HP Ilo 4 User Guide
Have a look at the manual HP Ilo 4 User Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
6.Definetheusercontexts. TheusercontextsdefinewheretheuserswhowilllogintoiLOarelocatedintheLDAPstructure. YoucanentertheorganizationalunitDNorclickBrowsetoselectusercontexts. 7.ClickConfigure,andthenclickDonewhenbuttonisavailable. HPDirectoriesSupportforProLiantManagementProcessorsutility301
Configuringdirectorieswhenschema-freeintegrationisselected TheboxesontheConfigureManagementProcessorswindowfollow: •NetworkAddress—Thenetworkaddressofthedirectoryserver,whichcanbeavalidDNS nameorIPaddress. •LoginNameandPassword—Entertheloginnameandpasswordforanaccountthathas domainadministratoraccesstothedirectory. •SecurityGroupDistinguishedName—TheDNofthegroupinthedirectorythatcontainsaset ofiLOuserswithacommonsetofprivileges.Ifthedirectoryname,loginname,andpassword arecorrect,youcanclickBrowsetonavigatetoandselectthegroup. •Privileges—TheiLOprivilegesassociatedwiththeselectedgroup.Theloginprivilegeisimplied iftheuserisamemberofthegroup. ConfigureManagementProcessorssettingsarestoreduntilthenextwindowinthewizardis displayed. Settingupmanagementprocessorsfordirectories Thelaststepinthemigrationprocessistoconfigurethemanagementprocessorstocommunicate withthedirectory.TheSetupManagementProcessorsforDirectorieswindowenablesyoutocreate usercontexts. 302Directoryservices
Usercontextsenabletheusertouseshortnamesoruserobjectnamestologin,ratherthanthe fullDN.Forexample,havingausercontextsuchasCN=Users,DC=iLOTEST2,DC=HPenables userElizabethBennetttologinusingElizabeth BennettratherthanCN=Elizabeth Bennett,CN=Users, DC=iLOTEST2,[email protected], @iLOTEST2.HPinacontextboxenablestheusertologinusingebennett(assumingthat ebennettistheusershortname). Toconfigurethemanagementprocessorstocommunicatewiththedirectory: 1.Entertheusercontexts,orclickBrowse. 2.ClickConfigure. Themigrationutilityconnectstoallselectedmanagementprocessorsandupdatestheir configurationsasspecified.Theutilitysupportsconfiguring15usercontexts.Toaccessthe usercontextboxes,usethescrollbar. WhenyouclickConfigure,theutilitymightdisplayamessagesimilartothefollowing: 3.ClickOKtocontinue. 4.Whentheprocessiscomplete,clickDone. HPDirectoriesSupportforProLiantManagementProcessorsutility303
7Troubleshooting ThischapterprovidestroubleshootingsolutionsforHPiLO. Kerneldebugging UsetheWindowsWindbgkerneldebuggerfromalocaltestsystem(usuallyalaptop)forahost serverthatyouwanttodebug.ThismethodusestheiLOVirtualSerialPortfeature. NOTE:YoumusthavePuTTYinstalledonyourtestsystem.YoucandownloadPuTTYfromhttp:// www.putty.org/. 1.UsingtheiLOwebinterfaceonthehostserverwithkernelissues,navigatetothe Administration→AccessSettingspageandconfiguretheSerialCommandLineInterfaceSpeed setting. 2.ConfigurethedebugoptionsinWindows(theboot.iniparametersfortheserialconnection). Usedebugport=com2,andsetthebaudratetomatchthesettingsintheiLOwebinterface. 3.DuringPOST,pressF9toenterthesystemRBSUorUEFISystemUtilities. 4.Fromthemainmenu,disableEMSandBIOSSerialConsole. Fordetailedinstructions,seetheHPROM-BasedSetupUtilityUserGuide. 5.SettheVirtualSerialPorttoCOM 2. Fordetailedinstructions,seetheHPROM-BasedSetupUtilityUserGuide. 6.RebootthehostservertoaccesstheselectionmenufortheWindowsdebugbootoption. 7.Fromthelocaltestsystem,usePuTTYtoconnecttoiLOandlogin. ThisisaCLIconnectiontoiLO. 8.EntertheIPaddressforthesessionhostname.UsethedefaultsettingsforanSSHsession. WhenthePuTTYiLOCLIsessionopens,auserloginwindowopens,unlessthePuTTYsession isconfiguredtouseprivatekeys.Formoreinformation,see“ConfiguringiLOsecurity” (page63)and“AdministeringSSHkeys”(page66). Itmighttakeaminutefortheprompttoappear. 9.AtthehpiLO->prompt,enterthefollowingcommand: windbg_enable ThisopensasockettotheVirtualSerialPortonport3002. 10.EnterthefollowingcommandtostarttheWindowsdebugger: windbg -k com:port=,ipport=3002 istheiLOIPaddress,and3002isthesockettoconnectto(therawserial datasocketforiLO). NOTE:Youcanaddotherwindbgcommand-lineparametersifnecessary.HPrecommends usingthe-bparameterfortheinitialbreakpoint. 11.Gototheserverconsole(oraccesstheiLORemoteConsole),andpressEntertobootthe debugselectionontheOSloadmenu. Thismighttakeseveralminutes. 304Troubleshooting
12.Whenyouarefinisheddebuggingthehostserver,usePuTTYtoconnecttotheCLIandturn offthedebugsockettotheVirtualSerialPort.Then,enterthefollowingcommand: windbg_disable NOTE:YoucandisconnectandreconnecttheWindowsdebuggeraslongasyoukeepthe iLOdebugsocketenabled. Generalinformation UsingtheHPProLiantPre-bootHealthSummary IfanHPProLiantGen9serverwillnotstartup,youcanuseiLOtodisplaydiagnosticinformation onanexternalmonitor.Thisfeatureissupportedonserversthatsupportexternalvideoandhave aUIDbuttonoranSUVconnector.Whentheserverisoffandpowerisavailable,iLOrunson auxiliarypowerandcantakecontroloftheservervideoadaptertoshowthePre-bootHealth Summary. ToverifywhetheryourserversupportsaUIDbuttonoranSUVconnector,seeyourserverUser Guide. ToviewthePre-bootHealthSummary: 1.Verifythattheserverisoffandpowerisavailable. Generalinformation305
2.Dooneofthefollowing: •PresstheUIDbuttonontheserver. CAUTION:Tousethisfeature,pressandreleasetheUIDbutton.Holdingitdownat anytimeformorethan5secondsinitiatesagracefuliLOrebootorahardwareiLO reboot.DatalossorNVRAMcorruptionmightoccurduringahardwareiLOreboot. •LogintotheiLOwebinterface,andchangetheUIDstatetoUIDON. YoucandothisbyclickingtheUIDiconatthebottomrightcornerofanyiLOwebinterface window. •PluginanSUVconnector. TheHPProLiantPre-bootHealthSummaryscreenisdisplayedontheservermonitor,and remainsuntiltheserverispoweredon,theUIDstateischangedtoUIDOFF,anSUVconnector isremoved,oraniLOrebootcompletes. TheHPProLiantPre-bootHealthSummarycannotbeaccessedwhentheUIDisintheBLINK state,forexample,iftheremoteconsoleisinuse,orafirmwareupdateisinprogress. Thefollowinginformationislisted: •Servermodelnumber •Serverserialnumber •ProductID •iLOIPaddress(IPv4andIPv6)—ThisisdisplayedonlyifShowiLOIPduringPOSTissetto EnabledontheAdministration→AccessSettingspageiniLO. Formoreinformation,see“Configuringaccessoptions”(page59). •iLOHostname •iLOfirmwareversion •HPProLiantSystemROMversion •HPProLiantSystemROM–Backupversion •iLOCPLDversion •SystemCPLDversion 306Troubleshooting
•EmbeddedSmartArrayversionnumber—ThisvalueisdisplayedonlyifserverPOSThas successfullycompletedsincethelastauxiliarypowercycle. •Criticalevents—ThemostrecentCriticaleventsfromtheIMLaredisplayed,withthemostrecent eventdisplayedfirst. CookiesharingbetweenbrowserinstancesandiLO iLOusesbrowsersessioncookiestodistinguishbetweenindividuallogins—eachbrowserwindow appearsasaseparateuserlogin—whilesharingthesameactivesessionwithiLO.Multiplelogins canconfusethebrowser.ThismayappeartobeaniLOissue,butitistypicalbrowserbehavior. Severalprocessescancauseabrowsertoopenadditionalwindows.Browserwindowsopened fromanopenbrowserrepresentdifferentaspectsofthesameprograminmemory.Consequently, eachbrowserwindowsharespropertieswiththeparent,includingcookies. Sharedinstances WheniLOopensanotherbrowserwindow(forexample,theRemoteConsoleorahelpfile),this windowsharesthesameconnectiontoiLOandthesessioncookie. TheiLOwebservermakesURLdecisionsbasedoneachrequestreceived.Forexample,ifarequest doesnothaveaccessrights,itisredirectedtotheloginpage,regardlessoftheoriginalrequest. Webserver-basedredirection,selectingFile→New→Window,orpressingCtrl+Nopensaduplicate instanceoftheoriginalbrowser. Cookieorder Duringlogin,theloginpagebuildsabrowsersessioncookiethatlinksthewindowtotheappropriate sessionintheiLOfirmware.Thefirmwaretracksbrowserloginsasseparatesessionslistedinthe ActiveSessionssectionoftheiLOOverviewpage. Forexample,whenUser1logsin,thewebserverbuildstheinitialframesview,withUser1listed inthetoppane,menuitemsintheleftpane,andpagedatainthelowerrightpane.WhenUser1 clicksfromlinktolink,onlythemenuitemsandpagedataareupdated. WhileUser1isloggedin,ifUser2,opensabrowserwindowonthesameclientandlogsin,the secondloginoverwritesthecookiegeneratedintheoriginalUser1session.AssumingthatUser2 isadifferentuseraccount,adifferentcurrentframeisbuilt,andanewsessionisgranted.The secondsessionappearsintheActiveSessionssectionoftheiLOOverviewpageasUser2. Thesecondloginhaseffectivelyorphanedthefirstsessionbyoverridingthecookiegenerated duringtheUser1login.ThisbehavioristhesameasclosingtheUser1browserwithoutclicking theSignOutbutton.TheUser1orphanedsessionisreclaimedwhenthesessiontimeoutexpires. Becausethecurrentuserframeisnotrefreshedunlessthebrowserisforcedtorefreshtheentire page,User1cancontinuenavigatingbyusingthebrowserwindow.However,thebrowserisnow operatingbyusingtheUser2sessioncookiesettings,eventhoughitmaynotbereadilyapparent. IfUser1continuestonavigateinthismode(User1andUser2sharingthesameprocessbecause User2loggedinandresetthesessioncookie),thefollowingcanoccur: •User1sessionbehavesconsistentlywiththeprivilegesassignedtoUser2. •User1activitykeepsUser2sessionalive,butUser1sessioncantimeoutunexpectedly. •Loggingoutofeitherwindowcausesbothsessionstoend.Thenextactivityintheotherwindow canredirecttheusertotheloginpageasifasessiontimeoutorprematuretimeoutoccurred. •ClickingSignOutfromthesecondsession(User2)resultsinthefollowingwarningmessage: Logging out: unknown page to display before redirecting the user to the login page. Generalinformation307
•IfUser2logsoutandthenlogsbackinasUser3,User1assumestheUser3session. •IfUser1isatlogin,andUser2isloggedin,User1canaltertheURLtoredirecttotheindex page.ItappearsasifUser1hasaccessediLOwithoutloggingin. Thesebehaviorscontinueaslongastheduplicatewindowsareopen.Allactivitiesareattributed tothesameuser,usingthelastsessioncookieset. Displayingthecurrentsessioncookie Afterloggingin,youcanforcethebrowsertodisplaythecurrentsessioncookiebyenteringthe followingintheURLnavigationbar: javascript:alert(document.cookie) ThefirstfieldvisibleisthesessionID.IfthesessionIDisthesameamongthedifferentbrowser windows,thesewindowsaresharingthesameiLOsession. YoucanforcethebrowsertorefreshandrevealyourtrueidentitybypressingF5,selecting View→Refresh,orclickingtheRefreshbutton. Preventingcookie-relatedissues Topreventtheseissues: •Startanewbrowserforeachloginbydouble-clickingthebrowsericonorshortcut. •ClicktheSignOutbuttontoclosetheiLOsessionbeforeyouclosethebrowserwindow. TestingtheSSLconnectiontoaserver Thefollowingtestchecksforthecorrectsecurityprompt.Anonworkingserverwillproceedtoa Page cannot be displayedmessage.Ifthistestfails,yourdomaincontrollerisnotaccepting SSLconnectionsandprobablyhasnotbeenissuedacertificate. 1.Openabrowserandnavigatetohttps://:636. Youcanuseinsteadof,whichaccessestheDNSand determineswhichdomaincontrollerishandlingrequestsforthedomain.Testmultipledomain controllerstoverifythatallofthemhavebeenissuedacertificate. 2.IfSSLisoperatingcorrectlyonthedomaincontroller(acertificatehasbeenissued),youare promptedwithasecuritymessagethataskswhetheryouwanttoproceedwithaccessingthe siteorviewtheservercertificate.ClickingYesdoesnotdisplayaweblog,whichisnormal. Thisprocessisautomatic,butmightrequirerebooting.Toavoidrebooting: a.OpentheMMC. b.Addthecertificatessnap-in. c.Whenprompted,selectComputerAccountforthetypeofcertificatesyouwanttoview. d.ClickOKtoreturntothecertificatessnap-in. e.SelectthePersonal→Certificatesfolder. f.Right-clickthefolderandselectRequestNewCertificate. g.VerifythattheTypeisdomaincontroller,andclickNextuntilacertificateisissued. YoucanalsousetheMicrosoftLdp.exetooltoverifySSLconnections.Formoreinformationabout theLDPtool,seeyourMicrosoftdocumentation. AnoldcertificatecancauseissueswithSSLonthedomaincontrollerwhenitpointstoapreviously trustedCAwiththesamename.Thissituationisrarebutmighthappenifacertificateserviceis addedandremoved,andthenaddedagainonthedomaincontroller.Toremoveoldcertificates andissueanewone,followtheinstructionsinstep2. 308Troubleshooting
Rebooting(Resetting)iLO Insomecases,itmightbenecessarytorebootiLO;forexample,ifiLOisnotrespondingtothe browser. RebootingiLOdoesnotmakeanyconfigurationchanges,butendsallactiveconnectionstoiLO. IMPORTANT:TheiLOwebinterfaceandtheROM-basedsetuputilitiessometimesusestheterm iLOresettomeananiLOreboot. TorebootiLO,useoneofthefollowingmethods: •ClickResetontheInformation→DiagnosticspageintheiLOwebinterface.Formore information,see“UsingiLOdiagnostics”(page180). •UsetheCLIorHPONCFG.Forinstructions,seetheHPiLO4ScriptingandCommandLine Guide. •TheHPInsightManagementAgents5.40andlaterhavetheabilitytoresetiLO.Selectthe ResetiLOoptionontheHPManagementAgentpageintheiLOsection. •ClickApplyontheNetwork→iLODedicatedNetworkPortorSharedNetworkPort→General pagetomanuallyforcetheiLOmanagementprocessortoreset.IftheApplybuttonisnot available,changeasetting,changeitback,andthenclickApplytoresetiLOwithoutchanging theconfiguration. •UsetheiLO4ConfigurationUtility.TheiLO4ConfigurationUtilityisavailableonlyonservers thatsupportUEFI.Forinstructions,see“ResettingiLObyusingtheiLO4ConfigurationUtility” (page309). •UsetheUIDbuttononsupportedHPProLiantGen9servers.Forinstructions,see“Rebooting iLOwiththeserverUIDbutton”(page311). Ifnoneofthesemethodsisavailableorworkingasexpected,youmustpowerdowntheserver anddisconnectthepowersuppliescompletely. ResettingiLObyusingtheiLO4ConfigurationUtility IfiLOisslowtorespond,youcanusetheiLO4ConfigurationUtilityResetiLOmenutoperforma reset. ResettingiLOdoesnotmakeanyconfigurationchanges,butitendsallactiveconnectionstoiLO. YoumusthavetheConfigureiLOSettingsprivilegetoresetiLOusingthismethod. ToresetiLO: 1.Optional:Ifyouaccesstheserverremotely,startaniLOremoteconsolesession. Youcanusethe.NETIRCorJavaIRC. 2.Restartorpowerontheserver. 3.PressF9intheHPProLiantPOSTscreen. TheSystemUtilitiesscreenappears. 4.FromtheSystemUtilitiesscreen,selectSystemConfiguration→iLO4ConfigurationUtility→Reset iLO. TheiLO4ConfigurationUtilitypromptsyoutoselectYESorNO. Generalinformation309
5.SelectYES,andthenpressEnter. TheiLO4ConfigurationUtilitypromptsyoutoconfirmtheresetrequest. WhenyouresetiLO,theiLO4ConfigurationUtilityisnotavailableagainuntilthenextreboot. 6.PressEnter. iLOresets.IfyouaremanagingiLOremotely,theremoteconsolesessionisautomatically ended. 310Troubleshooting