HP Integrated Lights-Out 2 User Guide HP Part Number: 394326-403 Published: June 2012 Edition: 1 © Copyright 2012 Hewlett-Packard Development Company, L.P Notices The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. Microsoft, Windows, Windows Server, Windows Vista, Windows NT, and Windows XP are U.S. registered trademarks of Microsoft Corporation. AMD is a trademark of Advanced Micro Devices, Inc. Intel is a trademark of Intel Corporation in the U.S. and other countries. Java is a registered trademark of Oracle and/or its affiliates. Intended audience This document is for the person who installs, administers, and troubleshoots servers and storage systems. HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels. Contents 1 Overview................................................................................................11 New in this release of iLO 2.....................................................................................................11 iLO 2 Overview......................................................................................................................11 Differences between iLO 2 and iLO......................................................................................12 HP Insight Control server deployment ...................................................................................12 Server management through IPMI version 2.0 compliant applications........................................13 WS-Management compatibility overview..............................................................................13 iLO 2 browser interface overview..............................................................................................14 Supported browsers and client operating systems...................................................................15 Supported server operating system software..........................................................................15 2 Setting up iLO 2.......................................................................................17 Quick setup...........................................................................................................................17 Preparing to set up iLO 2.........................................................................................................17 Connecting to the network.......................................................................................................18 Configuring the IP address.......................................................................................................19 Logging in to iLO 2 for the first time..........................................................................................20 Setting up user accounts..........................................................................................................20 Setting up iLO 2 using iLO 2 RBSU.......................................................................................20 Setting up iLO 2 with the browser-based option......................................................................21 Activating iLO 2 licensed features with a browser........................................................................21 Installing iLO 2 device drivers...................................................................................................21 Microsoft device driver support............................................................................................22 Linux device driver support..................................................................................................22 Novell NetWare device driver support..................................................................................22 3 Configuring iLO 2....................................................................................24 iLO 2 configuration overview....................................................................................................24 Upgrading iLO 2 firmware.......................................................................................................24 Upgrading iLO 2 with a browser..........................................................................................25 Updating the firmware using the maintenance CD..................................................................25 Recovering from a failed iLO 2 firmware update.....................................................................26 Downgrading the iLO 2 firmware.........................................................................................26 Licensing...............................................................................................................................26 User administration.................................................................................................................28 Adding a new user............................................................................................................29 Viewing or modifying existing user settings............................................................................31 Deleting a user..................................................................................................................31 Group administration.........................................................................................................32 Configuring iLO 2 access........................................................................................................33 Services options.................................................................................................................33 Terminal Services Passthrough option...............................................................................35 Terminal Services client requirements...........................................................................35 Enabling the Terminal Services Passthrough option.............................................................36 Terminal Services warning message............................................................................37 Terminal Services Passthrough option display...............................................................37 Remote Console and Terminal Services clients...................................................................37 Terminal Services troubleshooting....................................................................................38 Access options..................................................................................................................38 iLO 2 Remote Console and Remote Serial Console access.......................................................41 Security.................................................................................................................................41 General security guidelines.................................................................................................41 Contents 3 Password guidelines......................................................................................................42 Securing RBSU..............................................................................................................42 iLO 2 Security Override Switch administration...................................................................42 Trusted Platform Module support..........................................................................................43 User accounts and access...................................................................................................43 Privileges.....................................................................................................................44 Login security................................................................................................................44 SSH key administration.......................................................................................................44 SSL certificate administration...............................................................................................45 Two-factor authentication....................................................................................................46 Setting up two-factor authentication for the first time...........................................................47 Setting up a user for two-factor authentication...................................................................48 Two-factor authentication login........................................................................................49 Using two-factor authentication with directory authentication...............................................50 Directory settings...............................................................................................................51 Configuring directory settings.........................................................................................51 Directory tests...............................................................................................................53 Encryption........................................................................................................................53 Encryption settings........................................................................................................54 Connecting to the iLO 2 using AES/3DES encryption.........................................................54 HP SIM single sign-on (SSO)...............................................................................................55 Setting up iLO 2 for HP SIM SSO....................................................................................55 Adding HP SIM trusted servers........................................................................................56 Setting up HP SIM SSO..................................................................................................57 Remote Console Computer Lock...........................................................................................58 Network................................................................................................................................60 Network Settings...............................................................................................................60 iLO 2 subsystem name limitations....................................................................................61 iLO 2 Shared Network Port.............................................................................................61 iLO 2 Shared Management Port features and restrictions................................................62 Enabling the iLO 2 Shared Network Port feature...........................................................62 Re-enabling the dedicated iLO 2 management port.......................................................63 DHCP/DNS Settings..........................................................................................................64 SNMP/Insight Manager settings...............................................................................................65 Enabling SNMP alerts........................................................................................................65 SNMP generated trap definitions.........................................................................................66 Configuring Insight Manager integration...............................................................................67 Static IP bay configuration.......................................................................................................68 Configuring a ProLiant BL p-Class blade enclosure..................................................................68 Configuring static IP bay settings..........................................................................................69 ProLiant BL p-Class standard configuration parameters............................................................69 ProLiant BL p-Class advanced configuration parameters...........................................................69 Enabling iLO 2 IP address assignment..................................................................................70 HP BladeSystem setup.........................................................................................................70 The iLO 2 firmware configuration screen...........................................................................71 Verify Server RAID Configuration screen...........................................................................71 Connect Virtual Media screen.........................................................................................72 Install Software screen...................................................................................................72 iLO 2 diagnostic port configuration parameters......................................................................72 4 Using iLO 2.............................................................................................74 System status and status summary information............................................................................74 System Information Summary...............................................................................................75 Fans............................................................................................................................76 Temperatures................................................................................................................76 4 Contents Power..........................................................................................................................77 Processors....................................................................................................................77 Memory.......................................................................................................................77 NIC.............................................................................................................................77 iLO 2 Log.........................................................................................................................77 IML..................................................................................................................................78 Diagnostics.......................................................................................................................79 Insight Agents....................................................................................................................80 iLO 2 Remote Console.............................................................................................................80 Remote Console overview and licensing options.....................................................................81 Remote Console settings.....................................................................................................81 Remote console hot keys.................................................................................................83 Supported hot keys........................................................................................................84 Hot keys and international keyboards..............................................................................85 Hot keys and Virtual Serial Port.......................................................................................85 IRC Fullscreen....................................................................................................................85 Integrated Remote Console option........................................................................................85 Optimizing mouse performance for Remote Console or Integrated Remote Console................88 High Performance Mouse settings....................................................................................88 Multi-user access to the Integrated Remote Console................................................................89 Using Console Capture.......................................................................................................90 Using HP iLO Video Player..................................................................................................90 iLO Video Player user interface.......................................................................................91 iLO Video Player controls...............................................................................................92 Acquiring the Remote Console.............................................................................................92 Remote Console.................................................................................................................93 Remote Console features and controls..............................................................................94 Recommended client settings..........................................................................................94 Recommended server settings.........................................................................................95 Microsoft Windows Server 2003 settings.....................................................................95 Red Hat Linux and SUSE Linux server settings...............................................................95 Text-based remote console overview.....................................................................................95 Text-based console during POST......................................................................................95 Text-based console after POST........................................................................................96 Using the iLO 2 Text Console.....................................................................................97 Customizing iLO 2 Text Console.................................................................................97 Using a Linux session................................................................................................99 Virtual serial port and remote serial console......................................................................99 Remote Serial Console............................................................................................100 Virtual Serial Port enhancements...............................................................................101 Windows EMS Console...........................................................................................102 Virtual media.......................................................................................................................104 Using iLO 2 Virtual Media devices.....................................................................................104 Virtual Media and Windows 7.....................................................................................105 iLO 2 Virtual Floppy/USBKey........................................................................................105 Virtual Floppy/USB Key operating systems notes.........................................................106 Operating system USB support.................................................................................107 Mounting USB Virtual Floppy/USBKey in NetWare 6.5...............................................107 Mounting USB Virtual Media/USBKey in Linux...........................................................108 Changing diskettes.................................................................................................109 iLO 2 Virtual CD/DVD-ROM.........................................................................................109 Virtual Media CD/DVD-ROM operating system notes..................................................110 Mounting USB Virtual Media CD/DVD-ROM in Linux..................................................110 Creating iLO 2 disk image files.....................................................................................111 Virtual folder...................................................................................................................111 Contents 5 Virtual folder operating system notes..................................................................................112 Power management..............................................................................................................112 Server power settings.......................................................................................................113 Server power data...........................................................................................................115 Processor states...............................................................................................................116 Power efficiency...............................................................................................................117 Graceful shutdown...........................................................................................................118 Brown-Out recovery.........................................................................................................119 ProLiant BL p-Class Advanced management..............................................................................119 Rack View.......................................................................................................................120 Blade configuration and information..............................................................................121 Enclosure information...................................................................................................122 Power enclosure information.........................................................................................122 Network component information...................................................................................123 iLO 2 control of ProLiant BL p-Class server LEDs....................................................................123 Server POST tracking...................................................................................................123 Insufficient power notification........................................................................................124 ProLiant BL p-Class alert forwarding....................................................................................124 ProLiant BladeSystem HP Onboard Administrator......................................................................124 iLO 2 BL c-Class tab.........................................................................................................124 Enclosure bay IP addressing..............................................................................................125 Dynamic power capping for server blades..........................................................................127 iLO 2 Virtual Fan.............................................................................................................128 iLO option.......................................................................................................................128 Web Administration.........................................................................................................128 BL p-Class and BL c-Class features......................................................................................129 5 Directory services...................................................................................130 Overview of directory integration............................................................................................130 Benefits of directory integration..............................................................................................130 Advantages and disadvantages of schema-free directories and HP schema directory.....................131 Schema-free directory integration.......................................................................................131 Setting up Schema-free directory integration.............................................................................132 Active Directory preparation..............................................................................................132 Introduction to certificate services..................................................................................132 Installing certificate services..........................................................................................132 Verifying certificate services..........................................................................................133 Configuring Automatic Certificate Request......................................................................133 Schema-free browser-based setup.......................................................................................133 Schema-free scripted setup................................................................................................133 Schema-free HPLOMIG-based setup....................................................................................134 Schema-free setup options.................................................................................................134 Schema-free nested groups................................................................................................135 Setting up HP schema directory integration..............................................................................136 Features supported by HP schema directory integration.........................................................136 Setting up directory services..............................................................................................136 Schema documentation.....................................................................................................137 Directory services support.................................................................................................137 Schema required software.................................................................................................137 Schema installer..............................................................................................................138 Schema Preview..........................................................................................................138 Setup.........................................................................................................................138 Results.......................................................................................................................139 Management snap-in installer............................................................................................140 Directory services for Active Directory.................................................................................140 6 Contents Active Directory installation prerequisites........................................................................140 Installing Active Directory on Windows Server 2008.......................................................141 Directory services preparation for Active Directory...........................................................141 Snap-in installation and initialization for Active Directory..................................................142 Example: Creating and configuring directory objects for use with iLO 2 in Active Directory....143 Directory services objects.............................................................................................145 Active Directory snap-ins.........................................................................................146 Active Directory role restrictions................................................................................147 Active Directory Lights-Out management.........................................................................148 Directory services for eDirectory.........................................................................................149 eDirectory installation prerequisites................................................................................149 Snap-in installation and initialization for eDirectory..........................................................150 Creating and configuring directory objects for use with LOM devices in eDirectory..............150 Directory Services objects for eDirectory.........................................................................152 Role managed devices............................................................................................152 Members...............................................................................................................153 eDirectory Role Restrictions...........................................................................................154 Time restrictions......................................................................................................154 Enforced client IP address or DNS name access.........................................................154 eDirectory Lights-Out Management................................................................................155 User login using directory services.....................................................................................156 Directory-enabled remote management....................................................................................156 Introduction.....................................................................................................................156 Creating roles to follow organizational structure...................................................................157 Using existing groups..................................................................................................157 Using multiple roles.....................................................................................................157 How directory login restrictions are enforced.......................................................................158 Restricting roles...........................................................................................................158 Role time restrictions...............................................................................................159 Role address restrictions..........................................................................................159 User restrictions...........................................................................................................159 User address restrictions..........................................................................................159 How user time restrictions are enforced......................................................................160 Creating multiple restrictions and roles...........................................................................160 Using bulk import tools.....................................................................................................161 HPLOMIG directory migration utility........................................................................................162 Introduction to HPLOMIG utility..........................................................................................162 Compatibility..................................................................................................................162 HP Lights-Out directory package........................................................................................163 Using HPLOMIG..............................................................................................................163 Finding management processors...................................................................................163 Upgrading firmware on management processors.............................................................165 Selecting a directory access method..............................................................................166 Naming management processors..................................................................................167 Configuring directories when HP Extended schema is selected..........................................168 Configuring directories when schema-free integration is selected........................................169 Setting up management processors for directories............................................................170 Directory services schema......................................................................................................171 HP Management Core LDAP OID classes and attributes........................................................171 Core classes...............................................................................................................172 Core attributes............................................................................................................172 Core class definitions...................................................................................................172 hpqTarget..............................................................................................................172 hpqRole................................................................................................................172 hpqPolicy..............................................................................................................173 Contents 7 Core attribute definitions..............................................................................................173 hpqPolicyDN.........................................................................................................173 hpqRoleMembership...............................................................................................173 hpqTargetMembership............................................................................................173 hpqRoleIPRestrictionDefault......................................................................................173 hpqRoleIPRestrictions...............................................................................................174 hpqRoleTimeRestriction............................................................................................174 Lights-Out Management specific LDAP OID classes and attributes...........................................175 Lights-Out Management classes.....................................................................................175 Lights-Out Management attributes..................................................................................175 Lights-Out Management class definitions........................................................................175 hpqLOMv100........................................................................................................175 Lights-Out Management attribute definitions....................................................................175 hpqLOMRightLogin.................................................................................................175 hpqLOMRightRemoteConsole...................................................................................176 hpqLOMRightVirtualMedia......................................................................................176 hpqLOMRightServerReset.........................................................................................176 hpqLOMRightLocalUserAdmin..................................................................................176 hpqLOMRightConfigureSettings................................................................................177 6 HP Systems Insight Manager integration....................................................178 Integrating iLO 2 with HP SIM................................................................................................178 HP SIM functional overview....................................................................................................178 Establishing SSO with HP SIM................................................................................................178 HP SIM identification and association......................................................................................179 HP SIM status..................................................................................................................179 HP SIM links....................................................................................................................179 HP SIM systems lists..........................................................................................................180 Receiving SNMP alerts in HP SIM...........................................................................................180 HP SIM port matching...........................................................................................................181 Reviewing Advanced Pack license information in HP SIM...........................................................181 7 Troubleshooting iLO 2.............................................................................182 iLO 2 POST LED indicators.....................................................................................................182 Event log entries...................................................................................................................183 Hardware and software link-related issues................................................................................186 JVM support........................................................................................................................186 Login issues.........................................................................................................................187 Login name and password not accepted.............................................................................187 Directory user premature logout.........................................................................................187 iLO 2 Management Port not accessible by name..................................................................187 iLO 2 RBSU unavailable after iLO 2 and server reset.............................................................188 Inability to access the login page.......................................................................................188 Inability to access iLO 2 using Telnet..................................................................................188 Inability to access virtual media or graphical remote console.................................................188 Inability to connect to iLO 2 after changing network settings..................................................188 Inability to connect to the iLO 2 Diagnostic Port...................................................................188 Inability to connect to the iLO 2 processor through the NIC...................................................189 Inability to log in to iLO 2 after installing the iLO 2 certificate................................................189 Firewall issues.................................................................................................................189 Proxy server issues...........................................................................................................190 Two-factor authentication error...........................................................................................190 Troubleshooting alert and trap issues.......................................................................................190 Inability to receive HP SIM alarms (SNMP traps) fromiLO 2....................................................191 iLO 2 Security Override switch...........................................................................................191 Authentication code error message.....................................................................................191 8 Contents Troubleshooting directory issues..............................................................................................191 Domain/name format login issues......................................................................................191 ActiveX controls are enabled and I see a prompt but the domain/name login format does not work..............................................................................................................................192 User contexts do not appear to work..................................................................................192 Directory user does not logout after the directory timeout has expires......................................192 Troubleshooting Remote Console issues...................................................................................192 Remote Console applet has a red X when running Linux client browser....................................192 Inability to navigate the single cursor of the Remote Console to corners of the Remote Console window..........................................................................................................................192 Remote Console no longer opens on the existing browser session...........................................193 Remote console text window not updating properly..............................................................193 Remote Console turns gray or black...................................................................................193 Remote Serial Console troubleshooting...............................................................................193 Troubleshooting Integrated Remote Console issues....................................................................194 Internet Explorer 7 and a flickering remote console screen.....................................................194 Configuring Apache to accept exported capture buffers........................................................194 No console replay while server is powered down.................................................................195 Skipping information during boot and fault buffer playback...................................................195 Out of Memory error starting Integrated Remote Console......................................................195 Session leader does not receive connection request when IRC is in replay mode.......................195 Keyboard LED does not display correctly.............................................................................195 Inactive IRC.....................................................................................................................196 IRC Failed to connect to server error message......................................................................196 IRC toolbar icons do not update........................................................................................196 GNOME interface does not lock........................................................................................197 Repeating keys on the Remote Console...............................................................................197 Remote Console playback does not work when the host server is powered off..........................197 Troubleshooting SSH and Telnet issues.....................................................................................197 Initial PuTTY input slow.....................................................................................................197 PuTTY client unresponsive with Shared Network Port.............................................................197 SSH text support from a Remote Console session..................................................................197 Troubleshooting terminal services issues...................................................................................197 Terminal Services button is not working...............................................................................197 Terminal Services proxy stops responding............................................................................198 Troubleshooting video and monitor issues................................................................................198 General guidelines...........................................................................................................198 Telnet displays incorrectly in DOS......................................................................................198 Video applications not displaying in the Remote Console......................................................198 User interface is not displaying correctly.............................................................................198 Troubleshooting Virtual Media issues.......................................................................................198 Virtual Media applet has a red X and does not display.........................................................199 Virtual Floppy media applet is unresponsive........................................................................199 Troubleshooting iLO Video Player issues...................................................................................199 Video capture file does not play........................................................................................199 Video capture file plays erratically......................................................................................199 Troubleshooting Remote Text Console issues.............................................................................199 Viewing the Linux installer in the text console.......................................................................199 Passing data through an SSH terminal................................................................................199 Troubleshooting miscellaneous issues.......................................................................................199 Cookie sharing between browser instances and iLO 2..........................................................199 Shared instances.........................................................................................................200 Cookie order behavior.................................................................................................200 Displaying the current session cookie.............................................................................201 Preventing cookie-related user issues..............................................................................201 Contents 9 Inability to access ActiveX downloads.................................................................................201 Inability to get SNMP information from HP SIM....................................................................201 Incorrect time or date of the entries in the event log..............................................................201 Inability to upgrade iLO 2 firmware....................................................................................201 Diagnostic steps..........................................................................................................202 iLO 2 network flash recovery.............................................................................................202 Recovering from a bad iLO 2 flash image using network flash recovery...................................202 Recovering from a bad iLO 2 flash image using the HP Smart Update Firmware DVD...............203 The iLO 2 firmware does not respond to SSL requests............................................................204 Testing SSL......................................................................................................................204 Resetting iLO 2................................................................................................................204 Server name still present after ERASE utility is executed.........................................................204 Troubleshooting a remote host...........................................................................................205 8 Technical support...................................................................................206 Support information..............................................................................................................206 HP contact information..........................................................................................................207 Before you contact HP...........................................................................................................207 Acronyms and abbreviations.......................................................................208 Index.......................................................................................................211 10 Contents