................................................22

Updating firmware by using an online update method............................................................22Performing an in-band firmware update............................................................................22Performing an out-of-band firmware update.......................................................................23

Updating firmware by using an offline method.......................................................................23Obtaining the iLO firmware image file..................................................................................23Updating iLO firmware by using a browser............................................................................24

Using language packs............................................................................................................25Installing a language pack..................................................................................................25Selecting a language pack.................................................................................................26Configuring the default language settings..............................................................................27Configuring the current language settings..............................................................................27Removing a language pack.................................................................................................27

iLO licensing..........................................................................................................................28Installing an iLO license by using a browser..........................................................................28

Administering users.................................................................................................................29Viewing local users............................................................................................................30Viewing directory groups ...................................................................................................30Adding or editing local users..............................................................................................31

IPMI/DCMI users..........................................................................................................33Administering directory groups............................................................................................33Deleting a user or a directory group.....................................................................................35

Configuring iLO access settings................................................................................................35Configuring service settings.................................................................................................35Configuring IPMI/DCMI settings..........................................................................................36Configuring access options.................................................................................................37

Logging in to iLO using SSH clients..................................................................................38Configuring iLO security..........................................................................................................39

General security guidelines.................................................................................................39Passwords....................................................................................................................39iLO RBSU security..........................................................................................................40

Using iLO RBSU to configure iLO RBSU access settings..................................................41

Contents 3

iLO Security Override Switch administration......................................................................41TPM support......................................................................................................................42User accounts and access...................................................................................................43

User privileges..............................................................................................................43Login security................................................................................................................43

Administering SSH keys......................................................................................................43About SSH keys............................................................................................................43Authorizing a new key...................................................................................................44Deleting keys................................................................................................................44Authorizing keys from an HP SIM server...........................................................................44

Administering SSL certificates..............................................................................................44SSL overview................................................................................................................44Certificates...................................................................................................................45Viewing certificate information........................................................................................45Obtaining and importing a certificate..............................................................................45

Configuring directory settings..............................................................................................47Configuring authentication and directory server settings.....................................................48Running directory tests...................................................................................................50

Viewing directory test results......................................................................................51Using the directory test controls .................................................................................54

Using encryption................................................................................................................54Configuring encryption settings.......................................................................................55Connecting to iLO using by AES or 3DES encryption..........................................................56

Configuring iLO for HP SIM single sign-on.............................................................................56Configuring iLO for HP SIM SSO.....................................................................................56Adding HP SIM trusted servers........................................................................................57Viewing HP SIM trusted servers.......................................................................................58Removing HP SIM Servers..............................................................................................59

Configuring Remote Console Security settings........................................................................59Configuring Integrated Remote Console Trust Settings (.NET IRC)..............................................60Configuring the Login Security Banner..................................................................................61

Configuring iLO network settings..............................................................................................62Viewing network settings.....................................................................................................62Configuring general network settings....................................................................................65

Using the iLO Shared Network Port..................................................................................67Enabling the iLO Shared Network Port feature..............................................................68Re-enabling the iLO Dedicated Network Port................................................................69

Configuring IPv4 settings....................................................................................................70Configuring IPv6 settings....................................................................................................71Configuring SNTP settings ..................................................................................................73

Configuring iLO Management settings.......................................................................................74Installing the Insight Management Agents..............................................................................74Configuring SNMP alert destinations....................................................................................75Configuring SNMP alerts....................................................................................................75

SNMP traps..................................................................................................................76Configuring Insight Management Integration.........................................................................76

4 Using iLO................................................................................................78Using the iLO web interface.....................................................................................................78

Browser support.................................................................................................................78Logging in to iLO...............................................................................................................78Handling an unknown authority...........................................................................................79Using the iLO controls.........................................................................................................79

Viewing iLO overview information.............................................................................................80Viewing system information.................................................................................................80

4 Contents

Viewing status information...................................................................................................81Viewing the active iLO sessions............................................................................................82

Viewing iLO system information................................................................................................82Viewing health summary information....................................................................................82Viewing fan information......................................................................................................83Viewing temperature information .........................................................................................84Viewing power information.................................................................................................85Viewing processor information.............................................................................................87Viewing memory information...............................................................................................88Viewing network information...............................................................................................89Viewing drive information...................................................................................................90

Using the iLO Event Log...........................................................................................................91Viewing the iLO Event Log...................................................................................................91Saving the iLO Event Log.....................................................................................................92Clearing the iLO Event Log..................................................................................................93

Using the Integrated Management Log......................................................................................93Viewing the IML.................................................................................................................94Marking a log entry as repaired..........................................................................................96Adding a maintenance note to the IML.................................................................................96Saving the IML..................................................................................................................96Clearing the IML................................................................................................................96

Using iLO diagnostics..............................................................................................................97Resetting iLO with the web interface.....................................................................................98

Using the Insight Management Agents.......................................................................................98Using the iLO Remote Console..................................................................................................99

Remote Console licensing...................................................................................................99Using the Integrated Remote Console....................................................................................99

.NET IRC requirements.................................................................................................100Java IRC requirements..................................................................................................100

Recommended client settings....................................................................................101Recommended server settings...................................................................................101

Starting the Remote Console.........................................................................................102Acquiring the Remote Console......................................................................................102Using the Remote Console power switch.........................................................................103Using iLO Virtual Media from the Remote Console...........................................................104Using Shared Remote Console (.NET IRC only)................................................................104Using Console Capture (.NET IRC only)..........................................................................104

Viewing Server Startup and Server Prefailure sequences..............................................105Saving Server Startup and Server Prefailure video files................................................105Capturing video files...............................................................................................106Viewing saved video files........................................................................................106

Creating Remote Console hot keys.................................................................................106Creating a hot key..................................................................................................106Resetting hot keys...................................................................................................108

Troubleshooting .........................................................................................................108Using the text-based Remote Console......................................................................................109

Text-based console during POST........................................................................................109Using the Virtual Serial Port..........................................................................................109

Linux configuration example.....................................................................................110Windows EMS Console...........................................................................................110

Text-based console after POST...........................................................................................110Using iLO Text Console................................................................................................111

Customizing iLO Text Console..................................................................................111Using Linux with iLO Text Console.............................................................................112

Using iLO Virtual Media........................................................................................................112

Contents 5

Virtual Media operating system information.........................................................................113Operating system USB requirement................................................................................113Using Virtual Media with Windows 7............................................................................114Operating system considerations: virtual floppy/USB key..................................................114

Changing diskettes.................................................................................................114Operating system considerations: virtual CD/DVD-ROM ..................................................114

Mounting USB Virtual Media CD/DVD-ROM on Linux systems......................................115Operating system considerations: Virtual Folder .............................................................115

Using iLO Virtual Media from the iLO web interface.............................................................115Viewing and modifying the Virtual Media port................................................................116Viewing and ejecting local media.................................................................................116Connecting scripted media...........................................................................................117Viewing and ejecting scripted media.............................................................................117

Using iLO Virtual Media from the Remote Console................................................................117Using a virtual floppy/USB key.....................................................................................118

Using a physical floppy disk or USB key drive on a client PC........................................118Using an image file................................................................................................118Using an image file through a URL (IIS/Apache .NET IRC only)..................................118

Using a virtual CD/DVD-ROM......................................................................................118Using a physical CD/DVD-ROM drive on a client PC...................................................118Using an image file................................................................................................119Using an image file through a URL (IIS/Apache .NET IRC only)..................................119

Creating iLO disk image files (Java IRC only)..................................................................119Using a Virtual Folder (.NET IRC only)............................................................................120

Setting up IIS for scripted Virtual Media..............................................................................120Configuring IIS............................................................................................................120Configuring IIS for read/write access.............................................................................120Inserting Virtual Media with a helper application............................................................121Virtual Media helper application...................................................................................121

Configuring Virtual Media Boot Order................................................................................122Changing the server boot order....................................................................................122Changing the one-time boot status................................................................................123Using the additional options.........................................................................................124

About server power..............................................................................................................124Brownout recovery...........................................................................................................124Graceful shutdown...........................................................................................................124Power efficiency...............................................................................................................124

Using iLO Power Management...............................................................................................125Managing the server power..............................................................................................125Configuring the System Power Restore Settings.....................................................................126Viewing server power usage..............................................................................................126Viewing the current power state.........................................................................................128Viewing the server power history........................................................................................129Configuring power settings................................................................................................129

Configuring Power Regulator settings.............................................................................129Configuring power capping settings..............................................................................131Configuring an SNMP power threshold alert...................................................................131Configuring the persistent mouse and keyboard..............................................................132

Using iLO with Onboard Administrator....................................................................................132Using the Active Onboard Administrator.............................................................................132Enclosure bay IP addressing..............................................................................................133Dynamic Power Capping for server blades..........................................................................133iLO virtual fan.................................................................................................................133iLO option.......................................................................................................................133

IPMI server management.......................................................................................................134

6 Contents

Using iLO with HP Insight Control server deployment ................................................................135

5 Integrating HP Systems Insight Manager....................................................136HP SIM features....................................................................................................................136Establishing SSO with HP SIM................................................................................................136iLO identification and association...........................................................................................136

Viewing iLO status in HP SIM.............................................................................................136iLO links in HP SIM..........................................................................................................137Viewing iLO in HP SIM System(s) lists..................................................................................137

Receiving SNMP alerts in HP SIM...........................................................................................137HP SIM port matching...........................................................................................................137Reviewing iLO license information in HP SIM............................................................................138

6 Directory services...................................................................................139Directory integration benefits..................................................................................................139Choosing a directory configuration to use with iLO....................................................................139Kerberos support..................................................................................................................140

Domain controller preparation...........................................................................................140Realm names..............................................................................................................140Computer accounts......................................................................................................140User accounts.............................................................................................................140Generating a keytab...................................................................................................141

Key version number................................................................................................141Windows Vista.......................................................................................................141

Universal and global user groups (for authorization)........................................................142Configuring iLO for Kerberos login.....................................................................................142

Using the iLO web interface..........................................................................................142Using XML configuration and control scripts....................................................................143Using the CLI, CLP, or SSH interface..............................................................................143

Time requirement.............................................................................................................143Configuring single sign-on................................................................................................143

Internet Explorer..........................................................................................................143Firefox.......................................................................................................................144Chrome.....................................................................................................................144

Verifying single sign-on (HP Zero Sign In) configuration.........................................................144Login by name................................................................................................................144

Schema-free directory integration............................................................................................145Setting up Schema-free directory integration........................................................................145

Active Directory prerequisites........................................................................................145Introduction to Certificate Services............................................................................146Installing Certificate Services....................................................................................146Verifying Certificate Services....................................................................................146Configuring Automatic Certificate Request.................................................................146

Schema-free setup via iLO web interface........................................................................146Schema-free setup via scripts........................................................................................147Schema-free setup with HP Directories Support for ProLiant Management Processors.............147Schema-free setup options............................................................................................147

Minimum Login Flexibility........................................................................................148Better Login Flexibility.............................................................................................148Maximum Login Flexibility........................................................................................148

Schema-free nested groups...........................................................................................148Setting up HP Extended Schema directory integration................................................................148

Features supported by HP schema directory integration.........................................................149Setting up directory services..............................................................................................149Schema documentation.....................................................................................................150Directory services support.................................................................................................150

Contents 7

Schema required software.................................................................................................150Schema Extender........................................................................................................151

Schema Preview.....................................................................................................151Setup....................................................................................................................151Results..................................................................................................................152

Management snap-in installer.......................................................................................152Directory Services for Active Directory.................................................................................153

Active Directory installation prerequisites........................................................................153Installing Active Directory.............................................................................................153

For the schema-free configuration.............................................................................153For HP Extended Schema........................................................................................153

Snap-in installation and initialization for Active Directory..................................................154Creating and configuring directory objects for use with iLO in Active Directory....................154Directory services objects.............................................................................................156

Active Directory snap-ins.........................................................................................156Active Directory role restrictions................................................................................157

Active Directory Lights-Out management.........................................................................159Directory services for eDirectory.........................................................................................160

eDirectory installation prerequisites................................................................................160Snap-in installation and initialization for eDirectory..........................................................160Example: Creating and configuring directory objects for use with LOM devices ineDirectory..................................................................................................................160Directory Services objects for eDirectory.........................................................................164

Role Managed Devices...........................................................................................164Members...............................................................................................................164

eDirectory Role Restrictions...........................................................................................165Time restrictions......................................................................................................166Enforced client IP address or DNS name access.........................................................166

eDirectory Lights-Out Management................................................................................166User login via directory services.........................................................................................167

Directory-enabled remote management....................................................................................168Creating roles to follow organizational structure...................................................................168

Using existing groups..................................................................................................168Using multiple roles.....................................................................................................169

How directory login restrictions are enforced.......................................................................169Restricting roles...........................................................................................................170

Role time restrictions...............................................................................................170Role address restrictions..........................................................................................170

User restrictions...........................................................................................................171User address restrictions..........................................................................................171How user time restrictions are enforced......................................................................171

Creating multiple restrictions and roles...........................................................................172Using bulk import tools.....................................................................................................173

HP Directories Support for ProLiant Management Processors utility...............................................173Introduction to HP Directories Support for ProLiant Management Processors..............................174Compatibility..................................................................................................................174HP Directories Support for ProLiant Management Processors package.....................................174Using HP Directories Support for ProLiant Management Processors.........................................175

Finding management processors...................................................................................175Upgrading firmware on management processors.............................................................177Selecting a directory access method..............................................................................178Naming management processors..................................................................................179Configuring directories when HP Extended Schema is selected..........................................180Configuring directories when schema-free integration is selected........................................184Setting up management processors for directories............................................................185

8 Contents

7 Troubleshooting......................................................................................187iLO 3 POST LED indicators.....................................................................................................187Kernel debugging.................................................................................................................187Event log entries...................................................................................................................188Hardware and software link-related issues................................................................................191Login issues.........................................................................................................................191

Login name and password not accepted.............................................................................192Directory user premature logout.........................................................................................192iLO management port not accessible by name.....................................................................192iLO RBSU unavailable after iLO and the server reset.............................................................192Unable to access the login page........................................................................................193Unable to return to login page after an iLO flash or reset......................................................193Unable to access Virtual Media or the graphical Remote Console..........................................193Unable to connect to iLO after changing network settings......................................................193Unable to connect to the iLO processor through the NIC.......................................................193Unable to log in to iLO after installing the iLO certificate.......................................................193Unable to connect to the iLO IP address..............................................................................194Blocked iLO ports.............................................................................................................194

Troubleshooting alert and trap issues.......................................................................................194Unable to receive HP SIM alarms (SNMP traps) from iLO.......................................................194

Incorrect authentication code..................................................................................................195Using the iLO Security Override switch for emergency access.....................................................195Troubleshooting license installation..........................................................................................195Troubleshooting directory issues .............................................................................................195

User contexts do not appear to work..................................................................................195Directory user does not log out after the directory timeout has expired....................................195Problems generating a keytab by using ktpass.exe...............................................................196

Directory login fails...............................................................................................................196Troubleshooting Remote Console issues...................................................................................196

Java IRC applet displays a red X when Firefox is used to run Java IRC on a Linux client ............196Unable to navigate the single cursor of the Remote Console to corners of the Remote Consolewindow..........................................................................................................................196Remote Console text window not updated correctly..............................................................196Mouse or keyboard not working in .NET IRC or Java IRC......................................................197.NET IRC sends characters continuously after switching windows ...........................................197Java IRC does not display the correct floppy and USB-key device...........................................197Caps Lock goes out of sync between iLO and Java IRC.........................................................198Num Lock goes out of sync between iLO and Shared Remote Console....................................199Keystrokes repeat unintentionally during a remote console session..........................................199Session leader does not receive a connection request when .NET IRC is in replay mode............199Keyboard LED does not work correctly................................................................................199Inactive .NET IRC.............................................................................................................199.NET IRC failed to connect to the server..............................................................................200File not present after copy through .NET IRC virtual drives to USB key.....................................200

Troubleshooting SSH issues....................................................................................................200Initial PuTTY input slow.....................................................................................................201PuTTY client unresponsive..................................................................................................201SSH text support from a text-based Remote Console session...................................................201

Troubleshooting video and monitor issues................................................................................201User interface does not display correctly.............................................................................201

iLO Virtual Floppy media applet unresponsive..........................................................................201Troubleshooting text-based Remote Console issues....................................................................201

Unable to view the Linux installer in the text-based Remote Console........................................201Unable to pass data through an SSH terminal......................................................................202

Contents 9

Troubleshooting miscellaneous issues.......................................................................................202Cookie sharing between browser instances and iLO.............................................................202

Shared instances.........................................................................................................202Cookie order behavior.................................................................................................202Displaying the current session cookie.............................................................................203Preventing cookie-related user issues..............................................................................203

Unable to get SNMP information from HP SIM.....................................................................203Unable to upgrade iLO firmware........................................................................................203Recovering from a failed iLO firmware update......................................................................204iLO network failed flash recovery.......................................................................................204Testing SSL......................................................................................................................205Resetting iLO...................................................................................................................206Server name still present after the System Erase Utility is executed...........................................206Certificate error when navigating to the iLO web interface.....................................................206

Internet Explorer..........................................................................................................206Firefox.......................................................................................................................207

8 Support and other resources....................................................................208Information to collect before you contact HP.............................................................................208How to contact HP................................................................................................................208Registering for Software Technical Support and Update Service..................................................208

How to use Software Technical Support and Update Service..................................................208HP Support Center................................................................................................................208HP authorized resellers..........................................................................................................209Related information...............................................................................................................209

9 Documentation feedback.........................................................................210A Directory services schema.......................................................................211

HP Management Core LDAP OID classes and attributes.............................................................211Core classes....................................................................................................................211Core attributes.................................................................................................................211Core class definitions.......................................................................................................211

hpqTarget..................................................................................................................211hpqRole.....................................................................................................................212hpqPolicy...................................................................................................................212

Core attribute definitions...................................................................................................212hpqPolicyDN..............................................................................................................212hpqRoleMembership....................................................................................................212hpqTargetMembership.................................................................................................213hpqRoleIPRestrictionDefault...........................................................................................213hpqRoleIPRestrictions...................................................................................................213hpqRoleTimeRestriction.................................................................................................214

Lights-Out Management specific LDAP OID classes and attributes................................................214Lights-Out Management classes.........................................................................................214Lights-Out Management attributes......................................................................................214Lights-Out Management class definitions.............................................................................214

hpqLOMv100.............................................................................................................214Lights-Out Management attribute definitions........................................................................215

hpqLOMRightLogin......................................................................................................215hpqLOMRightRemoteConsole........................................................................................215hpqLOMRightVirtualMedia...........................................................................................215hpqLOMRightServerReset..............................................................................................215hpqLOMRightLocalUserAdmin.......................................................................................216

10 Contents

hpqLOMRightConfigureSettings.....................................................................................216

Glossary..................................................................................................217Index.......................................................................................................220

Contents 11

1 Introduction to iLOThe iLO software can remotely perform most functions that otherwise require a visit to the serversat the data center, computer room, or remote location. Examples of iLO features include:

Access a high-performance and secure Integrated Remote Console to the server from anywherein the world if you have a network connection to the server.There are two versions of the Integrated Remote Console:

.NET IRC

Java IRCGeneral references to the Remote Console apply to both the .NET IRC and Java IRC, unlessotherwise specified.

Use the shared .NET IRC to collaborate with multiple server administrators.

Remotely mount high-performance Virtual Media devices to the server.

Securely and remotely control the power state of the managed server.

Use Virtual Power and Virtual Media from the GUI, the CLI, or the iLO scripting toolkit formany tasks, including the automation of deployment and provisioning.

Monitor server health. iLO monitors temperatures in the server and sends corrective signals tothe fans to maintain proper server cooling. iLO also monitors firmware versions and the statusof fans, memory, the network, processors, power supplies, and server hard drives.

Use local or directory-based user accounts to log in to iLO.

Use iLO language packs to switch between English and another supported language.

Configure Kerberos authentication, which adds the HP Zero Sign In button to the login screen.

Monitor the power consumption and server power settings.

For more information about the iLO 3 features, see http://www.hp.com/go/compareilo.

iLO web interfaceThe iLO web interface groups similar tasks for easy navigation and workflow. It is organized in anavigational tree view located on the left side of the page. The top-level branches include theInformation, Remote Console, Virtual Media, Power Management, Network, and Administrationbranches. If you have a ProLiant server blade, a BL c-Class branch is included.When you are using the iLO web interface, note the following:

Each high-level iLO branch has a submenu that you can display by clicking the + icon to theleft of that branch. Each menu topic displays a page title, which describes the information orsettings available on that page. The page title might not reflect the name that is displayed onthe menu option.

Assistance for all iLO pages is available from the iLO help pages. To access page-specifichelp, click the question-mark icon on the upper right side of the page.

Typical administrator tasks are available from the Administration and Network branches ofthe iLO web interface. These tasks are described in Setting up iLO (page 14) andConfiguring iLO (page 22).

Typical user tasks are available from the Information, Remote Console, Virtual Media, PowerManagement, and BL c-Class branches of the iLO web interface. These tasks are describedin Using iLO (page 78).

12 Introduction to iLO

For more information about iLO functionality and integration, see the following:

Integrating HP Systems Insight Manager (page 136)

Directory services (page 139)

Troubleshooting (page 187)

iLO RBSUYou can use the iLO ROM-based setup utility to configure network parameters, global settings, anduser accounts. iLO RBSU is designed for the initial iLO setup, and is not intended for continuediLO administration. iLO RBSU is available whenever the server is booted and can be run remotelyvia the Remote Console. Press F8 during POST to enter iLO RBSU.You can disable iLO RBSU in the iLO RBSU Global Settings preferences. Disabling iLO RBSUprevents reconfiguration from the host unless the iLO Security Override Switch is set.For more information about using iLO RBSU, see the following:

Setting up iLO by using iLO RBSU (page 16)

iLO RBSU security (page 40)

iLO Mobile applicationThe HP iLO Mobile application provides access to the Remote Console of your HP ProLiant serverfrom your mobile device. The mobile app interacts directly with the iLO processor on HP ProLiantservers, providing total control of the server at all times as long as the server is plugged in. Forexample, you can access the server when it is in a healthy state, or when it is powered off with ablank hard drive. As an IT administrator, you can troubleshoot problems and perform softwaredeployments from almost anywhere.For more information about the iLO mobile application, see http://www.hp.com/go/ilo/mobileapp.

iLO RBSU 13

2 Setting up iLOThe iLO default settings enable you to use most features without additional configuration. However,the configuration flexibility of iLO enables customization for multiple enterprise environments. Thischapter discusses the initial iLO setup steps. For information about additional configuration options,see Configuring iLO (page 22).Complete the initial setup steps:1. Decide how you want to handle networking and security. For more information, see Preparing

to set up iLO (page 14).2. Connect iLO to the network. For more information, see Connecting iLO to the network

(page 15).3. If you are not using dynamic IP addressing, configure a static IP address by using iLO RBSU.

For more information, see Setting up iLO by using iLO RBSU (page 16).4. If you are using the local accounts feature, set up your user accounts by using iLO RBSU or

the iLO web interface. For more information, see Setting up iLO by using iLO RBSU (page 16)or Setting up iLO by using the iLO web interface (page 19).

5. Install an iLO license. For more information, see Activating iLO licensed features (page 20).6. If required, install the iLO drivers. For more information, see Installing the iLO drivers

(page 20).

Preparing to set up iLOBefore setting up an iLO management processor, you must decide how to handle networking andsecurity. The following questions can help you configure iLO:1. How should iLO connect to the network?

For a graphical representation and explanation of the available connections, see ConnectingiLO to the network (page 15).Typically, iLO is connected to the network through one of the following:

A corporate network that both the NIC and the iLO port are connected to. This connectionenables access to iLO from anywhere on the network and reduces the amount ofnetworking hardware and infrastructure required to support iLO. However, on a corporatenetwork, traffic can hinder iLO performance.

A dedicated management network with the iLO port on a separate network. A separatenetwork improves performance and security because you can physically control whichworkstations are connected to the network. A separate network also provides redundantaccess to the server when a hardware failure occurs on the corporate network. In thisconfiguration, iLO cannot be accessed directly from the corporate network.

2. How will iLO acquire an IP address?To access iLO after connecting it to the network, the iLO management processor must acquirean IP address and subnet mask by using either a dynamic or static process:

A dynamic IP address is set by default. iLO obtains the IP address and subnet mask fromDNS or DHCP servers. This method is the simplest.

A static IP address is used if DNS or DHCP servers are not available on the network. Astatic IP address can be configured via iLO RBSU. For more information, see Configuringthe network settings (static IP addresses only) (page 16).

IMPORTANT: If you will use a static IP address, you must have the IP address beforestarting the iLO setup process.

14 Setting up iLO

3. What access security is required and what user accounts and privileges are needed?iLO provides several options to control user access. You must select from the following methodsto prevent unauthorized access to corporate IT assets:

Local accountsUp to 12 user names and passwords can be stored on iLO. This is idealfor small environments such as labs and small-sized or medium-sized businesses.

Directory servicesUse the corporate directory to manage iLO user access. This is idealfor environments that have a large number of users. If you plan to use directory services,consider leaving at least one local administrator account enabled for alternate access.

For more information about iLO access security, see Configuring iLO security (page 39).

4. How do you want to configure iLO?iLO supports various interfaces for configuration and operation. This guide discusses thefollowing interfaces:

Use iLO RBSU when the system environment does not use DHCP and DNS or WINS. Formore information, see Setting up iLO by using iLO RBSU (page 16).

Use iLO web interface when you can connect to iLO on the network by using a webbrowser. You can also use this method to reconfigure a previously configured iLOmanagement processor. For more information, see Setting up iLO by using the iLO webinterface (page 19).

Other configuration options not discussed in this guide include the following:

HP Scripting ToolkitThe Scripting Toolkit is a server deployment product for IT expertsthat delivers an unattended automated installation for high-volume server deployments.For more information, see HP Scripting Toolkit for Linux User Guide and HP ScriptingToolkit for Windows User Guide.

ScriptingYou can use scripting for advanced setup of multiple iLO managementprocessors. Scripts are XML files written for a scripting language called RIBCL. You canuse RIBCL scripts to configure iLO on the network during initial deployment or from analready deployed host.The following methods are available:

HP Lights-Out Configuration Utility (CPQLOCFG)A Windows utility that sends RIBCLscripts to iLO over the network.

HP Lights-Out Online Configuration Utility (HPONCFG)A local online scripted setuputility that runs on the host and passes RIBCL scripts to the local iLO. HPONCFGrequires the HP iLO Channel Interface Driver.

Custom scripting environmentsThe scripting toolkit provides Perl samples that canbe used on clients to send RIBCL scripts to iLO over the network.

SMASH CLPA command-line protocol that can be used when a command line isaccessible through SSH or the physical serial port.

For more information about these methods, see the HP iLO 3 Scripting and CommandLine Guide.

Connecting iLO to the networkYou can connect iLO to the network through a corporate network or a dedicated managementnetwork.

In a corporate network, the server has two network port types (server NICs and one iLO NIC)connected to a corporate network, as shown in Figure 1 (page 16).

Connecting iLO to the network 15

Figure 1 Corporate network diagram

Main NIC

iLO

Main NIC

Hub/Switch

Client PCs

CorporateNetwork

Management Client

iLO

In a dedicated management network, the iLO port is on a separate network, as shown inFigure 2 (page 16).

Figure 2 Dedicated management network diagram

Hub/SwitchMain NIC

iLO

iLO

Main NICHub/Switch

Client PCs

CorporateNetwork

DedicatediLO Management

Network

Management Client

Setting up iLO by using iLO RBSUHP recommends using iLO RBSU to set up iLO for the first time and to configure iLO networkparameters for environments that do not use DHCP and DNS or WINS.

Configuring the network settings (static IP addresses only)This procedure is required only if you are using a static IP address. When you are using dynamicIP addressing, your DHCP server automatically assigns an IP address for iLO.

NOTE: To simplify installation, HP recommends using DNS or DHCP with iLO.

16 Setting up iLO

To configure a static IP address:1. Restart or power on the server.2. Press F8 when prompted during POST.

iLO RBSU starts.

3. Disable DHCP:a. Select NetworkDNS/DHCP, and then press Enter.

The Network Autoconfiguration window opens.

b. Select DHCP Enable, as shown in Figure 3 (page 17).c. Press the spacebar to change the setting to OFF.

Figure 3 iLO RBSU Network Autoconfiguration window

d. Verify that DHCP Enable is set to OFF, and then press F10 to save the changes.

Setting up iLO by using iLO RBSU 17

4. Enter an IP address and subnet mask:a. Select NetworkNIC and TCP/IP, and then press Enter.

The Network Configuration window opens.

b. Enter the appropriate information in the IP Address, Subnet Mask, and Gateway IP Addressfields, as shown in Figure 4 (page 18).

Figure 4 iLO RBSU Network Configuration

c. Press F10 to save the changes.5. Select FileExit to exit iLO RBSU.

The changes take effect when you exit iLO RBSU.

Setting up iLO user accounts by using iLO RBSUTo set up local accounts:1. Restart or power on the server.2. Press F8 when prompted during POST.

iLO RBSU starts.

3. If prompted, enter a valid iLO user ID and password with the required iLO privileges (AdministerUser Accounts, Configure iLO Settings).Default account information is located on the iLO Default Network Settings tag attached tothe server that contains the iLO management processor.

NOTE: The login prompt is displayed only if iLO is configured to present a login challengein iLO RBSU.

4. Select Add, Edit, or Remove from the User menu.For an example showing the Add User screen, see Figure 5 (page 19).

18 Setting up iLO

Figure 5 Adding a user with RBSU

5. Follow the onscreen instructions to add, edit, or remove users.6. Select FileExit to exit iLO RBSU.

Setting up iLO by using the iLO web interfaceYou can set up iLO using the web interface if you can connect to iLO on the network by using aweb browser. You can also use this method to reconfigure a previously configured iLO managementprocessor.Access iLO from a remote network client by using a supported browser, and providing the defaultDNS name, user name, and password. For information about the DNS name and default accountcredentials, see Logging in to iLO for the first time (page 19).For information about the configuration procedures available in the iLO web interface, seeConfiguring iLO (page 22).

Logging in to iLO for the first timeThe iLO firmware is configured with a default user name, password, and DNS name. Default userinformation is located on the iLO Default Network Settings tag attached to the server that containsthe iLO management processor. Use these values to access iLO remotely from a network client byusing a web browser.The default values follow:

User nameAdministrator

PasswordA random eight-character alphanumeric string

DNS nameILOXXXXXXXXXXXX, where the Xs represent the serial number of the server

If you enter an incorrect user name and password, or a login attempt fails, iLO imposes a securitydelay. For more information about login security, see Login security (page 43).

IMPORTANT: HP recommends changing the default values after you log in to iLO for the firsttime. For instructions, see Administering users (page 29).

Setting up iLO by using the iLO web interface 19

Activating iLO licensed featuresTo activate iLO licensed features, install an HP iLO license. iLO licenses activate functionality suchas graphical remote console with multi-user collaboration, video record/playback, and many moreadvanced features. For licensing information and installation instructions, see iLO licensing(page 28).

Installing the iLO driversiLO is an independent microprocessor running an embedded operating system. The architectureensures that the majority of iLO functionality is available, regardless of the host operating system.The iLO drivers enable software such as HPONCFG and the HP Insight Management Agents tocommunicate with iLO. Your OS and system configuration determine the driver requirements.The iLO drivers are available from the HP Service Pack for ProLiant (Windows and Linux only) andthe HP website (Windows, Linux, and VMware).

You can download the SPP from the following website: http://www.hp.com/go/spp/download. For information about using the SPP, see the SPP documentation.

To download the drivers from the HP website:1. Navigate to the Support & Drivers page on the HP website: http://www.hp.com/support.2. Select a country or region.

The Support & Drivers page opens.

3. Click the Drivers & Software link.4. In the search field, enter the server model that you are using (for example, DL360p).

A list of servers is displayed.

5. Click the link for your server.6. Click the link for the server operating system.7. Download the iLO drivers.8. Follow the installation instructions provided with the downloaded software.

For OS-specific driver information, see the following:

Microsoft device driver support (page 20)

Linux device driver support (page 21)

VMware device driver support (page 21)

Microsoft device driver supportWhen you are using Windows with iLO, the following drivers are available:

HP ProLiant iLO 3/4 Channel Interface Driver for Windows. This driver is required for theoperating system to communicate with iLO. Install this driver in all configurations.

HP ProLiant iLO 3/4 Management Controller Driver Package for Windows. This packageincludes the following components:

hpqilo3core.sys provides iLO Management Controller Driver support.

ProLiantMonitor.exe provides the HP ProLiant Health Monitor Service and HPProLiant System Shutdown Service.

hpqilo3whea.sys is a helper service for Windows Hardware Error Architecture, whichpasses information between iLO and the operating system in the event of a hardwarefault.

20 Setting up iLO

IMPORTANT: The Management Controller Driver Package is required to support AutomaticServer Recovery and the HP Insight Management Agents or HP Insight Management WBEMProviders (if installed). For more information, see Configuring iLO Management settings(page 74).

Linux device driver supportWhen you are using Linux with iLO, the following drivers are available:

hpiloThe HP ProLiant Channel Interface Device Driver for iLO manages agent and toolapplication access to iLO.

hp-healthThe HP System Health Application and Command Line Utilities is a collectionof applications and tools that enables monitoring of fans, power supplies, temperature sensors,and other management events. This RPM contains the hpasmd, hpasmlited, hpasmpld,and hpasmxld daemons.

IMPORTANT: These drivers are standard for SLES 11, Red Hat 5, and Red Hat 6. You must installthe drivers manually on SLES 10.For open-source Linux distributions (Ubuntu, Debian, Fedora, and others), the hpilo driver is partof the Linux kernel, so the driver is loaded automatically at start-up.

Use the following commands to load the iLO drivers:rpm -ivh hpilo-d.vv.v-pp.Linux_version.arch.rpmrpm -ivh hp-health-d.vv.v-pp.Linux_version.arch.rpmWhere d is the Linux distribution and version, vv.v-pp are version numbers, and arch is thearchitecture (i386 or x86_64).Use the following commands to remove the iLO drivers:rpm -e hpilorpm -e hp-health

VMware device driver supportWhen you are using VMware with iLO, the following driver is available:hpiloThe HP ProLiant Channel Interface Device Driver for iLO manages agent, WBEM provider,and tool application access to iLO. This driver is included in the VMware images that HP hascustomized. For raw VMware images, the driver must be installed manually. The driver is includedwith the following packages:

HP ESXi Offline Bundle for VMware ESXi 5.0 and ESXi 5.x

HP ESXi Offline Bundle for VMware ESXi 4.1, 4.1 U1, and 4.1 U2

HP ESXi Offline Bundle for VMware ESXi 4.0 U2 and U3

HP Management Agents for VMware ESX 4.x (all versions)

Installing the iLO drivers 21

3 Configuring iLOTypically, an advanced or administrative user who manages users and configures global andnetwork settings configures iLO. This guide provides information about configuring iLO by usingthe iLO web interface and iLO RBSU.

TIP: You can also perform many iLO configuration tasks by using XML configuration and controlscripts or SMASH CLP. For information about using these methods, see the HP iLO 3 Scripting andCommand Line Guide, HP Scripting Toolkit for Linux User Guide, and HP Scripting Toolkit forWindows User Guide.

Updating iLO firmwareFirmware updates enhance iLO functionality with new features, improvements, and security updates.You can download the latest firmware from the following website: http://www.hp.com/support/ilo3.Users who have the Configure iLO Settings privilege or host operating system Administrator/rootprivileges can update iLO firmware. If the iLO Security Override Switch is set, any out-of-band usercan update the firmware.Due to the security enhancements in iLO 3 1.50, the firmware image file is larger than previousreleases. To accommodate the larger firmware image file, you must have iLO 3 1.20 or laterinstalled to upgrade to iLO 3 1.50 or later. Upgrading from earlier firmware versions is notsupported.To downgrade from iLO 3 1.50 to an earlier firmware version, you must disable FIPS Mode. Forinstructions, see Using encryption (page 54).You can update the iLO firmware by using an online or offline method. For more information, seeUpdating firmware by using an online update method (page 22) or Updating firmware by usingan offline method (page 23)

Updating firmware by using an online update methodWhen you use an online method to update the firmware, no server reboot is required. You canupdate the firmware and reset iLO without affecting the availability of the server's host operatingsystem. The online update method can be performed in-band or out-of-band.

Performing an in-band firmware updateWhen you use this method to update the iLO firmware, the iLO firmware is sent to iLO directlyfrom the server host operating system. The HP ProLiant Channel Interface Device Driver is requiredfor host-based iLO firmware updates. During a host-based firmware update, the iLO firmware doesnot verify login credentials or user privileges because the host-based utilities require a root login(Linux and VMware ESX) or Administrator login (Windows).You can use the following in-band firmware update methods:

Online ROM Flash ComponentUse an executable file to update iLO while the server isoperating. The executable file contains the installer and the firmware package. You candownload an Online ROM Flash Component from the HP website at http://www.hp.com/support/ilo3.

HPONCFGUse the HP Lights-Out Online Configuration Utility to configure iLO by using XMLscripts. Download the iLO firmware image and the Update_Firmware.xml sample script.Edit the sample script with your setup details, and then run the script.Sample scripts are available at http://www.hp.com/support/ilo3. For more information aboutscripting, see the HP iLO 3 Scripting and Command Line Guide.

22 Configuring iLO

For instructions about obtaining the iLO firmware image, see Obtaining the iLO firmwareimage file (page 23).

Performing an out-of-band firmware updateWhen you use this method to update the iLO firmware, you use a network connection tocommunicate with iLO directly.You can use the following out-of-band firmware update methods:

iLO web interfaceDownload the Online ROM Flash Component and install it by using theiLO web interface. For instructions, see Updating iLO firmware by using a browser (page 24).

CPQLOCFGUse the HP Lights-Out Configuration Utility to configure iLO by using XML scripts.Download the iLO firmware image and the Update_Firmware.xml sample script. Edit thesample script with your setup details, and then run the script.Sample scripts are available at http://www.hp.com/support/ilo3. For more information aboutscripting, see the HP iLO 3 Scripting and Command Line Guide.For instructions about obtaining the iLO firmware image, see Obtaining the iLO firmwareimage file (page 23).

HPLOMIG (also called HP Directories Support for Management Processors)Download theHP Directories Support for Management Processors executable file to access the directorysupport components. One of the components, HPLOMIG, can be used to discover multipleiLO processors and update their firmware in one step. You do not need to use directoryintegration to take advantage of this feature. For more information, see Upgrading firmwareon management processors (page 177).

SMASH CLPAccess SMASH CLP through the SSH port and use standard commands to viewfirmware information and update the firmware.For more information about SMASH CLP, see the HP iLO 3 Scripting and Command LineGuide.

NOTE: The SMASH CLP method for updating firmware is not supported for upgrading toiLO 3 1.50.

Updating firmware by using an offline methodWhen you use an offline firmware update method, you must reboot the server by using an offlineutility. Examples of offline firmware updates include the following:

HP Service Pack for ProLiantUse the Service Pack for ProLiant to install the firmware update.For more information, see the following website: http://www.hp.com/go/spp.

Windows or Linux Scripting ToolkitUse the Scripting Toolkit to configure several settingswithin the server and update firmware. This method is useful for deploying to multiple servers.For instructions, see the HP Scripting Toolkit for Linux User Guide or HP Scripting Toolkit forWindows User Guide.

Obtaining the iLO firmware image fileMany of the available firmware update methods require the iLO .bin firmware image. You mustextract the .bin file from the iLO Online ROM Flash Component.To download the iLO Online ROM Flash Component file and then extract the .bin file:1. Navigate to the HP website at http://www.hp.com/support/ilo3.

The Download drivers and software page opens.

2. Select your server operating system.3. Follow the onscreen instructions to download the iLO Online ROM Flash Component file.

Updating iLO firmware 23

4. Double-click the downloaded file, and then click the Extract button.5. Select a location for the extracted files, and then click OK.

The firmware image is a file similar to ilo_yyy.bin, where yyy represents the firmwareversion.

Updating iLO firmware by using a browserYou can update the iLO firmware from any network client by using a supported browser. For a listof supported browsers, see the HP iLO 3 Release Notes or http://www.hp.com/go/compareilo.To update the iLO firmware:1. Obtain the firmware image file. For instructions, see Obtaining the iLO firmware image file

(page 23).2. Navigate to the AdministrationiLO Firmware page.

The Firmware Update page opens, as shown in Figure 6 (page 24).

Figure 6 Firmware Update page

3. Click Browse, and then specify the location of the firmware image file in the File box.4. Click Upload to start the update process.

The iLO firmware receives, validates, and then flashes the firmware image. After the firmwareflashes and resets, iLO logs you out and the browser reconnects.

IMPORTANT: A firmware update takes approximately 1 minute, and then it takes 30 secondsfor the browser to reconnect. Do not interrupt a firmware update. If a firmware update isinterrupted or fails, attempt it again immediately. Do not reset iLO before reattempting theupdate.The firmware update will not start if you navigate away from this page before the upload iscomplete.

5. To start working with the updated firmware, clear your browser cache, and then log in to iLO.If an error occurs during a firmware update, see the section Unable to upgrade iLO firmware(page 203).

24 Configuring iLO

If an iLO firmware update is corrupted or canceled, and iLO is corrupted, see iLO network failedflash recovery (page 204).

Using language packsLanguage packs enable you to easily switch the iLO web interface from English to a language ofyour choice. Language packs currently provide translations for the iLO web interface, .NET IRC,and Java IRC.Consider the following when you are using language packs:

You must have the Configure iLO Settings privilege to install a language pack.

You can install one additional language pack at a time. Uploading a new language packreplaces the currently installed language pack, regardless of the language pack version.

The language pack firmware is independent of the iLO firmware. Setting iLO to factory defaultsdoes not remove an installed language pack.

The Java IRC and the .NET IRC use the language of the current iLO session.

For localization support with the Java IRC on Windows systems, you must select the correctlanguage in the Regional and Language Options Control Panel.

For localization support with the Java IRC on Linux systems, make sure that the fonts for thespecified language are installed and available to the JRE.

If an installed language pack does not include the translation for a text string, the text isdisplayed in English.

When you update the iLO firmware, HP recommends downloading the latest language packto ensure that the language pack contents match with the iLO web interface.iLO 3 firmware version 1.50 requires version 1.50 or later of the iLO language pack.

Installing a language pack1. Navigate to the iLO software download website: http://www.hp.com/support/ilo3.2. Download the language pack to your local computer.3. Navigate to the AdministrationAccess SettingsLanguage page, as shown in Figure 7

(page 26).

Using language packs 25

Figure 7 Access Settings Language page

4. Click Browse in the Upload Language Pack section.5. Select the downloaded language pack, and then click Open.

The following message appears:Only one language pack is supported at a time. If a language pack is already installed, it will be replaced with this upload. Are you sure?

6. Click OK to continue.If you have a previously installed language pack, this language pack will replace it.

7. Click Upload.8. Refresh the browser to see the new language pack. You do not need to reset iLO.

Selecting a language packAfter you have installed a language pack, you can select it in the following ways:

From the login page, as shown in Figure 8 (page 27).

26 Configuring iLO

Figure 8 Login page language menu

From the toolbar located on the bottom right side of the iLO web interface, as shown in Figure 9(page 27).

Figure 9 Toolbar language menu

From the Access SettingsLanguage page. For instructions, see Configuring the currentlanguage settings (page 27).You can also set the default language on the Language page. Navigate to theAdministrationAccess Settings page, and then click the Language tab. From there, you canconfigure the default or current language and remove a language pack.

Configuring the default language settingsTo set the default language for the users of this instance of the iLO firmware:1. Navigate to the Access SettingsLanguage page, as shown in Figure 7 (page 26).2. Select a value in the Default Language menu.

The available languages are English and an additional language pack if one is installed.

3. Click Apply.

Configuring the current language settingsTo set the current language of this browser session:1. Navigate to the Access SettingsLanguage page, as shown in Figure 7 (page 26).2. Select a value in the Current Language menu.

The available languages are English and an additional language pack if one is installed.

3. Click Apply.

Removing a language pack1. Navigate to the Access SettingsLanguage page, as shown in Figure 7 (page 26).2. Click the Uninstall button in the Installed Languages section.

The following message appears:Applying new settings requires an iLO reset. Would you like to apply the new settings and reset iLO now?

3. Click OK to continue.iLO resets and closes your browser connection.

Using language packs 27

4. Wait 30 seconds, and then log back in to iLO.

iLO licensingHP iLO standard features are included in every HP ProLiant server to simplify server setup, engagehealth monitoring, power and thermal control, and promote remote administration.HP iLO Advanced and HP iLO Advanced for BladeSystem licenses activate functionality such asgraphical remote console with multi-user collaboration, video record/playback, and many moreadvanced features.Unlocking iLO licensed features has never been easier. Simply determine which license best suitsyour company's infrastructure.The following license types are available:

iLO Advanced Single Server License

iLO Advanced Electronic License

iLO Advanced Flexible Quantity License

iLO Advanced Volume License

For details on purchasing licenses and a list of licensed features, see the following website: http://www.hp.com/go/ilo/licensing.Consider the following information about iLO licenses:

iLO licenses are versionless, meaning, regardless of the version of iLO you have enabled (iLO2, iLO 3, or iLO 4), an iLO license can be applied. For features that are specific to the versionof iLO on your ProLiant server, see the following website: http://www.hp.com/go/compareilo.

If you purchase an iLO license with any Insight Control software suite, HP provides the TechnicalSupport and Update Service. For more information, see Support and other resources(page 208).

If you purchase an iLO license as a one-time activation of licensed features, you must purchasefuture functional upgrades.

One iLO license is required for each server on which the product is installed and used. Licensesare not transferable. You cannot license an HP ProLiant SL/ML/DL server by using aBladeSystem license.

HP will continue to provide maintenance releases with fixes, as well as iLO standard featureenhancements, at no extra charge.

Installing an iLO license by using a browserUse the following procedure to install an iLO license.You must have the Configure iLO Settings privilege to install a license.

28 Configuring iLO

1. Navigate to the AdministrationLicensing page in the iLO web interface.The Licensing page opens, as shown in Figure 10 (page 29).

Figure 10 Licensing page

2. Review the license agreement provided with your HP License Pack option kit.3. Enter the license key in the Activation Key fields.

Press the Tab key or click inside a field to move between fields. The Activation Key fieldsadvance automatically as you enter data.

4. Click Install.The EULA confirmation opens. The EULA details are available in the license kit.

5. Click OK.The license key is now enabled.

For tips on troubleshooting license installation, see Troubleshooting license installation (page 195).

Administering usersThe iLO firmware enables you to manage user accounts stored locally in the secure iLO memoryand directory group accounts. Use MMC or ConsoleOne to manage dir