HP Ilo 2 User Guide
Have a look at the manual HP Ilo 2 User Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
NOTE:HPInsightAgentsforiLO2mustbeinstalledontheremotehostservertoenable managementofiLO2.Referto"InstallingiLO2DeviceDrivers"foradditionaldetailsabout installingandconfiguringagents. HPSIMportmatching HPSIMisconfiguredtostartanHTTPsessiontocheckforiLO2atport80.Theportcanbe changed.Ifyouwanttochangetheportnumber,youmustalsochangeitinNetworkSettingsand HPSIM. TochangetheportnumberinHPSIM,addtheporttotheconfig\identification\ additionalWsDisc.propsfileinthedirectorywhereHPSIMisinstalled.Theentrymuststart withtheHTTPportforiLO2.NoentryneedstobeinthisfileforiLO2ifitremainsatthestandard Port80.Itisveryimportantthattheentryisonasinglelineandtheportnumberisfirst,withall otheritemsidenticaltothefollowingexample(includingcapitalization). ThefollowingexampleshowswhattheentryisifiLO2istobediscoveredatport55000(this mustallbeononelineinthefile): 55000=iLO 2,,true,false,com.hp.mx.core.tools.identification.mgmtproc.MgmtProcessorParser ReviewingAdvancedPacklicenseinformationinHPSIM HPSIMdisplaysthelicensestatusoftheiLO2managementprocessors.Youcanusethisinformation todeterminehowmanyandwhichiLO2devicesarelicensedfortheiLOAdvancedPack. Toviewlicenseinformation,clickDeploy>LicenseManager>ManageKeys.Tobesurethedatais current,runtheidentifysystemstaskforyourmanagementprocessors.Foradditionaldetailsabout initiatingtasks,seetheHPSIMdocumentation. HPSIMportmatching181
7TroubleshootingiLO2 iLO2POSTLEDindicators DuringtheinitialbootofiLO2,thePOSTLEDindicatorsflashtodisplaytheprogressthroughthe iLO2bootprocess.Afterthebootprocessiscomplete,theHBLEDflasheseverysecond.LED7 alsoflashesintermittentlyduringnormaloperation. TheLEDindicators(1through6)lightupafterthesystemhasbootedtoindicateahardwarefailure. Ifahardwarefailureisdetected,resetiLO2.ForthelocationoftheLEDindicators,refertothe serverdocumentation. AruntimefailureofiLO2isindicatedbyHBandLED7remainingineithertheOnofOffstate constantly.AruntimefailureofiLO2canalsobeindicatedbyarepeatedflashingpatternonall eightLEDs.Ifaruntimeerroroccurs,resetiLO2. AsequentialflashingpatternonLEDs,1,2,3,4,5,6,7,and8,repeatingindefinitely,indicates iLO2hasexperiencedafailedflash(firmwareupgrade)andisintheflashrecoverymode.Refer tothe"iLOnetworkflashrecovery"sectionformoreinformation. TheLEDindicatorshavethefollowingassignments: 1234567HB FailureindicatedDescriptionPOSTcode(activity completed) LEDindicator Setupchipselects.00None Determineplatform.02Normaloperation1or2 SetRUNMAPbit.032and1 InitializeSDRAMcontroller.043 ActivatetheIcache.063and2 Initialize(only)theDcache.073,2,and1 Couldnotcopysecondary loader. Copysecondaryloaderto RAM. 084 Didnotexecutesecondary loader. Verifysecondaryloader.094and1 SDRAMmemorytestfailed.Beginsecondaryloader.0a4and2 Couldnotcopybootblock.CopyROMtoRAM.0b4,2,and1 Bootblockfailedtoexecute.VerifyROMimageinRAM.0c4and3 Bootblockcouldnotfinda validimage. BootBlockMainstarted.0d4,3,and1 StartCRuntime initialization. None Mainself-testfailed.Main()hasreceivedcontrol.0e4,3,and2 Eachsubsystemmight self-test. VariesVaries RTOSstartupfailed.StartThreadX.0f4,3,2,and1 182TroubleshootingiLO2
FailureindicatedDescriptionPOSTcode(activity completed) LEDindicator Subsystemstartupfailed.Main_init()completed.00None FlashesastheiLO2 processorexecutesfirmware HBand7 code.Itdoesnotchangethe valueofthelowersixLEDs. TheiLO2microprocessorfirmwareincludescodethatmakesconsistencychecks.Ifanyofthese checksfail,themicroprocessorexecutestheFEH.TheFEHpresentsinformationusingtheiLO2 POSTLEDindicators.TheFEHcodesaredistinguishedbythealternatingflashingpatternofthe number99plustheremainderoftheerrorcode. ExplanationConsistencycheckFEHcode AnRTOSfunctionwascalledwithaninappropriatevalueorfrom aninappropriatecaller. TXAPICHK9902 Thesavedcontextofoneormorethreadshasbeencorrupted.TXCONTEXT9903 Astackprobefailed,thereturnaddressisinvalid,oranillegaltrap instructionhasbeendetected. TRAP9905 Anunexpectedwritetolowmemoryhasoccurred.NMIWR9966 Theresetvectorhasbeenmodified.CHKNULL99C1 Eventlogentries EventlogexplanationEventlogdisplay Displayswhentheserverpowerfails.Serverpowerfailed DisplaystheIPaddressforthebrowserthatloggedin.Browserlogin:IPaddress Displayswhentheserverpowerisrestored.Serverpowerrestored DisplaystheIPaddressforthebrowserthatloggedout.Browserlogout:IPaddress Displayswhentheserverisreset.Serverreset Displayswhenabrowserloginfails.FailedBrowserloginIPAddress:IPaddress DisplayswheniLO2hasfailedaninternaltest.The probablecauseisthatacriticalcomponenthasfailed. FurtheruseofiLO2onthisserverisnotrecommended. iLO2SelfTestError:# DisplayswheniLO2isreset.iLO2reset Displayswhentheonboardclockisset.On-boardclockset;was#:#:#:#:#:# Displayswhentheserverlogscriticalerrors.Serverloggedcriticalerror(s) Displayswhenauserclearstheeventlog.Eventlogclearedby:User DisplayswheniLO2isresettothedefaultsettings.iLO2resettofactorydefaults DisplayswhentheROMhasbeenupgraded.iLO2ROMupgradeto# DisplayswheniLO2isresetfortheROMupgrade.iLO2resetforROMupgrade DisplayswheniLO2isresetbyuserdiagnostics.iLO2resetbyuserdiagnostics DisplayswhenthepowerisrestoredtoiLO2.PowerrestoredtoiLO2 Eventlogentries183
EventlogexplanationEventlogdisplay DisplayswhenanerrorhasoccurrediniLO2andiLO2 hasresetitself.Ifthisissuepersists,callcustomersupport. iLO2resetbywatchdog DisplayswhentheserverresetsiLO2.iLO2resetbyhost Displayswhenanon-criticalerrorhasoccurrediniLO2 andiLO2hasresetitself.Ifthisissuepersists,callcustomer support. RecoverableiLO2error,code# DisplayswhentheSMNPtrapdoesnotconnecttothe specifiedIPaddress. SNMPtrapdeliveryfailure:IPaddress DisplayswhentheSNMPtrapdoesnotconnecttothe specifiedIPaddress. TestSNMPtrapalertfailedfor:IPaddress DisplayswhentheSNMPtrapdoesnotconnecttothe specifiedIPaddress. PoweroutageSNMPtrapalertfailedfor:IPaddress DisplayswhentheSNMPtrapdoesnotconnecttothe specifiedIPaddress. ServerresetSNMPtrapalertfailedfor:IPaddress DisplayswhentheSNMPtrapdoesnotconnecttothe specifiedIPaddress. IllegalloginSNMPtrapalertfailedfor:IPaddress DisplayswhentheSNMPtrapdoesnotconnecttothe specifiedIPaddress. DiagnosticerrorSNMPtrapalertfailedfor:IPaddress DisplayswhentheSNMPtrapdoesnotconnecttothe specifiedIPaddress. HostgeneratedSNMPtrapalertfailedfor:IPaddress DisplayswhentheSNMPtrapdoesnotconnecttothe specifiedIPaddress. NetworkresourceshortageSNMPtrapalertfailedfor:IP address DisplayswhenthenetworkisconnectedtoiLO2.iLO2networklinkup DisplayswhenthenetworkisnotconnectedtoiLO2.iLO2networklinkdown Displayswhenauserstartsafirmwareupgrade.iLO2Firmwareupgradestartedby:User Displayswhenauserresetsthehostserver.Hostserverresetby:User Displayswhenauserpowersoffahostserver.HostserverpoweredOFFby:User Displayswhenauserpowersonahostserver.HostserverpoweredONby:User DisplayswhenauserbeginsusingaVirtualFloppy.VirtualFloppyinuseby:User DisplayswhenauserlogsonaRemoteConsolesession.RemoteConsolelogin:User DisplayswhenaRemoteConsolesessionisclosed.RemoteConsoleClosed DisplaysafailedconsoleloginandIPaddress.FailedConsolelogin-IPAddress:IPaddress Displayswhenalocaluserisadded.AddedUser:User Displayswhenalocaluserisdeleted.UserDeletedby:User Displayswhenalocaluserismodified.ModifiedUser:User DisplayswhenavaliduserlogsontoiLO2usingan Internetbrowser. Browserlogin:User DisplayswhenavaliduserlogsoffiLO2usinganInternet browser. Browserlogout:User Displayswhenabrowserloginattemptfails.FailedBrowserloginIPAddress:IPaddress DisplayswhenanauthorizeduserlogsonusingtheRemote Consoleport. RemoteConsolelogin:User 184TroubleshootingiLO2
EventlogexplanationEventlogdisplay DisplayswhenanauthorizedRemoteConsoleuseris loggedoutorwhentheRemoteConsoleportisclosed followingafailedloginattempt. RemoteConsoleClosed Displayswhenanunauthorizeduserhasfailedthreelogin attemptsusingtheRemoteConsoleport. FailedConsoleloginIPAddress:IPaddress Displayswhenanewentryismadetotheauthorizeduser list. AddedUser:User Displayswhenanentryisremovedfromtheauthorized userlist.TheUsersectiondisplaystheuserwhorequested theremoval. UserDeletedby:User DisplayswhentheuserclearstheEventLog.EventLogCleared:User Displayswhenthepowerhasbeenreset.PowerCycle(Reset):User DisplayswhentheVirtualPowerButtonisused.VirtualPowerEvent:User DisplayswhenthesystemisbootedwiththeSecurity OverrideSwitchsettoOn. SecurityOverrideSwitchSettingisOn DisplayswhenthesystemisbootedwiththeSecurity OverrideSwitchchangedfromOntoOff. SecurityOverrideSwitchSettingChangedtoOff Displayswhentheon-boardclockisset.Willdisplaythe previoustimeor"NOTSET"iftherewasnotatimesetting previously. On-boardclockset;waspreviously[NOTSET]" DisplayswhenthelogsarefullandtheSNMPtrapalert failedforaspecifiedIPaddress. LogsfullSNMPtrapalertfailedfor:IPaddress Displayswhenthesecurityhasbeendisabledandthe SNMPtrapalertfailedforaspecifiedIPaddress. SecuritydisabledSNMPtrapalertfailedfor:IPaddress Displayswhenthesecurityhasbeenenabledandthe SNMPtrapalertfailedforaspecifiedIPaddress. SecurityenabledSNMPtrapalertfailedfor:IPaddress DisplayswhenanauthorizeduserconnectstheVirtual Floppy. VirtualFloppyconnectedbyUser DisplayswhenanauthorizeduserdisconnectstheVirtual Floppy. VirtualFloppydisconnectedbyUser Displayswhenanauthorizeduseraddsalicense.Licenseaddedby:User Displayswhenanauthorizeduserremovesalicense.Licenseremovedby:User Displayswhenthereisanerroractivatingthelicense.Licenseactivationerrorby:User DisplayswhenanauthorizeduserlogsintoiLO2RBSU.iLO2RBSUuserlogin:User Apowerrequestwasreceivedasoneofthefollowing types: Poweronrequestreceivedby:Type PowerButton WakeOnLAN AutomaticPowerOn DisplayswhenanauthorizeduserselectstheVirtualNMI button. VirtualNMIselectedby:User DisplayswhenaVirtualSerialPortsessionisstarted.VirtualSerialPortsessionstartedby:User DisplayswhenaVirtualSerialPortsessionisended.VirtualSerialPortsessionstoppedby:User DisplayswhenthereisaloginfailureforaVirtualSerial Portsession. VirtualSerialPortsessionloginfailurefrom:User Eventlogentries185
Hardwareandsoftwarelink-relatedissues iLO2usesstandardEthernetcabling,whichincludesCAT5UTPwithRJ-45connectors. Straight-throughcablingisnecessaryforahardwarelinktoastandardEthernethub.Useacrossover cableforadirectPCconnection. TheiLO2ManagementPortmustbeconnectedtoanetworkthatisconnectedtoaDHCPserver, andiLO2mustbeonthenetworkbeforepowerisapplied.DHCPsendsarequestsoonafter powerisapplied.IftheDHCPrequestisnotansweredwheniLO2firstboots,thenitwillreissue therequestat90-secondintervals. TheDHCPservermustbeconfiguredtosupplyDNSandWINSnameresolution.iLO2canbe configuredtoworkwithastaticIPaddresseitherintheF8optionROMsetuporfromtheNetwork SettingsWebpage. ThedefaultDNSnameappearsonthenetworksettingstagandcanbeusedtolocateiLO2without knowingtheassignedIPaddress. IfadirectconnectiontoaPCisused,thenastaticIPaddressmustbeusedbecausethereisno DHCPserveronthelink. WithintheiLO2RBSU,toviewthestatusofiLO2DHCPrequests,youcanpresstheF1keyinside theDNS/DHCPpageforadvancedoptions. JVMsupport ToensurethattheiLO2RemoteConsoleappletandVirtualMediaappletoperateasexpected, installJavaRuntimeEnvironment,StandardEdition1.4.2_13.TheiLO2firmwarenowsupports 64-bitJavaforbrowsersandJVM/JRE.TolocatethelinktothelatestsupportedversionofJRE, fromtheiLO2browserinterface,selectRemoteConsole>Settings>Java. TheiLO2RemoteConsole,RemoteSerialConsole,andVirtualMediaappletsrequirethatJVM beinstalledontheclientserver.IftheRemoteConsoleandVirtualMediaappletsareaccessed usingaversionofJavaRuntimeEnvironmentStandardEditionthatislaterthan1.4.2_13,the appletscanfunctionincorrectly.IfyouareusinganotherJVMversion,youmightexperiencethe following: •IftheRemoteConsoleappletisopenedwithJavaRuntimeEnvironmentVersion1.5.xor1.6.x, youmightexperiencethefollowing: —ThemessageAutomationservercannotcreateobjectappears.IfyouclickOK,themessage disappearsandtheappletfunctionsnormally. —TheTABkeydoesnotfunctionproperly.TheTABkeymovesaroundthevariousportions oftheRemoteConsoleappletwindow,insteadofmovinginsidetheappletitself. •IftheVirtualMediaappletisopenedwithJavaRuntimeEnvironmentVersion1.5.xorVersion 1.6.x,youmightexperiencethefollowing: —WhenyouclicktheCreateDiskImagebutton,anotherwindowappears.Thewindow mightappearwiththeCreateandCancelbuttonsmissing,orappearasonlytext.Ifthe windowisclosedandreopened,thebuttonseventuallyappearcorrectly. —Whenyouselectanimagefileintheapplet,afileselectwindowappears.Afteryou selectafile,thewindowclosesandreturnstotheregularappletwindow.However,the imagefileareaisnotupdated,andtheappletappearsunresponsive.Toupdatethe originalVirtualMediaappletwindowandenableittoretainfocusinthesystem,clicka separatewindow.TheappletappearsunresponsiveuntiltheVirtualMediaappletwindow isclosedandreopened. 186TroubleshootingiLO2
Loginissues Usethefollowinginformationwhenattemptingtoresolveloginissues: •Trythedefaultlogin,whichislocatedonthenetworksettingstag. •Ifyouforgetyourpassword,anadministratorwiththeAdministerUserAccountsprivilegecan resetit. •Ifanadministratorforgetshisorherpassword,theadministratormustusetheSecurityOverride SwitchorestablishanadministratoraccountandpasswordusingHPONCFG. •Checkforstandardissues,suchas: Isthepasswordcomplyingwithpasswordrestrictions?Forexample,aretherecase-sensitive charactersinthepassword? — —Isanunsupportedbrowserbeingused? Loginnameandpasswordnotaccepted IfyouhaveconnectedtoiLO2butitdoesnotacceptyourloginnameandpassword,youmust verifythatyourlogininformationisconfiguredcorrectly.HaveauserwhohastheAdministerUser Accountsprivilegeloginandchangeyourpassword.Ifyouarestillunabletoconnect,havethe userloginagainanddeleteandre-addyouruseraccount. NOTE:TheRBSUcanalsobeusedtocorrectloginissues. Directoryuserprematurelogout NetworkerrorscancauseiLO2toconcludethatadirectoryconnectionisnolongervalid.IfiLO 2cannotdetectthedirectory,iLO2terminatesthedirectoryconnection.Anyadditionalattempts tocontinueusingtheterminatedconnectionredirectsthebrowsertotheLoginpage. RedirectiontotheLoginpagecanappeartobeaprematuresessiontimeout.Aprematuresession timeoutcanoccurduringanactivesessionif: •Thenetworkconnectionissevered. •Thedirectoryserverisshutdown. Torecoverfromaprematuresessiontimeout,logbackinandcontinueusingiLO2.Ifthedirectory serverisunavailable,youmustusealocalaccount. iLO2ManagementPortnotaccessiblebyname TheiLO2ManagementPortcanregisterwithaWINSserverorDDNSservertoprovidethe name-to-IPaddressresolutionnecessarytoaccesstheiLO2ManagementPortbyname.TheWINS orDDNSservermustbeupandrunningbeforetheiLO2ManagementPortispoweredon,and theiLO2ManagementPortmusthaveavalidroutetotheWINSorDDNSserver. Inaddition,theiLO2ManagementPortmustbeconfiguredwiththeIPaddressoftheWINSor DDNSserver.YoucanuseDHCPtoconfiguretheDHCPserverwiththenecessaryIPaddresses. YoucanalsoentertheIPaddressesthroughRBSUorbyselectingNetworkSettingsonthe Administrationtab.TheiLO2ManagementPortmustbeconfiguredtoregisterwitheitheraWINS serverorDDNSserver.Theseoptionsareturnedonasfactorydefaultsandcanbechangedthrough RBSUorbyselectingtheNetworkSettingsoptionontheAdministrationtab. TheclientsusedtoaccesstheiLO2ManagementPortmustbeconfiguredtousethesameDDNS serverwheretheIPaddressoftheiLO2ManagementPortwasregistered. IfyouareusingaWINSserverandanon-dynamicDNSserver,theaccesstotheiLO2Management PortmightbesignificantlyfasterifyouconfiguretheDNSservertousetheWINSserverforname resolution.RefertotheappropriateMicrosoftdocumentationformoreinformation. Loginissues187
iLO2RBSUunavailableafteriLO2andserverreset IftheiLO2processorisresetandtheserverisimmediatelyreset,thereisasmallchancethatthe iLO2firmwarewillnotbefullyinitializedwhentheserverperformsitsinitializationandattempts toinvoketheiLO2RBSU.Inthiscase,theiLO2RBSUisunavailableortheiLO2OptionROM codeisskippedaltogether.Ifthissituationoccurs,resettheserverasecondtime.Toavoidthis issue,waitafewsecondsbeforeresettingtheserverafterresettingtheiLO2processor. Inabilitytoaccesstheloginpage Ifyoucannotaccesstheloginpage,youmustverifytheSSLencryptionlevelofyourbrowseris setto128bits.TheSSLencryptionleveliniLO2issetto128bitsandcannotbechanged.The browserandiLO2encryptionlevelsmustbethesame. InabilitytoaccessiLO2usingTelnet IfyoucannotaccessiLO2usingTelnet,youmustverifytheRemoteConsolePortConfiguration andRemoteConsoleDataEncryptionontheGlobalSettingsscreen.IfRemoteConsolePort ConfigurationissettoAutomatic,theRemoteConsoleappletenablesport23,startsasession, andthenclosesport23whenthesessioniscompleted.Telnetcannotautomaticallyenableport 23,soitfails. Inabilitytoaccessvirtualmediaorgraphicalremoteconsole VirtualmediaandgraphicalRemoteConsoleareonlyenabledbylicensingtheoptionaliLO AdvancedPack.Amessageappears,informingtheuserthatthefeaturesarenotavailablewithout alicense.Althoughupto10usersareallowedtologintoiLO2,onlyoneusercanaccessthe remoteconsole.AwarningmessageappearsindicatingthattheRemoteConsoleisalreadyinuse. InabilitytoconnecttoiLO2afterchangingnetworksettings Verifythatbothsidesoftheconnection,theNICandtheswitch,havethesamesettingsfor transceiverspeedautoselect,speed,andduplex.Forexample,ifonesideisautoselectingthe connection,thentheothersidemustaswell.ThesettingsfortheiLO2NICarecontrolledinthe NetworkSettingsscreen. InabilitytoconnecttotheiLO2DiagnosticPort IfyoucannotconnecttotheiLO2DiagnosticPortthroughtheNIC,beawareofthefollowing: •Theuseofthediagnosticportisautomaticallysensedwhenanactivenetworkcableisplugged intoit.Whenswitchingbetweenthediagnosticandbackports,allowoneminuteforthe networkswitchovertobecompletebeforeattemptingtoconnectthroughthewebbrowser. •Ifacriticalactivityisinprogress,thediagnosticportcannotbeuseduntilthecriticalactivity iscomplete.Criticalactivitiesincludethefollowing: —Firmwareupgrade —RemoteConsolesession —SSLinitialization •IfyouareusingaclientworkstationthatcontainsmorethanoneenabledNIC,suchasa wirelesscardandanetworkcard,aroutingissuemightpreventyoufromaccessingthe diagnosticport.Toresolvethisissue: 188TroubleshootingiLO2
1.HaveonlyoneactiveNIContheclientworkstation.Forexample,disablethewirelessnetwork card. 2.ConfiguretheIPaddressoftheclientworkstationnetworktomatchtheiLO2DiagnosticPort networksothatthefollowingconditionsaremet: •TheIPaddresssettingis192.168.1.X,whereXisanynumberotherthan1,becausethe IPaddressofthediagnosticportissetat192.168.1.1. •Thesubnetmasksettingis255.255.255.0. InabilitytoconnecttotheiLO2processorthroughtheNIC IfyoucannotconnecttotheiLO2processorthroughtheNIC,tryanyorallofthefollowing troubleshootingmethods: •ConfirmthatthegreenLEDindicator(linkstatus)ontheiLO2RJ-45connectorison.This conditionindicatesagoodconnectionbetweenthePCINICandthenetworkhub. •LookforintermittentflashesofthegreenLEDindicator,whichindicatesnormalnetworktraffic. •RuntheiLO2RBSUtoconfirmthattheNICisenabledandverifytheassignedIPaddressand subnetmask. •RuntheiLO2RBSUandusetheF1-AdvancedtabinsideoftheDNS/DHCPpagetoseethe statusofDHCPrequests. •PingtheIPaddressoftheNICfromaseparatenetworkworkstation. •AttempttoconnectwithbrowsersoftwarebyenteringtheIPaddressoftheNICastheURL. YoucanseetheiLO2Homepagefromthisaddress. •ResetiLO2. NOTE:Ifanetworkconnectionisestablished,youmighthavetowaitupto90secondsfor theDHCPserverrequest. ProLiantBLp-ClassservershaveaDiagnosticPortavailable.Connectingalivenetworkcableto thediagnosticportcausesiLO2toautomaticallyswitchfromtheiLO2porttothediagnosticport. Whenswitchingbetweenthediagnosticandbackports,allowoneminuteforthenetworkswitchover tobecompletebeforeattemptingconnectionthroughthebrowser. InabilitytologintoiLO2afterinstallingtheiLO2certificate IftheiLO2self-signedcertificateisinstalledpermanentlyintosomebrowsersandtheiLO2is reset,youmightnotbeabletologbackintoiLO2becauseiLO2generatesanewself-signed certificateeverytimeitisreset.Whenacertificateisinstalledinthebrowser,itisindexedbythe namecontainedinthecertificate.ThisnameisuniquetoeachiLO2.EverytimeiLO2resets,it generatesanewcertificatewiththesamename. Toavoidthisissue,donotinstalltheiLO2self-signedcertificateinthebrowsercertificatestore.If youwanttoinstalltheiLO2certificate,apermanentcertificatemustberequestedfromaCAand importedintotheiLO2.Thispermanentcertificatecanthenbeinstalledinthebrowsercertificate store. Firewallissues TheiLO2firmwarecommunicatesthroughseveralconfigurableTCP/IPports.Iftheseportsare blocked,theadministratormustconfigurethefirewalltoallowforcommunicationsontheseports. SeetheAdministrationsectionoftheiLO2userinterfacetovieworchangeportconfigurations. Loginissues189
Proxyserverissues IftheWebbrowsersoftwareisconfiguredtouseaproxyserver,itwillnotconnecttotheiLO2 IPaddress.Toresolvethisissue,configurethebrowsernottousetheproxyserverfortheIPaddress ofiLO2.Forexample,inInternetExplorer,selectTools>InternetOptions>Connections>LAN Settings>Advanced,andthenentertheiLO2IPaddressorDNSnameintheExceptionsfield. Two-factorauthenticationerror WhenattemptingtoauthenticatetoiLO2usingtwo-factorauthentication,youmightreceivethe messageThe page cannot be displayed.Thismessagemightappearforthefollowing reasons: •Nousercertificatesareregisteredontheclientsystem.Tocorrectthisissue,registerthe necessaryusercertificateontheclientsystem,whichmightrequiresoftwareprovidedbythe smartcardvendor. •TheusercertificateisstoredonasmartcardorUSBtokenthatisnotconnectedtotheclient system.Tocorrectthisissue,connecttheappropriatesmartcardorUSBtokentotheclient system. •TheusercertificateisnotissuedbythetrustedCA.ThetrustedCA'scertificateisconfigured iniLO2ontheTwo-FactorAuthenticationsettingspage.Thecertificateconfiguredasthe trustedCA,mustbethepubliccertificateoftheCAthatissuescertificatesinyourorganization. Tocorrectthisissue,configuretheappropriatecertificateasthetrustedCAontheiLO2 Two-FactorAuthenticationsettingspage,oruseausercertificatethatisissuedbythetrusted CAwhichisalreadyconfigured. •Theusercertificateisexpiredornotyetvalid.Regardlessofwhethertheexpiredcertificate mapstoalocaluser,orwhetheritcorrespondstoadirectoryuseraccount,iLO2doesnot allowauthenticationwithacertificatethathasexpiredorthatisnotyetvalid.Checkthe validitydatesofthecertificatetoverifythatthisisthecauseoftheThe page cannot be displayedmessage.Tocorrectthis,issueavalidcertificatetotheuser.Mapthecertificate tothelocaliLO2useraccountifyouareauthenticatinglocaliLO2usersandverifytheiLO 2timeclockissetcorrectly. •Theusercertificatewasnotdigitallysignedwiththesamecertificatethatisspecifiedasthe trustedCA.EventhoughthenameonthetrustedCAcertificatemightmatchtheissuerofthe usercertificate,theusercertificatemighthavebeendigitallysignedbyadifferentcertificate. Viewthecertificationpathoftheusercertificate,andensurethatthepublickeyoftheissuing certificateisthesameasthepublickeyofthetrustedCAcertificate.Tocorrectthisissue, configuretheappropriatecertificateasthetrustedCAontheiLO2Two-FactorAuthentication settingspage,oruseausercertificatethatwasissuedbythetrustedCA. Troubleshootingalertandtrapissues ExplanationAlert ThistrapisgeneratedbyauserthroughtheWebconfigurationpage.TestTrap Serverhaslostpower.ServerPowerOutage Serverhasbeenreset.ServerReset Remoteuserloginattemptfailed.FailedLoginAttempt Thisisanerrorconditionthatisnotpredefinedbythehard-coded MIB. GeneralError Circularloghasbeenoverrun.Logs ThestateoftheSecurityOverrideSwitchhaschanged(On/Off).SecurityOverrideSwitchChanged:On/Off 190TroubleshootingiLO2