HP ProLiant Lights-Out 100 Remote Management
User Guide
for HP ProLiant DL140 G2, DL145 G2, ML110 G3, and ML150 G2 Servers
Part Number 436853-001
January 2007 (First Edition)
Download from Www.Somanuals.com. All Manuals Search And Download.
Contents
User guide overview.................................................................................................................................. 5
Pre-installation procedures.......................................................................................................................... 7
Post-installation procedures......................................................................................................................... 9
Configuration............................................................................................................................. 11
Enabling serial access to the LO100................................................................................................ 12
Selecting an Ethernet management port............................................................................................ 14
Enabling telnet and HTTP services.................................................................................................... 15
Updating the firmware............................................................................................................................. 16
Importing a certificate.............................................................................................................................. 21
Installing a certificate or private key through the CLP.......................................................................... 21
CLP overview.......................................................................................................................................... 22
Base commands............................................................................................................................ 23
Browser main menu options...................................................................................................................... 29
Controlling server power from a browser.......................................................................................... 31
Contents
3
Download from Www.Somanuals.com. All Manuals Search And Download.
Monitoring sensors.................................................................................................................................. 32
Configuring the TFTP Server............................................................................................................ 39
Configuring the virtual floppy from the BIOS setup............................................................................. 40
Platform event trap configuration............................................................................................................... 41
Changing user settings through the CLP............................................................................................ 43
HP SIM support....................................................................................................................................... 46
Contents
4
Download from Www.Somanuals.com. All Manuals Search And Download.
Operational overview
In this section
User guide overview................................................................................................................................. 5
Server management.................................................................................................................................. 5
Server management features...................................................................................................................... 5
User guide overview
This guide covers the standard and optional operational features of the LO100 used in HP ProLiant DL140
G2, DL145 G2, ML150 G2, and ML110 G3 servers.
This guide is an update to the HP ProLiant DL140 G2, DL145 G2, ML150 G2, and ML110 G3 LO100
remote management user guides.
Server management
HP ProLiant Lights-Out 100 delivers basic remote control of vital server resources, supports IPMI 2.0, and
provides system administrators with access to the server at any time, even before an operating system is
installed on the server.
HP ProLiant Lights-Out 100 provides text mode console redirection, DMTF SMASH compliant command
line interface, and browser access to many of the same system management functions. You can access
LO100 through a dedicated Ethernet port or through the server serial port.
Server management features
Using the Lights-Out 100 Remote Management processor, you can:
•
Switch between console redirection and the command line using either the dedicated management
or serial port
•
•
•
•
•
•
•
•
•
Communicate securely using SSL and SSH
Remotely power up and power down the server
Perform warm or cold server reboots
Reboot the server to a virtual floppy
Remotely monitor server-state voltage, fan speed, and system state (S0 or S5)
Access the System Event log
Configure TCP/IP settings for the NIC
Change user passwords
Access the BMC and server controls using a standard browser or new industry standard SMASH CLP
command-line interface
Operational overview
5
Download from Www.Somanuals.com. All Manuals Search And Download.
•
•
Access command-line help
Manage the server with IPMI 2.0-compliant applications
Operational overview
6
Download from Www.Somanuals.com. All Manuals Search And Download.
Installation
In this section
Remote management card kit contents ........................................................................................................ 7
Pre-installation procedures......................................................................................................................... 7
Post-installation procedures........................................................................................................................ 9
Remote management card kit contents
The remote management card kit is required only on ProLiant ML110 G3 and ProLiant ML150 G2 servers.
ProLiant ML110 G3
•
•
•
HP ProLiant ML110 G3 Remote Management Card
Spacer support
HP Lights-Out 100 Remote Management Card Installation Instructions for HP ProLiant ML110
Generation 3 Servers
ProLiant ML150 G2
•
•
•
HP ProLiant ML150 G2 Remote Management Card
Hexnut screw
HP Lights-Out 100 Remote Management Card Installation Instructions for HP ProLiant ML150
Generation 2 Servers
Pre-installation procedures
The installation procedures in this document are intended for individuals who are qualified in the servicing
of computer equipment and trained in recognizing hazards in products with hazardous energy levels.
WARNING: Failure to properly turn off the server before you open the server may cause
serious damage to the equipment as well as bodily harm.
CAUTION: Follow the ESD precautions listed in your server guide when handling the remote
management card.
IMPORTANT: Observe the pre- and post-configuration procedures described in later sections
when installing the remote management card.
NOTE: The procedures described in this section assume that the server is positioned on a flat,
stable surface.
1.
Back up the server data.
Installation
7
Download from Www.Somanuals.com. All Manuals Search And Download.
2.
3.
4.
Shut down the operating system as outlined in the operation system instructions.
Power off the server and all the peripherals connected to it.
Unplug all cables from the power outlets to avoid exposure to high energy levels that can cause
burns when parts are short-circuited by metal objects such as tools or jewelry.
5.
6.
7.
Label each cable, if not already labeled, to expedite reassembly.
Disconnect telecommunication cables to avoid exposure to shock hazard from ringing voltages.
Open the server according to the instructions described in your server manual.
Installing the remote management card on ProLiant
ML110 G3 servers
1.
2.
3.
Remove the access panel.
Lay the server on its unexposed side to access the system board.
Locate the remote management card connectors on the system board.
4.
Install the remote management card in the connectors on the system board.
5.
Installation
8
Download from Www.Somanuals.com. All Manuals Search And Download.
Installing the remote management card on ProLiant
ML150 G2 servers
1.
2.
3.
4.
Remove the access panel.
Lay the server on its unexposed side to access the system board.
Locate the remote management card connectors on the system board.
Install the remote management card in the connectors on the system board.
5.
6.
Verify BIOS version and switch settings for the card.
To ensure proper operation of the ProLiant ML150 G2 Lights-Out 100 remote management processor, the
server BIOS must be version 0.28 or later. You can download the latest BIOS for your server on the HP
The remote management card switches must be set to factory default settings.
Switch
SW1
SW2
SW3
SW4
Setting
Off
On
On
Off
Post-installation procedures
1.
2.
3.
4.
5.
Be sure you have not left any loose tools or parts inside the server.
Reinstall any expansion boards, peripherals, board covers, and system cables previously removed.
Reinstall the system covers.
Connect all external cables and the AC power cord to the system.
Installation
9
Download from Www.Somanuals.com. All Manuals Search And Download.
6.
Press the power button on the front panel to turn on the server.
Installation 10
Download from Www.Somanuals.com. All Manuals Search And Download.
Configuration
In this section
Configuring network access..................................................................................................................... 11
Establishing user accounts....................................................................................................................... 11
Using the serial port ............................................................................................................................... 12
Using TCP/IP over Ethernet management port............................................................................................ 13
Updating the firmware............................................................................................................................ 16
Configuring network access
The server is connected to the network by a standard Ethernet cable. Using this connection, you can
access the remote management CLP, verify POST remotely, and access the BIOS Setup Utility remotely.
To configure network access:
1.
2.
Connect a standard Ethernet cable from the LO100 to a network jack.
Obtain the DHCP IP address by using one of the following methods:
o
o
Look at the DHCP clients table.
Press the F10 key during POST, and read the IP address from the BIOS Setup Utility under
Advanced/IPMI/LAN Setting. See "Obtaining a DHCP IP address from the BIOS Setup Utility (on
3.
Using the DHCP IP address, use telnet to log into the remote management CLP, or use a web
browser to access the HTML interface.
To set up a static IP address, see "Setting up a static IP address from the BIOS Setup Utility (on page 15)"
for more information.
Establishing user accounts
LO100 supports three types of user accounts, with varying levels of permissions to view and control
features. For more information about user accounts, see the "User administration (on page 42)" section.
Two accounts are available by default, one of type administrator and one of type operator. While one
user account always has the administrator privilege, the other user account is customizable.
The administrator account enables the user to execute the full set of CLP commands and change
management processor configuration. The default name for the administrator account is admin, and the
default password is admin.
The operator account enables the user to execute common commands and functions, but restricts access to
specific functions, such as adding and changing user account information and changing the configuration
of the management processor. Log in with the operator account to perform common functions. The default
name for the operator account is Operator, and the default password is Operator.
section.
Configuration 11
Download from Www.Somanuals.com. All Manuals Search And Download.
Using the serial port
The server serial port provides basic serial port functionality and serves as an interface to LO100. You
can configure the system serial port for exclusive use with LO100.
CAUTION: After enabling the serial port for use with LO100, legacy serial devices might not
function correctly if attached to the serial port.
You must configure the LO100 serial port hardware parameters to work with your respective serial port
communications software. LO100 serial port configuration is controlled through the BIOS Setup Utility.
Enabling serial access to the LO100
1.
2.
Power on the server by pressing the Power On/Off button on the front panel.
When POST displays the message, ROM-Based Setup, press the F10 key. If the server has an
administrator password configured, the system prompts you to enter the password. If the server does
not have a password configured, the main screen of the BIOS Setup Utility appears.
3.
On HP ProLiant ML150 G2 servers:
a. Press the right arrow (→) key to navigate to the Advanced menu.
b. Press the down arrow (↓) key to scroll to IO Device Configuration. Press the Enter key.
c. Select Serial Port A, and press the Enter key to toggle between Enabled and Disabled. Select
Enabled.
d. Press the Esc key to return to the Advanced menu.
e. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key.
f. Press the down arrow (↓) key to scroll to the LAN Settings submenu. Press the Enter key.
g. Confirm the following settings:
Ping Response: [Enabled]
Telenet Access: [Enabled]
HTTP Access: [Enabled}
4.
On HP ProLiant ML110 G3 servers:
a. Press the right arrow (→) key to navigate to the Advanced menu.
b. Press the down arrow (↓) key to navigate to the SuperIO Configuration menu. Press the Enter key.
c. Select Serial Port1 Address, and press the Enter key to toggle between Disabled, 3F8/IRQ4,
3E8/IRQ4, and 2E8/IRQ3. Select 3F8/IRQ4.
d. Review the serial port settings, and ensure that the settings match the serial port communications
software settings used to connect to LO100.
5.
On HP ProLiant DL140 G2 and ProLiant DL145 G2 servers:
a. Press the right arrow (→) key to navigate to the Advanced menu.
b. Press the down arrow (↓) key to scroll to I/O Device Configuration. Press the Enter key.
c. Press the down arrow key (↓) to scroll to the Serial Port menu. Press the Enter key to toggle
between SIO COM Port and BMC COM Port. Select BMC COM Port.
d. Press the Esc key to return to the Advanced menu.
e. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key.
Configuration 12
Download from Www.Somanuals.com. All Manuals Search And Download.
f. Press the down arrow (↓) key to scroll to the LAN Interface submenu. Press the Enter key.
g. Confirm the following settings:
BMC Telnet Service: [Enabled]
BMC Ping Response: [Enabled]
BMC HTTP Service: [Enabled]
6.
Press the F10 key to save and exit.
LO100 serial port configuration
1.
2.
Power on the server by pressing the Power On/Off button on the front panel.
When POST displays the message, ROM-Based Setup, press the F10 key. If the server has an
administrator password configured, the system prompts you to enter the password. If the server does
not have a password configured, the main screen of the BIOS Setup Utility appears.
3.
On ProLiant DL140 G2 and ProLiant DL145 G2 servers:
a. Press the right arrow (→) key to navigate to the Advanced menu.
b. Press the down arrow (↓) key to scroll to the Console Redirection menu. Press Enter.
c. Press the Enter key to toggle between Enabled and Disabled. Select Enabled for the console
redirection option.
d. Review the serial port settings, and ensure that the settings match the serial port communications
software settings used to connect to LO100.
4.
On ProLiant ML150 G2 servers:
a. Press the right arrow (→) key to navigate to the Advanced menu.
b. Press the down arrow (↓) key to scroll to the Console Redirection menu. Press Enter.
c. Press the Enter key to toggle between Disabled, On-board Com A, and On-board BMC/VSI.
Select On-Board BMC/VSI for the console redirection option.
d. Review the serial port settings, and ensure that the settings match the serial port communications
software settings used to connect to LO100.
5.
On ProLiant ML110 G3 servers:
a. Press the right arrow (→) key to navigate to the Advanced menu.
b. Press the down arrow (↓) key to scroll to the BIOS Serial Console Configuration menu. Press the
Enter key. Select Bios Serial Console, and press the Enter key to toggle between Enabled and
Disabled. Select Enabled.
c. Press the down arrow (↓) key to scroll to and select Serial Over LAN (SOL). Press the Enter key to
toggle between Enabled and Disabled. Select Enabled.
6.
Press the Esc key to return to the previous screen, or press the F10 key to save the changes and exit
Setup.
Using TCP/IP over Ethernet management port
The LO100 LAN port can be accessed from two different Ethernet ports: the dedicated 10/100 LO100
management port or through a side-band connection with the second LOM (NIC2).
Configuration 13
Download from Www.Somanuals.com. All Manuals Search And Download.
Selecting an Ethernet management port
The Ethernet management port is only available on ProLiant ML150 G2 and ML110 G3 servers.
To select either the LO100 or side-band connection:
1.
2.
Power on the server by pressing the Power On/Off button on the front panel.
When POST displays the message, ROM-Based Setup, press the F10 key. If the server has an
administrator password configured, the system prompts you to enter the password. If the server does
not have a password configured, the main screen of the BIOS Setup Utility appears.
3.
4.
Press the right arrow (→) key to navigate to the Advanced menu.
Press the down arrow (↓) key to scroll to NIC Option. Press the Enter key to select between the
dedicated or side-band connection.
5.
Press the Esc key to return to the previous screen, or press the F10 key to save the changes and exit
Setup.
The dedicated TCP/IP over Ethernet management port, whether dedicated or shared, is a standard
Ethernet 10/100Mb interface that is connected to the network using a standard Ethernet cable. Before
using the dedicated management port, you must determine the DHCP IP address, set a static IP address,
or use the default static IP address.
Obtaining a DHCP IP address from the BIOS Setup Utility
By default, LO100 has DHCP enabled and automatically negotiates an IP address. To view the DHCP IP
address, run the BIOS Setup Utility or retrieve the DHCP IP address using CLP through the serial port
connection.
To view the DHCP IP address using the BIOS Setup Utility:
1.
2.
Power on the server by pressing the Power On/Off button on the front panel.
When POST displays the message, ROM-Based Setup, press the F10 key. If the server has an
administrator password configured, the system prompts you to enter the password. If the server does
not have a password configured, the main screen of the BIOS Setup Utility appears.
3.
4.
5.
Press the right arrow (→) key to navigate to the Advanced menu.
Press the down arrow (↓) key to scroll to IPMI. Press the Enter key.
On HP ProLiant ML110 G3 and ML150 G2 servers:
a. Press the down arrow (↓) key to scroll to the LAN Configuration (ML110 G3) submenu or LAN
Interface (ML150 G2). Press the Enter key.
b. Note the DHCP assigned IP address for future reference.
6.
7.
On HP ProLiant DL140 G2 and ProLiant DL145 G2 servers:
a. Press the down arrow (↓) key to scroll to the LAN Interface submenu. Press the Enter key.
b. Note the DHCP assigned IP address for future reference.
Press the Esc key to return to the previous screen, or press the F10 key to save the changes and exit
Setup.
To configure or change your network settings, see "Network settings (on page 36)" for more information.
Configuration 14
Download from Www.Somanuals.com. All Manuals Search And Download.
Setting up a static IP address from the BIOS Setup Utility
By default, LO100 has DHCP enabled and automatically negotiates an IP address.
To disable DHCP and enable a static IP address:
1.
2.
3.
4.
Press the F10 key during POST to enter the BIOS Setup Utility.
Press the right arrow (→) key to navigate to the Advanced menu.
Press the down arrow (↓) key to scroll to IPMI. Press the Enter key.
On the ProLiant ML150 G2 server:
a. Press the down arrow (↓) key to scroll to the LAN Interface submenu. Press the Enter key.
b. Select IP Address Source, and press the Enter key to toggle between Enabled and Disabled. Set
DHCP IP Source to Disabled.
c. Press the down arrow (↓) key to scroll to the IP Address setting.
d. Enter a valid IP address. Press the Tab or period (.) key to move between address fields.
e. Press the down arrow (↓) key to scroll down to the Subnet Mask submenu. Press the Enter key.
f. Enter a valid subnet mask. Press the Tab or period (.) key to move between address fields.
On the ProLiant ML110 G3 server:
5.
a. Press the down arrow (↓) key to scroll to the Set LAN Configuration submenu. Press the Enter key.
b. Select DHCP IP Source, and press the Enter key to toggle between Enabled and Disabled. Set
DHCP IP Source to Disabled.
c. Press the down arrow (↓) key to scroll to the IP Address submenu. Press the Enter key.
d. Enter a valid IP address, subnet mask, and gateway address. Press the Tab or period (.) key to
move between address fields.
e. Press the Esc key to return to the Set LAN Configuration submenu.
f. Press the down arrow (↓) key to scroll to the Subnet Mask submenu. Press the Enter key.
g. Enter a valid subnet mask. Press the Tab or period (.) key to move between address fields.
On the ProLiant DL140 G2 and ProLiant DL145 G2 servers:
6.
7.
a. Press the down arrow (↓) key to scroll to the LAN Settings submenu. Press the Enter key.
b. Set the IP Address Assignment to Static. This setting enables you to modify a static IP address
through the BIOS setup menu.
c. Press the down arrow (↓) key to scroll down and enter a valid IP address, subnet mask, and
gateway address (press the Tab or period (.) key to move between address fields).
Press the F10 key to save and exit.
Enabling telnet and HTTP services
On the ProLiant ML110 G3 server, HTTP and telnet are automatically enabled.
To enable HTTP and telnet on ProLiant DL140 G2 and ProLiant DL145 G2 servers:
1.
2.
3.
Press the F10 key during POST to enter the BIOS Setup Utility.
Press the right arrow (→) key to navigate to the Advanced menu.
Press the down arrow (↓) key to scroll to IPMI. Press the Enter key.
Configuration 15
Download from Www.Somanuals.com. All Manuals Search And Download.
4.
5.
Press the down arrow (↓) key to scroll to the LAN Interface submenu. Press the Enter key.
Press the down arrow (↓) key to scroll to the following settings, and set the parameters as needed
(the following example shows configuring for LO100 access using telnet and a web page):
o
o
o
BMC Telnet Service: [Enabled]
BMC Ping Response: [Enabled]
BMC HTTP Service: [Enabled]
To enable HTTP and telnet on ProLiant ML150 G2 servers:
1.
2.
3.
4.
Press the F10 key during POST to enter the BIOS Setup Utility.
Press the right arrow (→) key to navigate to the Advanced menu.
Press the down arrow (↓) key to scroll to IPMI. Press the Enter key.
Press the down arrow (↓) key to scroll to the following settings, and set the parameters as needed
(the following example shows configuring for LO100 access using telnet and a web page):
o
o
o
Ping Response: [Enabled]
Telnet Access: [Enabled]
HTTP Access: [Enabled]
Updating the firmware
To update LO100 firmware, use the ROMPaq utility. ROMPaq downloads are available on the HP
website (http://www.hp.com/support). For more information about using the ROMPaq utility, see the HP
NOTE: LO100 does not support ROMPaq flashing or flashing LO100 from a virtual floppy.
NOTE: Firmware upgrade packages for ProLiant ML150 G2 servers contain firmware images
for LO100 standard and advanced functionality. When updating the firmware, only the active
LO100 device is flashed. If an HP Lights-Out 100c Remote Management Card is installed in
the system when flashing the firmware, only the HP Lights-Out 100c Remote Management Card
firmware is updated. If an HP Lights-Out 100c Remote Management Card is not installed, only
the standard (basic) LO100 functionality is updated.
After the ROMPaq utility flashes the selected device, cycle power manually to reboot the operating
system.
Updating the firmware remotely
If you want to update the LO100 firmware remotely, you can use the loadcommand. The firmware file
must be an uncompressed firmware image file which you can create using the DOS ROMPAQ utility
found on the Lights-Out 100 Firmware Upgrade Diskette Utility, available for download from the HP
To create an uncompressed image file, enter the following command at the DOS prompt:
ROMPAQ /D <infile> <outfile>
where <infile> is the ROMPAQ firmware image file and <outfile> is the file name for the
uncompressed binary image file. For example:
Configuration 16
Download from Www.Somanuals.com. All Manuals Search And Download.
ROMPAQ /D cpqq0801.D14 ldrImage.bin
ROMPAQ Firmware Upgrade Utility, Version 5.02 (R)
Copyright (c) Hewlett-Packard Corporation, 1994-2006
Input file: CPQQ0801.D14
Output file: LDRIMAGE.BIN
The loadcommand is used to take a binary image from a specific source location (specified as a URL)
and place it at the specified target address. The loadcommand can download and flash a ldr firmware
image file using TFTP from the specified location.
To update the firmware, log in to LO100 as administrator through the CLP interface and issue the load
command to upload and install the firmware from the map1/firmware directory.
1.
Start a CLP session. To access the CLP in Windows®:
a. Click Start>All Programs>Accessories>Command Prompt.
b. At the command prompt, enter telnet <IP address>where IP addressis the IP Address
of the server to which you want to connect.
2.
3.
At the CLP prompt, enter: cd/map1/firmware
At the CLP prompt, enter load -source <URI> -oemhpfiletype csr
where:
o <URI>is the //tftpserver IP/path/filenameto be downloaded.
o
o
tftp server IP is the URL or IP address of the TFTP server containing the firmware.
filename is the file name of the image file (LdrImage.bin in this example).
For example, enter: load -source //10.141.38.157/LdrImage.bin - oemhpfiletype
csr
NOTE: After using the loadcommand LO100 will reset ending your CLP interface session.
You must reconnect to the CLP interface.
NOTE: When you use the CLP loadcommand with TFTPD32, HP recommends using a 30-
second timeout and 6 retries.
TFTP settings
When using a TFTP server, the settings vary by on different operating systems. Use the following settings:
Flashing the firmware image file using TFTP on Microsoft Windows®
1.
2.
3.
4.
Copy the BMC firmware into a directory on the server.
Run TFTP by launching the executable file tftpd32.exe.
Navigate to TFTP Configuration>Settings, and set Timeout to 30 seconds and Max Retransmit to 6.
Enter File Name and TFTP Server IP Address. File Name is the path where the BMC firmware is
residing. TFTP Server IP Address is the IP address of the TFTP server. For example, 10.141.38.157.
Flashing the firmware image file using TFTP on Linux
1.
Navigate to Applications>Systems Settings>Server Settings>Services, and ensure that tftpand
xinetdare running.
Configuration 17
Download from Www.Somanuals.com. All Manuals Search And Download.
2.
3.
Open the file /etc/xinetd.d/tftpand modify the parameter server_argsto include -T
15000000. For example, server_args = -c -s /tftpboot -T 15000000
The firewall that is built into some Linux systems might not allow the TFTP server to send and receive
information. You might first have to disable the firewall to allow these connections. If you are
experiencing firewall issues, change the firewall settings to allow connections on port 69 (the default
port for TFTP servers). See your firewall documentation for additional information.
If a firewall is enabled, disable it or modify the settings to allow the firewall to connect to the TFTP
port. To change the firewall settings, navigate to Applications>System Settings>Security Level, and
enter 69:udp in other ports.
Configuration 18
Download from Www.Somanuals.com. All Manuals Search And Download.
Using LO100
In this section
SSL overview ......................................................................................................................................... 19
SSH overview ........................................................................................................................................ 20
Importing a certificate............................................................................................................................. 21
CLP overview......................................................................................................................................... 22
IPMI 2.0 support .................................................................................................................................... 27
Logging in to LO100 .............................................................................................................................. 28
Browser main menu options..................................................................................................................... 29
Hardware Inventory page ....................................................................................................................... 30
Controlling server power remotely............................................................................................................ 30
Monitoring sensors................................................................................................................................. 32
Using the system event log ...................................................................................................................... 34
Network settings .................................................................................................................................... 36
Using the virtual floppy feature ................................................................................................................ 38
Platform event trap configuration.............................................................................................................. 41
User administration................................................................................................................................. 42
Accessing the remote console through telnet.............................................................................................. 43
HP SIM support...................................................................................................................................... 46
SSL overview
SSL is an advanced feature that is available on ProLiant ML150 G2 and ProLiant ML110 G3 servers by
installing the Lights-Out 100 Remote Management Card, or on ProLiant DL140 G2 servers and ProLiant
DL145 G2 servers by purchasing the Lights-Out 100i Select Pack or the Lights-Out 100i Advanced Pack.
SSL is a protocol used to transmit private documents through the Internet. SSL uses a private key or
certificate to encrypt data transferred over the SSL connection. The Lights-Out 100 remote management
processor provides strong security for remote management in distributed IT environments by using 128-bit
SSL encryption of HTTP data transmitted across the network. SSL encryption ensures that the HTTP
information is secure as it travels across the network.
LO100 comes preinstalled with a certificate. To install a user-specific certificate, see the one-time
If you cannot access the login page, you must verify the SSL encryption level of your browser is set to 128
bits. The SSL encryption level within the management processor is set to 128 bits and cannot be changed.
The browser and management processor encryption levels must be the same.
To use the preinstalled certificate, enter https://ipaddressin the address line of the browser, which
Using LO100 19
Download from Www.Somanuals.com. All Manuals Search And Download.
SSH overview
SSH is an advanced feature that is available on ProLiant ML150 G2 and ProLiant ML110 G3 servers by
installing the Lights-Out 100 Remote Management Card, or on ProLiant DL140 G2 servers and ProLiant
DL145 G2 servers by purchasing the Lights-Out 100i Select Pack or the Lights-Out 100i Advanced Pack.
SSH is a telnet-like program for logging in to and executing commands on a remote machine, which
includes security with authentication, encryption, and data-integrity features. The Lights-Out 100 remote
management processor can support simultaneous access from two SSH clients. After SSH is connected
and authenticated, the command line interface is available.
LO100 supports the following protocols:
•
•
SSH protocol version 2
PuTTY 0.54, which is a free version of telnet and SSH protocols available for download on the
Internet. When using PuTTY, versions earlier than 0.54 might display two line feeds instead on a
single line feed, when the Enter key is pressed. To avoid this issue, and for best results, use version
0.54 or later.
•
OpenSSH, which is a free version of the SSH protocol available for download on the Internet.
NOTE: Logging in to an SSH session could take up to 90 seconds. Depending on the client
used, you might not see on-screen activity during this time.
LO100 comes preinstalled with a certificate. To install a user-specific certificate, see the one-time
Using SSH
When using a Secure Shell utility to connect to a server for the first time, the utility will prompt you to
accept the server's public key, sometimes referred to as a host key. Accepting this key authorizes the
utility to store a copy of the public key in its own database. The utility will automatically recognize the
server when future connections are attempted, by comparing the public key to the one stored in its
database.
To access the remote management processor using SSH:
1.
2.
Open an SSH window.
When prompted, enter the IP address or DNS name, login name, and password.
Using OpenSSH
To start an OpenSSH client in Linux, use:
ssh -l loginname ipaddress/dns name
Using PuTTY
•
•
To start a PuTTY session, double-click the PuTTY icon in the directory in which PuTTY is installed.
To start a PuTTY session from the command line:
o
o
o
To start a connection to a server called host:
putty.exe [-ssh | -telnet | -rlogin | -raw] [user@]host
For telnet sessions, the following alternative syntax is supported:
putty.exe telnet://host[:port]/
To start an existing saved session called sessionname:
Using LO100 20
Download from Www.Somanuals.com. All Manuals Search And Download.
o
putty.exe -load "session name"
Importing a certificate
If you do not want to use the preinstalled public key (certificate), create and install your own private key
(certificate). Importing a key or certificate is a one-time procedure that supports both SSH and SSL. The
key must be generated using external third-party software, placed on a TFTP server, and uploaded to the
LO100. For Microsoft® Windows®, if you do not have a TFTP software package, use TFTPD32.EXE,
which is available on the Internet. Linux generally has a TFTP server installed with the operating system. If
it is not, see your Linux documentation for more information.
NOTE: When you use the CLP loadcommand with TFTPD32, HP recommends using a 30-
second timeout and 6 retries.
NOTE: When using the CLP loadcommand in Linux set the timeout to 15000000. The
firewall built into some Linux systems might not allow the TFTP server to send and receive
information. You might have to disable the firewall to allow these connections. If you are
experiencing firewall issues, change the firewall settings to allow connections on port 69 (the
default port for TFTP servers). See your firewall documentation for additional information.
Creating a certificate
LO100 requires a 1,024-bit DSA key stored in PEM (Base64-encoded) format to be located on a TFTP
server. For example, the following process uses Win32 OpenSSL, downloaded from the Shining Light
issued in a DOS window to generate the certificate. To generate a certificate using Win32 OpenSSL:
1.
2.
3.
Download Win32 OpenSSL.
Install and set up OpenSSL.
Using OpenSSL, generate a DSA parameters file:
openssl dsaparam -out server_dsaparam.pem 1024
4.
5.
Generate the DSA private key file, called server_privkey.pem:
openssl gendsa -out server_privkey.pem server_dsaparam.pem
Generate the DSA certificate (public key) file, called server cacert.pem:
openssl req -new -x509 -key server_privkey.pem -out server_cacert.pem -
days 1095
6.
7.
When prompted for a distinguished name, enter an appropriate domain name for the servers
receiving the certificate.
After creating the certificate, copy it to a TFTP server that is accessible on the same network as
LO100.
Installing a certificate or private key through the CLP
To install the certificate, log in to LO100 as administrator through the CLP interface and issue the load
command to upload and install the certificate. For example:
load -source <URI> -oemhpfiletype cer
where:
Using LO100 21
Download from Www.Somanuals.com. All Manuals Search And Download.
o <URI>is the //tftpserver IP/path/filenameto be downloaded.
tftpserver is the URL or IP address of the TFTP server containing the certificate.
o Pathis the path of the file relative to the TFTP server root.
filename is the name of the certificate (server_privkey.pemin this example).
o
o
You can also find these commands in /map1/firmware directory.
To install a private key, log in to LO100 as administrator through the CLP interface, and issue the load
command to upload and install the certificate. For example:
load -source <URI> -oemhpfiletype key
where:
o <URI>is the //tftpserver IP/path/filenameto be downloaded.
o
tftpserver is the URL or IP address of the TFTP server containing the private key file.
o Pathis the path of the file relative to the TFTP server root.
filename is the file name of the private key file (server_privkey.pemin this example.)
o
You can also find these commands in /map1/firmware directory.
NOTE: After using the loadcommand LO100 will reset ending your CLP interface session.
You must reconnect to the CLP interface.
CLP overview
HP has worked with key industry partners within Distributed Management Task Force, Inc. to define an
industry-standard set of commands. The SMASH suite will standardize manageability interfaces for
servers. The Lights-Out 100 remote management processor implements the command set defined in the
Server Management Command Line Protocol Specification, 1.00 Draft. The CLP replaces the simple CLI
that was released previously and is no longer supported.
The management processor functionality accessible from the SMASH CLP is a low-bandwidth interface
and provides similar functionality to the web interface. The CLP is designed for users who prefer a
nongraphical interface. The CLP is accessible through the following methods:
•
•
•
Telnet
SSH connection
Physical serial port
Using CLP
The general syntax of CLP command is:
<verb> <target> <option> <property>
•
Verbs—The following verbs are supported:
o cd
o help
o load
o reset
o set
Using LO100 22
Download from Www.Somanuals.com. All Manuals Search And Download.
o show
o start
o stop
o exit
o version
•
•
Target—The default target is the /. The target can be changed by the cdcommand or by specifying
a target on the command line.
Options—The following options are valid:
o -help/-h
o -all/-a
•
•
Properties are the attributes of the target that can be modified.
Output—The output syntax is text.
The valid Boolean values for any command are trueand false.
General notes
If the commands on the CLP command span more than one line, you cannot navigate between different
lines.
Operating system-specific notes
•
The Microsoft® Windows® 2000 telnet client does not support the Functions keys F1 through F12,
Insert, Home, and End keys. These keys will not work in a Lights-Out 100 command line session.
•
The Backspace key in the Lights-Out 100 CLP implementation is mapped to the value 0x8. Some
client operating systems, Novell Linux Desktop and Red Hat Enterprise Linux 4 Desktop, map the
Backspace key to the value 0x7f,which is used for the Delete key in the Windows® telnet client.
The Backspace key will not work from a client from which it has value of 0x7f. For the Linux clients,
using the Home or the End key enables the Lights-Out 100 CLP service to remap the Backspace key
to use the value 0x7f, making the key functional.
In the Windows® PuTTY client, the Backspace key can be mapped to a value of 0x8by changing the
setting for Terminal Keyboard to Control-H.
Base commands
•
The helpcommand displays context-sensitive help.
Entering helpdisplays all the supported commands. Entering <command help/?>displays the
help message specific to that command.
o
Help for verbs
Calling help for a verb returns the general syntax and usage associated with issuing that verb.
Calling help for a verb that is not present in the current directory returns an Unsupported
Commandmessage. The following are all valid ways to call help for a verb.
/./-> help show
Usage: show [<target>][<options>][<properties>]
/./-> show -h
Usage: show [<target>][<options>][<properties>]
Using LO100 23
Download from Www.Somanuals.com. All Manuals Search And Download.
/./-> show -help
Usage: show [<target>][<options>][<properties>]
/./->
o
Help for targets
Calling help for a target returns any information about the target and what it contains. You can
call help for any target that is not contained in the current directory (help map1can be called
from system1).
/./-> system1 -h
Invalid command
/./-> system1 -help
Invalid command
/./-> help system1
Host System Directory
/./-> help map1
Management Service Processor Directory
/./-> cd system1
/./system1/-> help map1
Management Service Processor Directory
o
Help for properties
Calling help for a property or any other option for which there is no help information returns an
Unsupported Commandor Invalid commandmessage. For example:
/./system1/-> show
/./system1
Targets
log1
Properties
name=Hewlett-Packard
enabledstate=enabled
Verbs
cd
version
exit
show
reset
start
Using LO100 24
Download from Www.Somanuals.com. All Manuals Search And Download.
stop
help
/./system1/-> help name
Unsupported Command
/./system1/-> help enabledstate
Unsupported Command
/./system1/-> help properties
Unsupported Command
/./system1/-> name -h
Invalid command
/./system1/->
•
•
The exitcommand terminates the CLP session.
The cdcommand sets the current default target. The context works like a directory path. The root
context for the server is /.which is the starting point for a CLP system. By changing the context, you
can shorten commands.
For example:
o cdchanges the directory.
o cd ..moves up the tree one directory.
o cd foldermoves to folder assuming folder is in the current directory.
If you want to move to a directory not in the current directory, you must enter the full path. Root in
the command line is /./
If you are in system1 and want to move to map1, issue the command cd /./map1. Neither cd
/map1nor cd map1works. The filename is not case-sensitive, whereas the command is case-
sensitive (cd MaP1works while CD map1does not).
•
The showcommand displays values of a property or contents of a collection target. For example:
/./> show
/./
Targets
system1/
map1/
Properties
Verbs
cd
version
exit
show
help
Using LO100 25
Download from Www.Somanuals.com. All Manuals Search And Download.
The first line of information returned by the showcommand is the current context. In the example, /
is the current context. Following the context is a list of subtargets (Targets) and properties (Properties)
applicable to the current context. The verbs (Verbs) section shows what commands are available in
this context.
The showcommand can also be specified with an explicit or implicit context and a specific
property. An explicit context is /map1/firmwareand is not dependent on the current context. An
implicit context assumes that the context specified is a child of the current context. If the current
context is /map1, then a show firmwarecommand displays the /map1/firmware data. If a
property is not specified, then all properties are shown.
•
The loadcommand moves a binary image from a URL to the map. The loadcommand is used to
take a binary image from a specific source location (specified as a URL) and place it at the specified
target address. In a remote management processor implementation, the firmware downloads a full
image file using TFTP from the specified location and programs flash with the image.
In a remote management processor implementation, /map1/firmwareis a valid target.
The loadcommand supports usage only with the following options.
o -source <location>—This option must be specified.
o (h)elp—this option appears on the command line, the command ignores all options and
properties except -output(for terse or verbose output). These options are only valid for this
command when the -helpoption is used.
o source <value>—This option specifies the target from which it will transfer the binary image.
The value specified must be a valid URL. The expected format is
//tftpserverip/path/filename. This option is required in the command line every time
the load command is executed unless -helpis used. The file must be an uncompressed firmware
image file that you create using the DOS ROMPAQ utility found on the Lights-Out 100 Firmware
Upgrade Diskette Utility available for download from the HP website
To create the uncompressed image file, enter the following command from DOS:
ROMPAQ /D <infile> <outfile>
where <infile> is the ROMPAQ firmware image file and <outfile>is the filename for the
uncompressed binary image file.
The loadcommand returns any status data on the first lines. After the status data appears, one of
the following lines of text displays on the next line:
<URL> transferred to <target address> (if the file is transferred)
<URL> not transferred(if the file is not transferred)
Example:
load -source //192.168.2.1/pub/firmwareimage.bin -oemhpfiletype csr
//192.168.2.1/pub/firmwareimage.bin transferred to
/map1/firmware/fullimage
•
•
The resetcommand causes a target to cycle from enabled to disabled and back to enabled.
The setcommand sets a property or set of properties to a specific value. set property = new
valueis the standard syntax for the set command.
The set command is used to change any changeable property. If the current directory does not
contain the property you want to change, the target of the property must be specified before entering
the property you want to change.
Using LO100 26
Download from Www.Somanuals.com. All Manuals Search And Download.
•
•
•
The startcommand causes a target to change state to a higher run level.
The stopcommand causes a target to change state to a lower run level.
The versioncommand queries the version of the CLP implementation or other CLP elements. For
example:
/./map1/-> version
Version 1.00
/./map1/-> cd firmware
/./map1/firmware/-> version
Version 1.00
/./map1/firmware/-> show
/./map1/firmware
Targets
Properties
fwversion=0.59
Verbs
cd
version
exit
show
reset
load
help
/./map1/firmware/-> show fwversion
fwversion=0.59
/./map1/firmware/-> fwversion
Invalid command
/./map1/firmware/->
Specific commands
CLP syntax for specific commands is found in the sections that also describe the functionality through the
Web interface.
IPMI 2.0 support
LO100 supports the industry-standard IPMI 2.0. The IPMI specification defines standardized, abstracted
interfaces that can be used for monitoring and control functions that are built in to the platform hardware.
In addition to supporting the mandatory commands for IPMI 2.0, the following additional IPMI 2.0
features are supported by LO100:
•
Additional IPMI 2.0 commands
o
o
o
Get Channel Cipher Suites
Set/Get Channel Security Keys
Suspend/Resume Payload Encryption
Using LO100 27
Download from Www.Somanuals.com. All Manuals Search And Download.
•
Payload types
o
o
o
o
IPMI Message
RMCP+ Open Session Request/Response
RAKP Message 1 / 2
RAKP Message 3 / 4
•
•
•
Authentication algorithms
o
o
RAKP-none
RAKP-HMAC-SHA1
Integrity algorithms
o
o
None
HMAC-SHA1-96
Confidentiality algorithms
o
o
None
AES-CBC-128
Logging in to LO100
You can log in to the remote management processor through a web browser ("Logging in through a web
browser" on page 28) or through the CLP ("Logging in through the CLP" on page 29). If you are unsure of
Logging in through a web browser
1.
2.
Browse to the IP address of the remote management processor to access the login screen.
Enter your user name and password. The default user name for the Administrator account is admin,
and the default password is admin. The default user name for the Operator account is Operator,
and the default password is Operator.
Using LO100 28
Download from Www.Somanuals.com. All Manuals Search And Download.
Logging in through the CLP
To log in to the remote management processor through the CLP and enter Terminal mode:
1.
2.
3.
Establish a connection to the remote management processor by launching a telnet session or an SSH
session.
Enter the user name at the login: prompt. The default user name for the Administrator account is
admin. The default user name for the Operator account is Operator.
Enter the password at the password: prompt. The default password for the Administrator account is
admin. The default password for the Operator account is Operator.
To exit the CLP and enter Console mode, enter the exitcommand at the command prompt.
Browser main menu options
The main menu provides access to all basic remote management capabilities of the remote management
processor.
Option
Description
Home
Accesses or returns you to the main menu
navigation bar
Virtual Power
Accesses system power control options
Monitoring Sensors
Lists all sensor information, including type,
name, status, reading, and PEF settings
System Event Log
Virtual Floppy
Displays the system event log
Accesses the virtual floppy screen
Displays system hardware
Hardware Inventory
User Administration
Network Settings
Accesses the user configuration screen
Accesses the network parameter settings
screen
Using LO100 29
Download from Www.Somanuals.com. All Manuals Search And Download.
Option
Description
IPMI PET Configuration Accesses the PET destinations and alert policy
table
Hardware Inventory page
The Hardware Inventory page enables you to remotely identify the presence of processors on a target
server. To access this page from a web browser, click Hardware Inventory on the main menu navigation
bar.
Controlling server power remotely
LO100 enables you to remotely operate the power button of a host server using a web browser or the
CLP. LO100 virtual power support enables you to power up, power down, and power cycle the host
server. This virtual power support operates independently of the state of the operating system.
Using LO100 30
Download from Www.Somanuals.com. All Manuals Search And Download.
Controlling server power from a browser
The Virtual Power screen displays current power status, how long the server has been powered up, and
reason for the last server restart. To display the Virtual Power screen, click Virtual Power on the main
menu navigation bar.
To modify Chassis Actions, select the desired Power Control Option in the Chassis Actions section, and
click Apply to initiate the action.
To identify the server in the rack and illuminate the UID (LED on the front panel of the server), select the
length of time you want the UID to stay illuminated on the Chassis Locator list, and click Identify.
NOTE: The UID is only available on HP ProLiant DL140 G2 and ProLiant DL145 G2 servers.
Controlling server power through the CLP
1.
2.
3.
Change to the system1 target by entering cd system1.
To power on the server, enter start /system1. For example:
/./system1/> start /system1
System1 started.
4.
To power off the server, enter stop /system1. For example:
/./system1/> stop /system1
System1 stopped.
The -forceoption can also be used with the stopcommand. This option forces the
implementation to stop the target, ignoring any policy that might cause the implementation to
normally not execute the command. In remote management processor implementation, this process is
equivalent to a hard power down.
5.
To reset the server, enter reset /system1. For example:
/./system1/> reset
System1 reset.
Using LO100 31
Download from Www.Somanuals.com. All Manuals Search And Download.
|