HP Ilo 3 User Guide
Have a look at the manual HP Ilo 3 User Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
Coreattributes.................................................................................................................239 Coreclassdefinitions.......................................................................................................239 hpqTarget..................................................................................................................239 hpqRole.....................................................................................................................240 hpqPolicy...................................................................................................................240 Coreattributedefinitions...................................................................................................240 hpqPolicyDN..............................................................................................................240 hpqRoleMembership....................................................................................................240 hpqTargetMembership.................................................................................................241 hpqRoleIPRestrictionDefault...........................................................................................241 hpqRoleIPRestrictions...................................................................................................241 hpqRoleTimeRestriction.................................................................................................242 Lights-OutManagementspecificLDAPOIDclassesandattributes................................................242 Lights-OutManagementclasses.........................................................................................242 Lights-OutManagementattributes......................................................................................242 Lights-OutManagementclassdefinitions.............................................................................242 hpqLOMv100.............................................................................................................242 Lights-OutManagementattributedefinitions........................................................................243 hpqLOMRightLogin......................................................................................................243 hpqLOMRightRemoteConsole........................................................................................243 hpqLOMRightVirtualMedia...........................................................................................243 hpqLOMRightServerReset..............................................................................................243 hpqLOMRightLocalUserAdmin.......................................................................................244 hpqLOMRightConfigureSettings.....................................................................................244 COIDsupportforcertificates......................................................................245 Glossary..................................................................................................247 Index.......................................................................................................250 Contents11
1IntroductiontoiLO TheiLOsoftwarecanremotelyperformmostfunctionsthatotherwiserequireavisittotheservers atthedatacenter,computerroom,orremotelocation.iLOallowsyoutodothefollowing: •Monitorserverhealth.iLOmonitorstemperaturesintheserverandsendscorrectivesignalsto thefanstomaintainproperservercooling.iLOalsomonitorsfirmwareversionsandthestatus offans,memory,thenetwork,processors,powersupplies,andserverharddrives. •Accessahigh-performanceandsecureIntegratedRemoteConsoletotheserverfromanywhere intheworldifyouhaveanetworkconnectiontotheserver. TherearetwoversionsoftheIntegratedRemoteConsole: ◦.NETIRC ◦JavaIRC GeneralreferencestotheRemoteConsoleapplytoboththe.NETIRCandJavaIRC,unless otherwisespecified. •Usetheshared.NETIRCtocollaboratewithmultipleserveradministrators. •Remotelymounthigh-performanceVirtualMediadevicestotheserver. •UseVirtualPowerandVirtualMediafromtheGUI,theCLI,ortheiLOscriptingtoolkitfor manytasks,includingtheautomationofdeploymentandprovisioning. •Securelyandremotelycontrolthepowerstateofthemanagedserver. •Monitorthepowerconsumptionandserverpowersettings. •Uselocalordirectory-baseduseraccountstologintoiLO. •ConfigureKerberosauthentication,whichaddstheHPZeroSignInbuttontotheloginscreen. •UseiLOlanguagepackstoswitchbetweenEnglishandanothersupportedlanguage. FormoreinformationabouttheiLO3features,seehttp://www.hp.com/go/iLO3. iLOwebinterface TheiLOwebinterfacegroupssimilartasksforeasynavigationandworkflow.Itisorganizedina navigationaltreeviewlocatedontheleftsideofthepage.Thetop-levelbranchesareInformation, RemoteConsole,VirtualMedia,PowerManagement,Network,andAdministration.Ifyouhave aProLiantserverblade,theBLc-Classbranchisincluded. WhenusingtheiLOwebinterface,notethefollowing: •Eachhigh-leveliLObranchhasasubmenuthatyoucandisplaybyclickingthe+icontothe leftofthatbranch.Eachmenutopicdisplaysapagetitlethatdescribestheinformationor settingsavailableonthatpage.Thepagetitlemightnotreflectthenamethatisdisplayedon themenuoption. •AssistanceforalliLOpagesisavailablefromtheiLOhelppages.Toaccesspage-specific help,clickthe?iconontheupperrightsideofthepage. •TypicaladministratortasksareavailablefromtheAdministrationandNetworkbranchesof theiLOwebinterface.Thesetasksaredescribedin“SettingupiLO”(page14)and “ConfiguringiLO”(page25). •TypicalusertasksareavailablefromtheInformation,RemoteConsole,VirtualMedia,Power Management,andBLc-ClassbranchesoftheiLOwebinterface.Thesetasksaredescribed in“UsingiLO”(page92). 12IntroductiontoiLO
FormoreinformationaboutiLOfunctionalityandintegration,seethefollowing: •“IntegratingHPSystemsInsightManager”(page157) •“Directoryservices”(page160) •“Troubleshooting”(page209) iLORBSU YoucanusetheiLOROM-basedsetuputilitytoconfigurenetworkparameters,globalsettings,and useraccounts.iLORBSUisdesignedfortheinitialiLOsetup,andisnotintendedforcontinued iLOadministration.iLORBSUisavailablewhenevertheserverisbooted,andcanberunremotely throughtheRemoteConsole.PressF8duringPOSTtoenteriLORBSU. YoucandisableiLORBSUintheiLORBSUGlobalSettingspreferencesorintheiLOwebinterface. DisablingiLORBSUpreventsreconfigurationfromthehostunlesstheiLOSecurityOverrideSwitch isset. FormoreinformationaboutusingiLORBSU,seethefollowing: •“SettingupiLObyusingiLORBSU”(page16) •“iLORBSUsecurity”(page44) •“UsingtheiLORBSU”(page87) iLOmobileapp TheHPiLOmobileappprovidesaccesstotheRemoteConsoleofyourHPProLiantserverfrom yourmobiledevice.ThemobileappinteractsdirectlywiththeiLOprocessoronHPProLiantservers, providingtotalcontroloftheserveratalltimesaslongastheserverispluggedin.Forexample, youcanaccesstheserverwhenitisinahealthystateorwhenitispoweredoffwithablankhard drive.AsanITadministrator,youcantroubleshootproblemsandperformsoftwaredeployments fromalmostanywhere. FormoreinformationabouttheiLOmobileapp,seehttp://www.hp.com/go/ilo/mobileapp. iLOscriptingandcommandline YoucanusetheiLOscriptingtoolstoconfiguremultipleiLOsystems,toincorporateastandard configurationintothedeploymentprocess,andtocontrolserversandsubsystems. TheHPiLOScriptingandCommandLineGuidedescribesthesyntaxandtoolsavailabletouse iLO3throughacommandlineorscriptedinterface. iLORBSU13
2SettingupiLO TheiLOdefaultsettingsenableyoutousemostfeatureswithoutadditionalconfiguration.However, theconfigurationflexibilityofiLOenablescustomizationformultipleenterpriseenvironments.This chapterdiscussestheinitialiLOsetupsteps.Forinformationaboutadditionalconfigurationoptions, see“ConfiguringiLO”(page25). Completetheinitialsetupsteps: 1.Decidehowyouwanttohandlenetworkingandsecurity.Formoreinformation,see“Preparing tosetupiLO”(page14). 2.ConnectiLOtothenetwork.Formoreinformation,see“ConnectingiLOtothenetwork” (page16). 3.IfyouarenotusingdynamicIPaddressing,configureastaticIPaddressbyusingiLORBSU. Formoreinformation,see“SettingupiLObyusingiLORBSU”(page16). 4.Ifyouareusingthelocalaccountsfeature,setupyouruseraccountsbyusingiLORBSUor theiLOwebinterface.Formoreinformation,see“SettingupiLObyusingiLORBSU”(page16) or“SettingupiLObyusingtheiLOwebinterface”(page21). 5.InstallaniLOlicense.Formoreinformation,see“ActivatingiLOlicensedfeatures”(page22). 6.Ifrequired,installtheiLOdrivers.Formoreinformation,see“InstallingtheiLOdrivers” (page22). PreparingtosetupiLO BeforesettingupaniLOmanagementprocessor,youmustdecidehowtohandlenetworkingand security.ThefollowingquestionscanhelpyouconfigureiLO: 1.HowshouldiLOconnecttothenetwork? Foragraphicalrepresentationandexplanationoftheavailableconnections,see“Connecting iLOtothenetwork”(page16). Typically,iLOisconnectedtothenetworkthroughoneofthefollowing: •AcorporatenetworkthatboththeNICandtheiLOportareconnectedto.Thisconnection enablesaccesstoiLOfromanywhereonthenetworkandreducestheamountof networkinghardwareandinfrastructurerequiredtosupportiLO.However,onacorporate network,trafficcanhinderiLOperformance. •AdedicatedmanagementnetworkwiththeiLOportonaseparatenetwork.Aseparate networkimprovesperformanceandsecuritybecauseyoucanphysicallycontrolwhich workstationsareconnectedtothenetwork.Aseparatenetworkalsoprovidesredundant accesstotheserverwhenahardwarefailureoccursonthecorporatenetwork.Inthis configuration,iLOcannotbeaccesseddirectlyfromthecorporatenetwork. 2.HowwilliLOacquireanIPaddress? ToaccessiLOafterconnectingittothenetwork,theiLOmanagementprocessormustacquire anIPaddressandsubnetmaskbyusingeitheradynamicorstaticprocess. •AdynamicIPaddressissetbydefault.iLOobtainstheIPaddressandsubnetmaskfrom DNSorDHCPservers.Thismethodisthesimplest. •AstaticIPaddressisusedifDNSorDHCPserversarenotavailableonthenetwork.A staticIPaddresscanbeconfiguredbyusingiLORBSU.Formoreinformation,see “ConfiguringastaticIPaddressbyusingiLORBSU”(page17). IMPORTANT:IfyouplantouseastaticIPaddress,youmusthavetheIPaddressbefore startingtheiLOsetupprocess. 14SettingupiLO
3.Whataccesssecurityisrequired,andwhatuseraccountsandprivilegesareneeded? iLOprovidesseveraloptionstocontroluseraccess.Useoneofthefollowingmethodsto preventunauthorizedaccess: •Localaccounts—Upto12usernamesandpasswordscanbestorediniLO.Thisisideal forsmallenvironmentssuchaslabsandsmall-sizedormedium-sizedbusinesses. •Directoryservices—UsethecorporatedirectorytomanageiLOuseraccess.Thisisideal forenvironmentswithalargenumberofusers.Ifyouplantousedirectoryservices, considerenablingatleastonelocaladministratoraccountforalternateaccess. FormoreinformationaboutiLOaccesssecurity,see“ConfiguringiLOsecurity”(page43). 4.HowdoyouwanttoconfigureiLO? iLOsupportsvariousinterfacesforconfigurationandoperation.Thisguidediscussesthe followinginterfaces: •UseiLORBSUwhenthesystemenvironmentdoesnotuseDHCP,DNS,orWINS.For moreinformation,see“SettingupiLObyusingiLORBSU”(page16). •UsetheiLOwebinterfacewhenyoucanconnecttoiLOonthenetworkbyusingaweb browser.YoucanalsousethismethodtoreconfigureaniLOmanagementprocessor. Formoreinformation,see“SettingupiLObyusingtheiLOwebinterface”(page21). Otherconfigurationoptionsnotdiscussedinthisguidefollow: •HPScriptingToolkit—ThistoolkitisaserverdeploymentproductforITexpertsthatprovides unattendedautomatedinstallationforhigh-volumeserverdeployments.Formore information,seetheHPScriptingToolkitforLinuxUserGuideandtheHPScriptingToolkit forWindowsUserGuide. •Scripting—YoucanusescriptingforadvancedsetupofmultipleiLOmanagement processors.ScriptsareXMLfileswrittenforascriptinglanguagecalledRIBCL.Youcan useRIBCLscriptstoconfigureiLOonthenetworkduringinitialdeploymentorfroman alreadydeployedhost. Thefollowingmethodsareavailable: ◦HPLights-OutConfigurationUtility(HPQLOCFG)—TheHPQLOCFG.EXEutilityreplaces thepreviouslyusedCPQLOCFG.EXEutility.ItisaWindowscommandlineutilitythat sendsXMLconfigurationandcontrolscriptsoverthenetworktoiLO. ◦HPLights-OutOnlineConfigurationUtility(HPONCFG)—Alocalonlinescriptedsetup utilitythatrunsonthehostandpassesRIBCLscriptstothelocaliLO.HPONCFG requirestheHPiLOChannelInterfaceDriver. ◦Customscriptingenvironments—TheiLOscriptingsamplesincludeaPerlsamplethat canbeusedtosendRIBCLscriptstoiLOoverthenetwork. ◦SMASHCLP—Acommand-lineprotocolthatcanbeusedwhenacommandlineis accessiblethroughSSHorthephysicalserialport. Formoreinformationaboutthesemethods,seetheHPiLO3ScriptingandCommand LineGuide. iLOsamplescriptsareavailableatthefollowingwebsite:http://www.hp.com/support/ iLO3. PreparingtosetupiLO15
ConnectingiLOtothenetwork YoucanconnectiLOtothenetworkthroughacorporatenetworkoradedicatedmanagement network. •Inacorporatenetwork,theserverhastwonetworkporttypes(serverNICsandoneiLONIC) connectedtothecorporatenetwork,asshowninFigure1(page16). Figure1Corporatenetworkdiagram •Inadedicatedmanagementnetwork,theiLOportisonaseparatenetwork,asshownin Figure2(page16). Figure2Dedicatedmanagementnetworkdiagram SettingupiLObyusingiLORBSU HPrecommendsusingiLORBSUtosetupiLOforthefirsttimeandtoconfigureiLOnetwork parametersforenvironmentsthatdonotuseDHCP,DNS,orWINS. 16SettingupiLOMain NICiLO Main NIC Hub/SwitchClient PCs Corporate Network Management Client iLO Hub/Switch Main NIC iLO iLO Main NIC Hub/Switch Client PCs Corporate Network Dedicated iLO Management Network Management Client
ConfiguringastaticIPaddressbyusingiLORBSU ThisprocedureisrequiredonlyifyouareusingastaticIPaddress.Whenyouareusingdynamic IPaddressing,yourDHCPserverautomaticallyassignsanIPaddressforiLO. NOTE:Tosimplifyinstallation,HPrecommendsusingDNSorDHCPwithiLO. ToconfigureastaticIPaddress: 1.Optional:Ifyouaccesstheserverremotely,startaniLOremoteconsolesession. Youcanusethe.NETIRCorJavaIRC. 2.Restartorpowerontheserver. 3.PressF8intheHPProLiantPOSTscreen. TheiLORBSUscreenappears. 4.DisableDHCP: a.SelectNetwork→DNS/DHCP,andthenpressEnter. TheNetworkAutoconfigurationwindowopens. b.SelectDHCPEnable,asshowninFigure3(page17). Figure3iLORBSUNetworkAutoconfigurationwindow c.PressthespacebartosetDHCPEnabletoOFF,andthenpressF10tosavethechanges. SettingupiLObyusingiLORBSU17
5.Enterthenetworksettings: a.SelectNetwork→NICandTCP/IP,andthenpressEnter. TheNetworkConfigurationwindowopens. b.EntertheappropriateinformationintheIPAddress,SubnetMask,andGatewayIPAddress fields,asshowninFigure4(page18). Figure4iLORBSUNetworkConfigurationwindow c.PressF10tosavethechanges. 6.SelectFile→ExittoexitiLORBSU. ThechangestakeeffectwhenyouexitiLORBSU. ManagingiLOusersbyusingiLORBSU YoucanuseiLORBSUtoperformthefollowingusermanagementtasks: •“Addinguseraccounts”(page18) •“Editinguseraccounts”(page20) •“Removinguseraccounts”(page20) Addinguseraccounts ToaddlocaliLOuseraccounts: 1.Optional:Ifyouaccesstheserverremotely,startaniLOremoteconsolesession. Youcanusethe.NETIRCorJavaIRC. 2.Restartorpowerontheserver. 3.PressF8intheHPProLiantPOSTscreen. iLORBSUstarts. 4.SelectUser→Add,andthenpressEnter. TheAddUserscreenappears,asshowninFigure5(page19). 18SettingupiLO
Figure5iLORBSUAddUserwindow 5.Enterthefollowinguseraccountdetails: •UsernameappearsintheuserlistontheUserAdministrationpage.Itdoesnothaveto bethesameastheLoginname.Themaximumlengthforausernameis39characters. Theusernamemustuseprintablecharacters.Assigningdescriptiveusernamescanhelp youtoeasilyidentifytheownerofeachloginname. •LoginnameisthenameyoumustusewhenloggingintoiLO.Itappearsintheuserlist ontheUserAdministrationpage,ontheiLOOverviewpage,andiniLOlogs.TheLogin namedoesnothavetobethesameastheUsername.Themaximumlengthforalogin nameis39characters.Theloginnamemustuseprintablecharacters. •PasswordandVerifypasswordsetandconfirmthepasswordthatisusedforloggingin toiLO.Themaximumlengthforapasswordis39characters.Enterthepasswordtwice forverification. 6.SelectfromthefollowingiLOprivileges.Toenableaprivilege,setittoYes.Todisablea privilege,setittoNo. •AdministerUserAccounts—Enablesausertoadd,edit,anddeletelocaliLOuseraccounts. Auserwiththisprivilegecanchangeprivilegesforallusers.Ifyoudonothavethis privilege,youcanviewyourownsettingsandchangeyourownpassword. •RemoteConsoleAccess—EnablesausertoremotelyaccessthehostsystemRemote Console,includingvideo,keyboard,andmousecontrol. •VirtualPowerandReset—Enablesausertopower-cycleorresetthehostsystem.These activitiesinterruptthesystemavailability.Auserwiththisprivilegecandiagnosethe systembyusingtheGenerateNMItoSystembutton. •VirtualMedia—EnablesausertousetheVirtualMediafeatureonthehostsystem. •ConfigureiLOSettings—EnablesausertoconfiguremostiLOsettings,includingsecurity settings,andtoremotelyupdatetheiLOfirmware.Thisprivilegedoesnotenablelocal useraccountadministration. AfteriLOisconfigured,revokingthisprivilegefromalluserspreventsreconfiguration usingthewebinterface,HPQLOCFG,ortheCLI.UserswhohaveaccesstoiLORBSUor SettingupiLObyusingiLORBSU19
HPONCFGcanstillreconfigureiLO.OnlyauserwhohastheAdministerUserAccounts privilegecanenableordisablethisprivilege. 7.PressF10tosavethenewuseraccount. 8.Repeatstep4throughstep7untilyouaredonecreatinguseraccounts. 9.SelectFile→ExittoexitiLORBSU. Editinguseraccounts ToeditalocaliLOuseraccount: 1.Optional:Ifyouaccesstheserverremotely,startaniLOremoteconsolesession. Youcanusethe.NETIRCorJavaIRC. 2.Restartorpowerontheserver. 3.PressF8intheHPProLiantPOSTscreen. TheiLORBSUscreenappears. 4.SelectUser→Edit,andthenpressEnter. TheEditUserscreenappears,asshowninFigure6(page20). Figure6Editinguseraccounts 5.Selecttheusernamethatyouwanttoedit,andthenpressEnter. 6.Updatetheusername,loginname,password,oruserprivileges,andthenpressF10tosave thechanges. 7.SelectFile→ExittoexitiLORBSU. Removinguseraccounts ToremovealocaliLOuseraccount: 1.Optional:Ifyouaccesstheserverremotely,startaniLOremoteconsolesession. Youcanusethe.NETIRCorJavaIRC. 2.Restartorpowerontheserver. 20SettingupiLO