HP Ilo 4 User Guide
Here you can view all the pages of manual HP Ilo 4 User Guide. The HP manuals for Server are available online for free. You can easily download all the documents as PDF.
Page 61
•ShowiLOIPduringPOST—EnablesthedisplayoftheiLOnetworkIPaddressduringhost serverPOST.Thefollowingsettingsarevalid: ◦Enabled(default)—TheiLOIPaddressisdisplayedduringPOST. ◦Disabled—TheiLOIPaddressisnotdisplayedduringPOST. •SerialCommandLineInterfaceStatus—EnablesyoutochangetheloginmodeloftheCLI featurethroughtheserialport.Thefollowingsettingsarevalid: ◦Enabled-AuthenticationRequired(default)—EnablesaccesstotheSMASHCLP commandlinefromaterminalconnectedtothehostserialport.ValidiLOuser...
Page 62
•ServerFQDN/IPAddress—EnablesyoutospecifytheserverFQDNorIPaddress.You canassignthisvaluemanually,butitmightbeoverwrittenbythehostsoftwarewhenthe operatingsystemloads. ◦YoucanenteranFQDNorIPaddressthatisupto255bytes. ◦Toforcethebrowsertorefreshanddisplaythenewvalue,savethissetting,andthen pressF5. •AuthenticationFailureLogging—Enablesyoutoconfigureloggingcriteriaforfailed authentications.Alllogintypesaresupported;eachlogintypeworksindependently.The followingarevalidsettings:...
Page 63
ConfiguringiLOsecurity iLOprovidesthefollowingsecurityfeatures: •User-definedTCP/IPports.Formoreinformation,see“ConfiguringiLOaccesssettings” (page57). •UseractionsloggedintheiLOEventLog.Formoreinformation,see“UsingtheiLOEventLog” (page171). •Progressivedelaysforfailedloginattempts.Formoreinformation,see“Loginsecurity” (page66). •SupportforX.509CAsignedcertificates.Formoreinformation,see“AdministeringSSL certificates”(page69)....
Page 64
iscontrolled.Ifhostaccessisnotcontrolled,anyusercanmakechangesbyusingtheactive configurationmenus. •LoginRequired(moresecure) IfiLORBSUoriLO4ConfigurationUtilityloginisrequired,theactiveconfigurationmenus arecontrolledbytheauthenticateduseraccessrights. •Disabled(mostsecure) IfiLORBSUortheiLO4ConfigurationUtilityisdisabled,useraccessisprohibited.This preventsmodificationbyusingtheiLORBSUortheiLO4ConfigurationUtility. Tochangetheloginrequirement:...
Page 65
WhenyoudisableiLOsecuritywiththesystemmaintenanceswitch: •Allsecurityauthorizationverificationsaredisabled. •iLORBSUortheiLO4ConfigurationUtilityrunsifthehostserverisreset. •iLOisnotdisabledandmightbedisplayedonthenetworkasconfigured. •IfiLOFunctionalitydisabled,iLOdoesnotlogoutactiveusersandcompletethedisable processuntilthepoweriscycledontheserver. •Thebootblockisexposedforprogramming. •AwarningmessageisdisplayedoniLOwebinterfacepages,indicatingthatiLOsecurityis disabled....
Page 66
Formoreinformationaboutusingdirectoryauthentication,see“Directoryservices”(page265). Userprivileges iLOallowsyoutocontroluseraccountaccesstoiLOfeaturesthroughtheuseofprivileges.When auserattemptstouseafeature,iLOverifiesthattheuserhastheproperprivilegetousethat feature. Forinformationabouttheavailableuseraccountanddirectorygroupprivileges,see“Managing iLOusersbyusingtheiLOwebinterface”(page46). Loginsecurity iLOprovidesseveralloginsecurityfeatures.Afteraninitialfailedloginattempt,iLOimposesa...
Page 67
•iLOlegacyformat—TheseareOpenSSHkeyssurroundedbytheBEGIN/ENDheadersneeded forRIBCL.ThisformatmustbeonelinebetweentheBEGINSSHKEYandENDSSHKEYtext. -----BEGIN SSH KEY----- ssh-dss AAAAB3NzaC1kc3MAAACBANA45qXo9cM1asav6ApuCREt1UvP7qcMbw+sTDrx9lV22XvonwijdFiOM/0VvuzVhM9oKdGMC7sCGQr FV3zWDMJcIb5ZdYQSDt44X6bvlsQcAR0wNGBN9zHL6YsbXvNAsXN7uBM7jXwHwrApWVuGAI0QnwUYvN/dsE8fbEYtGZCRAAAAFQ DofA47q8pIRdr6epnJXSNrwJRvaQAAAIBY7MKa2uH82I0KKYTbNMi0o5mOqmqy+tg5s9GC+HvvYy/S7agpIdfJzqkpHF5EPhm0j...
Page 68
Thekeymustbea2,048-bitDSAorRSAkey. 8.ClickImportPublicKey. AuthorizinganewkeybyusingtheCLI 1.Generatea2,048-bitDSAorRSASSHkeybyusingssh-keygen,puttygen.exe,or anotherSSHkeyutility. 2.Createthekey.pubfile. 3.VerifythatSecureShell(SSH)AccessisenabledontheAccessSettingspage. Formoreinformation,see“ConfiguringiLOaccesssettings”(page57). 4.UsePutty.exetoopenanSSHsessionusingport22. 5.Changetothecd /Map1/Config1directory. 6.Enterthefollowingcommand: load sshkey type "oemhp_loadSSHkey -source "...
Page 69
2.ClicktheSecureShellKeytab. 3.SelectthecheckboxtotheleftoftheuserforwhichyouwanttodeleteanSSHkey. 4.ClickDeleteSelectedKey(s). TheselectedSSHkeyisremovedfromiLO.WhenanSSHkeyisdeletedfromiLO,anSSH clientcannotauthenticatetoiLObyusingthecorrespondingprivatekey. AuthorizingSSHkeysfromanHPSIMserver ThemxagentconfigutilityenablesyoutoauthorizeSSHkeysfromanHPSIMserver. •SSHmustbeenabledoniLObeforeyouusemxagentconfigtoauthorizeakey. •TheusernameandpasswordenteredinmxagentconfigmustcorrespondtoaniLOuser...
Page 70
1.NavigatetotheAdministration→Security→SSLCertificatepage. 2.ClickCustomizeCertificate. TheSSLCertificateCustomizationpageopens. 3.EnterthefollowinginformationintheCertificateSigningRequestInformationsection.The requiredboxesaremarkedwithanasterisk(*). •Country(C)—Thetwo-charactercountrycodethatidentifiesthecountrywherethecompany ororganizationthatownsthisiLOsubsystemislocated •State(ST)—ThestatewherethecompanyororganizationthatownsthisiLOsubsystemis located...