HP Ilo 2 User Guide

							SettingupiLO2withthebrowser-basedoption
IfyoucanconnecttoiLO2onthenetworkwithabrowser,thenusethebrowser-basedsetup
method.YoucanalsousethismethodtoreconfigureapreviouslyconfigurediLO2.
AccessiLO2fromaremotenetworkclientusingasupportedbrowser,andprovidethedefault
DNSname,username,andpassword.DefaultDNSnameandaccountinformationislocatedon
theiLO2NetworkSettingstagattachedtotheservercontainingtheiLO2managementprocessor.
WhenyousuccessfullylogontoiLO2,youcanchangethedefaultvaluesofthelocaluseraccounts
byselectingUserAdministrationundertheiLO2Administrationtab.
ActivatingiLO2licensedfeatureswithabrowser
TheLicensingpageenablesyoutoviewthecurrentlicensestatusandenterakeytoactivateiLO
2licensefeatures.TheiLO2versionandcurrentlicenseinformationappearsinthissection.Ifa
licenseisinstalled(includinganevaluationlicense),thelicensenumberappears.Formore
informationaboutiLO2licenseoptions,see“Licensing”(page26).
1.LogintoiLO2throughasupportedbrowser.
2.TodisplaytheiLO2licenseactivationscreen,clickAdministration>Licensing.
3.Enterthelicensekey.Tomovebetweenfields,presstheTabkeyorclickinsideafield.The
ActivationKeyfieldadvancesautomaticallyasyouenterdata.Toclearthefieldsandreload
thepage,clickLicensing.
4.ClickInstall.TheEULAconfirmationappears.TheEULAdetailsareavailableontheHPwebsite
athttp://www.hp.com/servers/lights-outandwiththelicensekit.
5.ClickOK.
TheadvancedfeaturesofiLO2arenowenabled.
InstallingiLO2devicedrivers
TheiLO2ManagementInterfaceDriverenablessystemsoftwaresuchasSNMPInsightAgents
andtheTerminalServicespassthroughservicetocommunicatewithiLO2.
ThedevicedriversrequiredtosupportiLO2arepartofthePSPlocatedontheSmartStartCD,
ManagementCD,orontheHPwebsiteathttp://www.hp.com/servers/lights-out.
AllthesupportdriversforyourserverandiLO2canbedownloadedfromtheHPwebsiteathttp://
www.hp.com/servers/lights-out.
Todownloadthedrivers:
ActivatingiLO2licensedfeatureswithabrowser21 
						

							1.ClicktheiLO2graphic.
2.SelectSoftwareandDrivers.
Microsoftdevicedriversupport
ThedevicedriversthatsupporttheiLO2arepartofthePSPthatislocatedontheHPwebsiteat
http://www.hp.com/supportorontheSmartStartCD.BeforeyouinstalltheWindowsdrivers,
obtaintheWindowsdocumentationandthelatestWindowsServicePack.
iLO2prerequisitefiles:
•CPQCIDRV.SYS–ProvidestheiLO2ManagementInterfaceDriversupport.
•CPQASM2.SYS,SYSMGMT.SYS,andSYSDOWN.SYS–ProvidetheiLO2AdvancedServer
ManagementControllerDriversupport.
PSPforMicrosoftWindowsproductsincludesaninstallerthatanalyzessystemrequirementsand
installsalldrivers.ThePSPisavailableontheHPwebsiteathttp://www.hp.com/supportoron
theSmartStartCD.
ToinstallthedriversinthePSP:
1.DownloadthePSPfromtheHPwebsiteathttp://www.hp.com/support.
2.RuntheSETUP.EXEfileincludedinthedownload,andthenfollowtheinstallationinstructions.
ForadditionalinformationaboutthePSPinstallation,readthetextfileincludedinthePSPdownload.
Linuxdevicedriversupport
YoucandownloadtheLSPfilescontainingtheiLO2driver,thefoundationagents,andhealth
agentsfromtheHPwebsiteathttp://www.hp.com/support.Theinstructionsonhowtoinstallor
updatetheiLO2driverareavailableonthewebsite.TheHPManagementAgentsforLinuxare:
•ASMpackage(hp-snmp-agents)combinesthehealthdriver,IMLviewer,foundationagents,
healthagent,andstandardequipmentagentintoonepackage.
•RSMpackage(hp-iLO)combinestheRIBdriver,rackdaemon,RIBagent,andrackagent
intoonepackage.
ToloadthehealthandiLO2driverpackages,enterthefollowingcommands:
rpm -ivh hp-snmp-agents-d.vv.v-pp.Linux_version.i386.rpm
rpm -ivh hp-iLO-d.vv.v-pp.Linux_version.i386.rpm
where:
distheLinuxdistributionandversion
vv.v-ppareversionnumbers
ToremovethehealthandiLO2drivers,enterthefollowingcommands:
rpm -e hp-snmp-agents
rpm -e hp-iLO
Foradditionalinformation,seetheHPSoftwareandDriverswebsiteathttp://www.hp.com/
support.
NovellNetWaredevicedriversupport
ThedevicedriversrequiredtosupportiLO2arepartofthePSPthatislocatedontheSmartStart
CDandtheHPwebsiteathttp://www.hp.com/support.ThePSPforNovellNetWareincludesan
installerthatanalyzessystemrequirementsandinstallsalldrivers.
iLO2requiresthefollowingfiles:
•TheCPQHLTH.NLMfileprovidestheHealthDriverforNovellNetWare.
•TheCPQCI.NLMfileprovidesiLO2ManagementInterfaceDriversupport.
22SettingupiLO2 
						

							WhenupdatingiLO2drivers,besureiLO2isrunningthelatestversionofiLO2firmware.You
canobtainthelatestversionasaSmartComponentfromtheHPwebsiteathttp://www.hp.com/
servers/lights-out.
InstallthedriversdownloadthePSPfromtheHPwebsiteathttp://www.hp.com/supporttoa
NetWareserver.AfterdownloadingthePSP,followtheNovellNetWarecomponentinstallation
instructionstocompletetheinstallation.ForadditionalinformationaboutthePSPinstallation,read
thetextfileincludedinthePSPdownload.
WhenusingNovellNetWare6.X,usetheATIES1000videodriverthatisprovidedbytheoperating
systemforbestresults.
InstallingiLO2devicedrivers23 
						

							3ConfiguringiLO2
iLO2configurationoverview
Typically,anadvancedoradministrativeuserwhomustmanageusersandconfigureglobaland
networksettingsconfiguresiLO2.YoucanconfigureiLO2usingtheiLO2browser-basedGUI
orscriptingtoolssuchasCPQLOCFGandHPONCFG(describedintheHPIntegratedLights-Out
ManagementProcessorScriptingandCommandLineResourceGuideathttp://
h20000.www2.hp.com/bizsupport/TechSupport/DocumentIndex.jsp?contentType=SupportManual&
lang=en&cc=us&docIndexId=64179&taskId=135&prodTypeId=18964&prodSeriesId=1146658.
TheiLO2Administrationtabenablesyoutoconfigureandmanageusersettings,SNMPalerting
(throughintegrationwithHPSIM),securitysettings,licensing,certificateadministration,directory
settings,andnetworkenvironmentsettings.TheAdministrationtabincludesthefollowingmenu
options:
•iLO2Firmware.See“UpgradingiLO2firmware”(page24).
•Licensing.See“Licensing”(page26).
•UserAdmininstration.See“Useradministration”(page28)
•Settings
Access.See“ConfiguringiLO2access”(page32)◦
◦Security.See“Security”(page40)
◦Network.See“Network”(page59)
◦Management.See“SNMP/InsightManagersettings”(page65)
UpgradingiLO2firmware
FirmwareupgradesenhancethefunctionalityofiLO2.YoucanfindthelatestfirmwareontheHP
websiteathttp://www.hp.com/servers/lights-out.SelectyouriLO2product,andthenselect
Software&Drivers.Afterthesoftwareanddriverspageappears,selectyouriLO2productand
operatingsystem,andthenclickLocateSoftware.YoucanalsolocateyouriLO2softwareby
selectingtheOperatingSystemandCategoryoptions.
YoumusthavetheConfigureiLO2privilege(configurelocaldevicesettings)toupdatethefirmware
unless,yousetthesecurityoverrideswitch.Formoreinformation,see“iLO2SecurityOverride
Switchadministration”(page42).Ifthesecurityoverrideswitchisset,anyiLO2usercanupdate
thefirmware.YoumustrunfirmwareupdatesfromanAdministratororrootcontextonthehost
operatingsystem.
ToupdatetheiLO2chooseoneofthefollowingmethods:
•Onlinefirmwareupdate–Downloadtheappropriateoperatingsystemcomponentandrun
itfromtheAdministratororrootcontextoftheoperatingsystem.Theonlinefirmwareupdate
softwarerunsonthehostoperatingsystemandupdatestheiLO2firmwarewithoutrequiring
youtologintoiLO2.
•OfflinefirmwareupdateforSmartStartmaintenance–DownloadtheiLO2firmwareimage
fileyouplantoinstall,andsee“UpgradingiLO2withabrowser”(page25).
•FirmwareMaintenanceCD-ROM–DownloadthecomponenttocreateabootableCDthat
containsmanyfirmwareupdatesforProLiantserversandoptions.
•ScriptingwithCPQLOCFG–DownloadtheCPQLOCFGcomponenttogetthenetwork-based
scriptingutilityCPQLOCFG.CPQLOCFGenablesyoutouseRIBCLscriptsthatperformfirmware
updates,iLO2configuration,andiLO2operationsinbulk,securelyoverthenetwork.HP
recommendsthatLinuxusersreviewtheHPLights-OutXMLPERLScriptingSamplesforLinux.
24ConfiguringiLO2 
						

							•ScriptingwithHPONCFG–DownloadtheHPONCFGcomponenttogetthehost-basedscripting
utilityHPONCFG.ThisutilityenablesyoutouseRIBCLscriptsthatperformfirmwareupdates,
Lights-Outprocessorconfigurationandoperationsinbulk,fromAdministratororrootaccount
accessonsupportedhostoperatingsystems.
•HPDirectoriesSupportforManagementProcessors–DownloadtheHPDirectoriesSupport
forManagementProcessorsexecutablefiletogetthedirectorysupportcomponents.Oneof
thecomponents,HPLOMIG,canbeusedtodiscoveriLO,iLO2,RILOE,andRILOEIIprocessors,
andupdatethefirmware.Youdonothavetousedirectoryintegrationtotakeadvantageof
thisfunctionality.
UpgradingiLO2withabrowser
Youcancompletethefirmwareupgradefromanynetworkclientusingasupportedbrowser.You
musthavetheUpdateiLO2FirmwareprivilegetoupgradetheiLO2firmware.Themostrecent
firmwareforiLO2isavailableontheHPwebsiteathttp://www.hp.com/servers/lights-out.To
upgradetheiLO2firmwareusingasupportedbrowser:
1.LogintoiLO2withanaccountthathastheConfigureiLO2Settingsprivilege.
2.ClickAdministration>UpgradeiLO2Firmware.TheUpgradeiLO2Firmwarepageappears.
3.EnterthefilenameintheNewfirmwareimagefieldorbrowseforthefile.
4.ClickSendfirmwareimage.Thefirmwareupgradetakesafewminutes.Aprogressbar
displaystheprogressofthefirmwareupgrade.
DonotinterruptanUpgradeiLO2Firmwaresession.TheiLO2systemautomaticallyresetsafter
asuccessfulfirmwareupgrade.TheiLO2systemresetdoesnotaffectthehostoperatingsystem
andserver.
Ifthefirmwareupgradeisinterruptedorfails,attempttheupgradeagainimmediately.Donot
resettheiLO2systembeforereattemptingafirmwareupgrade.
UpdatingthefirmwareusingthemaintenanceCD
TouseHPSmartUpdateManagerontheFirmwareMaintenanceCD:
1.PlacetheFirmwareMaintenanceCDonaUSBkeyusingtheUSBKeyCreatorUtility.
2.CopyCP009768.exetothe/compaq/swpackagesdirectoryontheUSBKey.
3.FollowHPSmartUpdateManagerstepstocompletefirmwareupdate.
UpgradingiLO2firmware25 
						

							RecoveringfromafailediLO2firmwareupdate
TorecoverfromafailedfirmwareupdateusingtheHPDriveKeyBootUtility:
1.CopytheiLO2offlineflashcomponenttoyourUSBdrivekey.
2.VerifythattheiLO2securityoverrideswitchissettodisabled.
3.BoottheUSBdrivekeycontainingtheiLO2flashcomponent.
TodownloadtheHPDriveKeyBootUtilityandforinformationonhowtocreateabootUSB
key,seetheHPwebsiteathttp://www.hp.com/go/support.
4.Afterthefirstscreendisplays,switchtotextconsolebypressingtheCtrl+Alt+F1keys.
5.Switchtothedirectorywheretheflashcomponentisstoredbyenteringcd
/mnt/usb/components/atthe#prompt.
6.RemovetheloadedHPLights-Outdriverbyenteringthefollowingcommands:
/etc/init.d/hp-snmp-agents stop
/etc/init.d/hp-ilo stop
or
/etc/init.d/hpasm stop
7.Runthecomponentusingthe- -directoption.Forexample:
./CP00xxxx.scexe – –direct
8.EnteryattheContinue (y/n)?prompt.
9.Afterprogrammingissuccessfullycompleted,setthesecurityoverrideswitchtoenabledand
reboottheserver.
DowngradingtheiLO2firmware
IfyoudowngradetheiLO2firmware,youmustremovetheiLO21.30RemoteConsoleActiveX
applet1.3.0.19fromyourInternetExplorerclientbrowser.Toremovetheapplet:
1.OpenInternetExplorer.
2.SelectTools>InternetOptions>Settings>Viewobjects.
3.Toremove1.30.19,right-clickiLO2Remoteconsole1.3.0.18.
Licensing
HPiLOAdvancedPackandHPiLOAdvancedPackforBladeSystemlicensesactivateoptional
iLO2featuresthatarenotbundledwithanunlicensedsystem.
IfyoupurchasetheiLOAdvancedPackortheiLOAdvancedPackforBladeSystemwithanyInsight
ControlsoftwaresuiteoriLOPowerManagementPack,HPprovidesTechnicalSupportandUpdate
Services.Formoreinformation,see“Supportinformation”(page206).
IfyoupurchasetheiLOAdvancedPackortheiLOAdvancedPackforBladeSystemasaone-time
activationoflicensedfeatures,youmustpurchasefuturefunctionalupgrades.Formoreinformation,
see“Supportinformation”(page206).
OneiLOAdvancedoriLOAdvancedPackforBladeSystemlicenseisrequiredforeachserveron
whichtheproductisinstalledandused.Licensesarenontransferable.YoucannotlicenseanHP
ProLiantML/DLserverwithaniLOAdvancedforBladeSystem.Foradditionalinformation,seethe
EULA.
HPwillcontinuetoprovidemaintenancereleaseswithfixesaswellasiLOStandardandiLO
StandardBladeEditionfeatureenhancementsatnoextracharge.
A60-dayevaluationlicensekeyisavailablefordownloadfromtheHPwebsite.Theevaluation
licenseactivatesandenablesaccesstoiLO2Advancedfeatures.Youcanonlyinstalloneevaluation
licenseperiLO2.Whentheevaluationperiodexpires,theiLO2featuresdeactivate.
ThefollowingversionsofiLO2areavailable:
26ConfiguringiLO2 
						

							NOTE:Thefeaturesannotatedwithanasterisk(*)arenotsupportedonallsystems.
iLO2StandardBlade
Edition
iLO2StandardiLO2Advancedfor
BladeSystem
iLO2AdvancedFeature
XXXXVirtualpowerand
resetcontrol
XXXXServerconsoleaccess
throughPOST
––––XXTextconsoleafter
POST
XXXXEventlogs
XXXXSystemhealth*and
configuration
XXXXUID
XXXXDMTFSMASH
standardCLP
XXXXRIBCL/XMLscripting
XXXXWSManagement
Scripting
XXXXBrowseraccess
XXXXSSHaccess
––X––XSharednetworkport
XXXXSerialaccess
XXXXRemoteserialconsole
X––XXIntegratedremote
console
X––XXRemoteconsole
X––XXVirtualmediaapplet
X––XXSecuredigitalcard
support*
X––XXTerminalservices
passthrough
––––XXVirtualmediascripting
––––XXDirectoryintegration
XXXX24hourpower
reporting*
––––XXReal-timepower
reporting*
––––XXDynamicpower
capping
––––XXGrouppowercapping
––––XXTwo-factorsmartcard
authentication
––––XXHPSIMsinglesign-on
Licensing27 
						

							iLO2StandardBlade
Edition
iLO2StandardiLO2Advancedfor
BladeSystem
iLO2AdvancedFeature
––––XXKerneldebuggerfor
Windows
––––XXConsolereplay
––––XXSharedremote
console
––––XXBoot/faultconsole
capture
XXXXiLOvideoplayer
(licenserequiredfor
capture)
InadditiontothestandardiLO2single-serverlicenses,twootherlicensingoptionsareavailable:
•TheFlexibleQuantityLicenseKitenablesyoutopurchaseasinglesoftwarepackage,one
copyofthedocumentation,andasinglelicensekeytoactivatetheexactnumberoflicenses
requested.
•TheActivationKeyAgreementenablesavolumepurchaseofProLiantEssentialsandInsight
Controlsoftwareovertime,typicallyinconjunctionwithnewProLiantserversthatareacquired
onaregularbasis.
Useradministration
TheiLO2firmwareenablesyoutomanageuseraccountsstoredlocallyinthesecureiLO2memory
anddirectorygroupaccounts.UseMMCorConsoleOnetomanagedirectoryuseraccounts.
TheiLO2firmwaresupportsupto12userswithcustomizableaccessrights,loginnames,and
advancedpasswordencryption.Privilegescontrolindividualusersettings.Userscanhaveprivileges
customizedtotheirindividualaccessrequirements.Tosupportmorethan12users,youmusthave
theAdvancedPack,whichenablesintegrationwithanunlimitednumberofdirectory-baseduser
accounts.
YoumusthavetheAdministerUserAccountsprivilegetoviewiLO2users,addnewusers,and
modifyordeleteexistingusers.Ifyoudonothavethisprivilege,youcanviewandmodifyonly
youraccount.
Toaccesslocalaccounts,clickAdministration>UserAdministration>LocalAccounts.
28ConfiguringiLO2 
						

							iLO2DirectoryAccountsenablesyoutoviewiLO2groupsandmodifythesettingsforthose
groups.YoumusthavetheAdministerDirectoryGroupsprivilege.ToaccessDirectoryAccounts,
clickAdministration>UserAdministration>GroupAccounts.
Addinganewuser
NOTE:OnlyuserswiththeAdministerUserAccountsprivilegecanmanageotherusersoniLO
2.
Youcanassignadifferentaccessprivilegetoeachuser.Eachusercanhaveauniquesetof
privilegesdesignedforthetasksthattheusermustperform.Youcangrantordenyaccesstocritical
functionssuchasremoteaccess,usermanagement,virtualpower,andotherfeatures.
ToaddanewusertoiLO2:
1.LogintoiLO2usinganaccountthathastheAdministerUserAccountsprivilege.
2.ClickAdministration.
3.SelectUserAdministration>LocalAccounts.
4.ClickNew.
Useradministration29 
						

							5.Completethefields.Thefollowingoptionsareavailable:
•UserNameappearsintheuserlistandonthehomepage.Itisnotnecessarilythesame
astheLoginname.ThemaximumlengthforaUserNameis39characters.TheUser
Namemustuseprintablecharacters.
•LoginNameisthenamethatyoumustusewhenloggingintoiLO2.Themaximumlength
foraloginnameis39characters.Theloginnamecanonlyuseprintablecharacters.
•PasswordandConfirmPasswordfieldssetandconfirmthepasswordthatisusedwhen
loggingintoiLO2.TheminimumlengthforapasswordissetintheAccessOptionspage.
Themaximumlengthforapasswordis39characters.Enterthepasswordtwicefor
verification.
•AdministerUserAccountsisauserprivilegethatallowsyoutoadd,modify,anddelete
localiLO2useraccounts.AdministerUserAccountsalsoallowsyoutoalterprivileges
forallusers,includinggrantingallpermissionstoyourself.Withoutthisprivilege,you
canonlyviewyourownsettingsandchangeyourownpassword.
•RemoteConsoleAccessisauserprivilegethatallowsyoutoremotelyaccessthehost
systemRemoteConsoleandRemoteSerialConsole,includingvideo,keyboardandmouse
control.Youarestillrequiredtohaveaccesstotheremotesystemtousethiscapability.
•VirtualPowerandResetisauserprivilegethatallowsyoutopower-cycleorresetthe
hostplatform.Anyoftheseactivitiesinterruptstheavailabilityofthesystem.Youcanalso
diagnosethesystemusingthevirtualNMIbutton.
•VirtualMediaisauserprivilegethatallowsyoutousevirtualmediaonthehostplatform.
•ConfigureiLO2SettingsisaprivilegethatallowsyoutoconfiguremostiLO2settings,
includingsecuritysettings.ConfigureiLO2SettingsenablesyoutoremotelyupdateiLO
2firmware.Itdoesnotincludeuseraccountadministration.Thesesettingsrarelychange.
AftercorrectlyconfiguringiLO2,revokingthisprivilegefromallusersprevents
reconfiguration.AuserwiththeAdministerUserAccountsprivilegecanenableordisable
thisprivilege.IfiLO2RBSUisenabled,youcanalsoreconfigureiLO2.
•UserCertificateInformationmapsacertificatetoauser.Usercertificatesareonlyrequired
fortwo-factorauthentication.Ifacertificateisnotmappedtotheuseraccount,thenthe
followingmessagedisplaysA certificate has NOT been mapped to this
user,alongwiththeAddaCertificatebutton.Clickthisbuttontomapacertificateto
theuser.Afteracertificateismappedtotheuseraccount,a40-digitthumbprintofthe
certificateappears,alongwiththeRemovethisCertificatebutton,whichcanbeusedto
removethecertificate.IfTwo-FactorAuthenticationisenabled,mapadifferentcertificate
toeachuser.AuserwhopresentsacertificatewhenconnectingtoiLO2isauthenticated
astheusertowhomthecertificateismapped.Two-FactorAuthenticationmustbeenabled
toauthenticateusingacertificate.
6.Whentheuserprofileiscomplete,returntotheUserAdministrationscreenbyclickingSave
UserInformation.Tocleartheuserprofilewhileenteringanewuser,clickRestoreUser
Information.
Viewingormodifyingexistingusersettings
1.LogintoiLO2usinganaccountthathastheAdministerUserAccountsprivilege.
YoumusthavetheAdministerUserAccountsprivilegetomanageotherusersoniLO2.All
userscanchangetheirownpasswordusingtheView/ModifyUserfeature.
2.ClickAdministration>UserAdministration,andselectthenameoftheuserwhoseinformation
youwanttomodify.
3.ClickView/Modify.
30ConfiguringiLO2