HP Ilo 4 User Guide

							7.Forserverfirmwareupdatesonly:Forthenewfirmwaretotakeeffect,sometypesoffirmware
updatesrequireaniLOreset,asystemreset,oraserverreboot.Therequirementsforeach
firmwaretypefollow:
•HPProLiantSystemROM(BIOS)—Requiresaserverreboot.
•SLChassisFirmware(PowerManagement)—RequiresanSLChassisreset,whichis
triggeredautomatically.
•PowerManagementController—DoesnotrequireaniLOresetorserverreboot.
•SystemProgrammableLogicDevice(CPLD)—Requiresaserverreboot.
TIP:Toconfirmthatthenewfirmwareisactive,checktheversionontheSystem
Information→Firmwarepage.
IfanerroroccursduringaniLOfirmwareupdate,see“UnabletoupgradeiLOfirmware”(page
333).
IfaniLOfirmwareupdateiscorruptedorcanceled,andiLOiscorrupted,see“iLOnetworkFailed
FlashRecovery”(page334).
Usinglanguagepacks
LanguagepacksenableyoutoeasilyswitchtheiLOwebinterfacefromEnglishtoasupported
languageofyourchoice.LanguagepackscurrentlyprovidetranslationsfortheiLOwebinterface,
.NETIRC,andJavaIRC.
Considerthefollowingwhenusinglanguagepacks:
•YoumusthavetheConfigureiLOSettingsprivilegetoinstallalanguagepack.
•Youcaninstallonlyonelanguagepack.Uploadinganewlanguagepackreplacesthecurrently
installedlanguagepack,regardlessofthelanguagepackversion.
•ThelanguagepackfirmwareisindependentoftheiLOfirmware.SettingiLOtothefactory
defaultsettingsdoesnotremoveaninstalledlanguagepack.
•TheJavaIRCand.NETIRCusethelanguageofthecurrentiLOsession.
•ForlocalizationsupportwiththeJavaIRConWindowssystems,youmustselectthecorrect
languageintheRegionalandLanguageOptionsControlPanel.
•ForlocalizationsupportwiththeJavaIRConLinuxsystems,makesurethatthefontsforthe
specifiedlanguageareinstalledandavailabletotheJRE.
•Ifaninstalledlanguagepackdoesnotincludethetranslationforatextstring,thetextis
displayedinEnglish.
•WhenyouupdatetheiLOfirmware,HPrecommendsdownloadingthelatestlanguagepack
toensurethatthelanguagepackcontentsmatchtheiLOwebinterface.
iLO4firmwareversion1.20orlaterrequiresversion1.20orlateroftheiLOlanguagepack.
•iLOusesthefollowingprocesstodeterminethelanguageofyoursession:
1.IfyoupreviouslyloggedintotheiLOwebinterfaceonthesamecomputerusingthesame
browser,andyouhavenotclearedthecookies,thelanguagesettingofthelastsession
withthatiLOprocessorisused.
2.Ifthereisnocookie,thecurrentbrowserlanguageisusedifitissupportedbyiLOand
therequiredlanguagepackisinstalled.ThesupportedlanguagesareEnglish(en),
Japanese(ja),andSimplifiedChinese(zh).
3.InternetExploreronly:Ifthebrowserlanguageisnotsupported,theOSlanguageisused
ifthelanguageissupportedbyiLO,andtherequiredlanguagepackisinstalled.
Usinglanguagepacks41  
						

							4.Ifthereisnocookie,andthebrowserorOSlanguageisnotsupported,iLOusesthe
configureddefaultlanguage.Formoreinformation,see“Configuringthedefaultlanguage
settings”(page43).
Installingalanguagepack
1.Navigatetothefollowingwebsite:http://www.hp.com/support/ilo4.
2.Downloadthelanguagepacktoyourlocalcomputer.
3.NavigatetotheAdministration→AccessSettings→Languagepage.
4.ClickBrowse(InternetExplorerorFirefox)orChooseFile(Chrome)intheUploadLanguage
Packsection.
5.Selectthedownloadedlanguagepack,andthenclickOpen.
Thefollowingmessageappears:
Only one language pack is supported at a time. If a language pack
is already installed, it will be replaced with this upload. iLO will
automatically reboot after installing the new language pack. Are
you sure you want to install now?
6.ClickOKtocontinue.
Ifyouhaveapreviouslyinstalledlanguagepack,thislanguagepackwillreplaceit.
7.ClickUpload.
iLOwillautomaticallyrebootafterinstallingalanguagepack.Thiswillendyourbrowser
connectionwithiLO.
Itmighttakeseveralminutesbeforeyoucanre-establishaconnection.
42ConfiguringiLO 
						

							Selectingalanguagepack
Afteryouinstallalanguagepack,youcanselectitinthefollowingways:
•Fromtheloginpage.
•FromthetoolbarlocatedonthebottomrightsideoftheiLOwebinterface.
•FromtheAdministration→AccessSettings→Languagepage.Forinstructions,see“Configuring
thecurrentlanguagesettings”(page43).
Configuringthedefaultlanguagesettings
TosetthedefaultlanguagefortheusersofthisinstanceoftheiLOfirmware:
1.NavigatetotheAdministration→AccessSettings→Languagepage.
2.SelectavalueintheDefaultLanguagemenu.
TheavailablelanguagesareEnglishandanyotherlanguageforwhichalanguagepackis
installed.
3.ClickApply.
Thefollowingmessageappears:
Default language changed.
InsubsequentiLOwebinterfacesessions,ifthereisnobrowsercookiefromaprevioussession,
andthebrowserorOSlanguageisnotsupported,theiLOwebinterfaceusestheconfigured
defaultlanguage.
Configuringthecurrentlanguagesettings
Tosetthelanguageofthecurrentbrowsersession:
1.NavigatetotheAdministration→AccessSettings→Languagepage.
2.SelectavalueintheCurrentLanguagemenu.
TheavailablelanguagesareEnglishandanyotherlanguageforwhichalanguagepackis
installed.
3.ClickApply.
TheiLOwebinterfaceforthecurrentbrowsersessionchangestothelanguageselectedin
Step2.
Uninstallingalanguagepack
1.NavigatetotheAdministration→AccessSettings→Languagepage.
Usinglanguagepacks43 
						

							2.ClicktheUninstallbuttonintheInstalledLanguagessection.
Thefollowingmessageappears:
Applying new settings requires an iLO reset. 
Would you like to apply the new settings and reset iLO now?
3.ClickOKtocontinue.
iLOresetsandclosesyourbrowserconnection.
Itmighttakeseveralminutesbeforeyoucanre-establishaconnection.
iLOlicensing
HPiLOstandardfeaturesareincludedwitheveryHPProLiantservertosimplifyserversetup,perform
healthmonitoring,monitorpowerandthermalcontrol,andfacilitateremoteadministration.
HPiLOlicensesactivatefunctionalitysuchasgraphicalRemoteConsolewithmultiusercollaboration,
videorecord/playback,andmanymorefeatures.
TounlockiLOlicensedfeatures,simplychooseandinstallthelicensethatbestsuitsyourcompany's
infrastructure.
Thefollowinglicensetypesareavailable:
•iLOAdvanced—EnablesthefullsetofiLOfeatures.iLOAdvancedisavailableforallHP
ProLiantGen8andGen9servers.
◦iLOAdvancedSingleServerLicense
◦iLOAdvancedElectronicLicense
◦iLOAdvancedFlexibleQuantityLicense
◦iLOAdvancedVolumeLicense
•iLOEssentials—EnablestheiLOIntegratedRemoteConsole,VirtualMedia,andemailalerts.
iLOEssentialsisavailableonallHPProLiantGen8e-seriesservers,Microservers,andGen9
100seriesandlowerseries.
•iLOScale-Out—EnablesthefollowingiLOremotemanagementfeatures:Textcons,Power
Management,VirtualSerialPortlog,emailalerts,andRemoteSyslog.iLOScale-Outisavailable
onallHPProLiantGen8andGen9SLandBLservers.
Forinformationaboutpurchasinglicenses,seethefollowingwebsite:http://www.hp.com/go/
ilo/licensing.
Foralistofthefeaturesthatareincludedwitheachlicense,see“iLOlicenseoptions”(page342).
ConsiderthefollowingaboutiLOlicenses:
•YoumusthavetheConfigureiLOSettingsprivilegetoinstallalicense.
•iLOlicensesareversionless,meaningregardlessoftheversionofiLOyouhaveenabled(iLO
2,iLO3,oriLO4),aniLOlicensecanbeapplied.Forfeaturesthatarespecifictotheversion
ofiLOonyourProLiantserver,see“iLOlicenseoptions”(page342).
•IfyoupurchaseaniLOlicensewithanyInsightControlsoftwaresuite,HPprovidestheTechnical
SupportandUpdateService.Formoreinformation,see“Supportandotherresources”
(page339).
•IfyoupurchaseaniLOlicenseasaone-timeactivationoflicensedfeatures,youmustpurchase
futurefunctionalupgrades.
44ConfiguringiLO 
						

							•OneiLOlicenseisrequiredforeachserveronwhichtheproductisinstalledandused.Licenses
arenottransferable.YoucannotlicenseanHPProLiantSL/ML/DLserverbyusinga
BladeSystemlicense.
•HPwillcontinuetoprovidemaintenancereleaseswithfixes,aswellasiLOstandardfeature
enhancements,atnoextracharge.
FreeiLO60-dayevaluationlicense
AfreeiLOevaluationlicenseisavailablefordownloadfromthefollowingHPwebsite:http://
www.hp.com/go/tryinsightcontrol.
Whenusinganevaluationlicense,notethefollowing:
•TheevaluationlicenseactivatesandenablesaccesstoiLOlicensedfeatures.
•Theevaluationlicensekeyisa10-seatkey,meaningitcanbeusedon10differentservers.
•Whentheevaluationperiodhasexpired,youriLOsystemwillreturntothestandard
functionality.
•OnlyoneevaluationlicensecanbeinstalledforeachiLOsystem.TheiLOfirmwarewillnot
acceptthereapplicationofanevaluationlicense.
•Theevaluationlicenseexpires60daysaftertheinstallationdate.HPwillnotifyyoubyemail
whenyourlicenseisabouttoexpire.
InstallinganiLOlicensebyusingabrowser
YoumusthavetheConfigureiLOSettingsprivilegetoinstallalicense.
1.NavigatetotheAdministration→Licensingpage.
TheLicensingpageopens.
2.ReviewthelicenseagreementprovidedwithyourHPLicensePackoptionkit.
3.EnterthelicensekeyintheActivationKeybox.
PresstheTabkeyorclickinsideasegmentoftheActivationKeyboxtomovebetween
segments.Thecursoradvancesautomaticallywhenyouenterdataintothesegmentsofthe
ActivationKeybox.
4.ClickInstall.
TheEULAconfirmationopens.TheEULAdetailsareavailableintheHPLicensePackoption
kit.
iLOlicensing45 
						

							5.ClickOK.
Thelicensekeyisnowenabled.
Fortipsontroubleshootinglicenseinstallation,see“Troubleshootinglicenseinstallation”(page
321).
Viewinginstalledlicenses
Toviewinformationaboutinstalledlicenses,navigatetotheAdministration→Licensingpage.
Thefollowinginformationisdisplayedforeachinstalledlicense:
•License—Thelicensename
•Status—Thelicensestatus
•ActivationKey—Theinstalledkey
ManagingiLOusersbyusingtheiLOwebinterface
TheiLOenablesyoutomanageuseraccountsstoredlocallyinthesecureiLOmemoryanddirectory
groupaccounts.UseMMCorConsoleOnetomanagedirectory-baseduseraccounts.
iLOsupportsupto12userswithcustomizableaccessrights,loginnames,andadvancedpassword
encryption.Privilegescontrolindividualusersettings,andcanbecustomizedtomeetuseraccess
requirements.
Tosupportmorethan12users,youmusthaveaniLOlicense,whichenablesintegrationwithan
unlimitednumberofdirectory-baseduseraccounts.FormoreinformationaboutiLOlicensing,see
thefollowingwebsite:http://www.hp.com/go/ilo/licensing.
Thefollowingprivilegesarerequiredforuseranddirectorygroupadministration:
•AdministerUserAccounts—Requiredforadding,modifying,anddeletingusers.Ifyoudonot
havethisprivilege,youcanviewyourownsettingsandchangeyourpassword.
•ConfigureiLOSettings—Requiredforadding,modifying,anddeletingdirectorygroups.Ifyou
donothavethisprivilege,youcanviewdirectorygroups.
NOTE:YoucanalsomanageuserswiththeiLORBSU.Formoreinformation,see“Managing
iLOuseraccountsbyusingiLORBSU”(page26).
Viewinglocaluseraccounts
Toviewlocalusers,navigatetotheAdministration→UserAdministrationpage.
46ConfiguringiLO 
						

							TheLocalUserstableshowstheloginnames,usernames,andassignedprivilegesofeach
configureduser.Movethecursoroveranicontoseetheprivilegename.Theavailableprivileges
follow:
•RemoteConsoleAccess—EnablesausertoremotelyaccessthehostsystemRemoteConsole,
includingvideo,keyboard,andmousecontrol.
•VirtualMedia—EnablesausertousetheVirtualMediafeatureonthehostsystem.
•VirtualPowerandReset—Enablesausertopower-cycleorresetthehostsystem.These
activitiesinterruptthesystemavailability.Auserwiththisprivilegecandiagnosethesystem
byusingtheGenerateNMItoSystembutton.
•ConfigureiLOSettings—EnablesausertoconfiguremostiLOsettings,includingsecurity
settings,andtoremotelyupdatetheiLOfirmware.Thisprivilegedoesnotenablelocaluser
accountadministration.
AfteriLOisconfigured,revokingthisprivilegefromalluserspreventsreconfigurationwiththe
webinterface,HPQLOCFG,ortheCLI.UserswhohaveaccesstoiLORBSU,theUEFISystem
Utilities,orHPONCFGcanstillreconfigureiLO.OnlyauserwhohastheAdministerUser
Accountsprivilegecanenableordisablethisprivilege.
•AdministerUserAccounts—Enablesausertoadd,edit,anddeletelocaliLOuseraccounts.
Auserwiththisprivilegecanchangeprivilegesforallusers.Ifyoudonothavethisprivilege,
youcanviewyourownsettingsandchangeyourownpassword.
Viewingdirectorygroups
Toviewdirectorygroups,navigatetotheAdministration→UserAdministrationpage.
TheDirectoryGroupstableshowsthegroupDN,groupSID,andtheassignedprivilegesforthe
configuredgroups.Movethecursoroveranicontoseetheprivilegename.Theavailableprivileges
follow:
•LoginPrivilege—EnablesmembersofagrouptologintoiLO.
•RemoteConsoleAccess—EnablesuserstoremotelyaccessthehostsystemRemoteConsole,
includingvideo,keyboard,andmousecontrol.
•VirtualMedia—EnablesuserstousetheVirtualMediafeatureonthehostsystem.
ManagingiLOusersbyusingtheiLOwebinterface47 
						

							•VirtualPowerandReset—Enablesuserstopower-cycleorresetthehostsystem.These
activitiesinterruptthesystemavailability.Userswiththisprivilegecandiagnosethesystem
byusingtheGenerateNMItoSystembutton.
•ConfigureiLOSettings—EnablesuserstoconfiguremostiLOsettings,includingsecurity
settings,andtoremotelyupdateiLOfirmware.
AfteriLOisconfigured,revokingthisprivilegefromalluserspreventsreconfigurationwiththe
webinterface,HPQLOCFG,ortheCLI.UserswhohaveaccesstoiLORBSU,theUEFISystem
Utilities,orHPONCFGcanstillreconfigureiLO.OnlyauserwhohastheAdministerUser
Accountsprivilegecanenableordisablethisprivilege.
•AdministerUserAccounts—Enablesuserstoadd,edit,anddeletelocaliLOuseraccounts.
Addingoreditinglocaluseraccounts
UserswhohavetheAdministerUserAccountsprivilegecanaddoreditiLOuseraccounts.
Toaddoreditalocaluseraccount:
1.NavigatetotheAdministration→UserAdministrationpage.
2.Dooneofthefollowing:
•ClickNewintheLocalUserssection.
•SelectauserintheLocalUserssection,andthenclickEdit.
TheAdd/EditLocalUserpageopens.
3.ProvidethefollowingdetailsintheUserInformationsection:
•UserNameappearsintheuserlistontheUserAdministrationpage.Itdoesnothaveto
bethesameastheLoginName.Themaximumlengthforausernameis39characters.
48ConfiguringiLO 
						

							Theusernamemustuseprintablecharacters.Assigningdescriptiveusernamescanhelp
youtoeasilyidentifytheownerofeachloginname.
•LoginNameisthenameyouusewhenloggingintoiLO.Itappearsintheuserlistonthe
UserAdministrationpage,ontheiLOOverviewpage,andinlogs.TheLoginNamedoes
nothavetobethesameastheUserName.Themaximumlengthforaloginnameis39
characters.Theloginnamemustuseprintablecharacters.
•PasswordandPasswordConfirmsetandconfirmthepasswordthatisusedforlogging
intoiLO.TheminimumlengthforapasswordissetontheAccessSettingspage.The
maximumlengthforapasswordis39characters.Enterthepasswordtwiceforverification.
Formoreinformationaboutpasswords,see“Passwordguidelines”(page49).
4.Selectfromthefollowingprivileges.
•RemoteConsoleAccess
•VirtualMedia
•VirtualPowerandReset
•ConfigureiLOSettings
•AdministerUserAccounts
TIP:Clicktheselectallcheckboxtoselectalloftheavailableuserprivileges.
Formoreinformationabouteachprivilege,see“Viewinglocaluseraccounts”(page46).
5.Dooneofthefollowing:
•ClickAddUsertosavethenewuser.
•ClickUpdateUsertosavetheuseraccountchanges.
Passwordguidelines
HPrecommendsthatyoufollowthesepasswordguidelines:
•Passwordsshould:
Neverbewrittendownorrecorded◦
◦Neverbesharedwithothers
◦Notbewordsfoundinadictionary
◦Notbeobviouswords,suchasthecompanyname,productname,username,orlogin
name
•Passwordsshouldhaveatleastthreeofthefollowingcharacteristics:
Onenumericcharacter◦
◦Onespecialcharacter
◦Onelowercasecharacter
◦Oneuppercasecharacter
DependingontheMinimumPasswordLengthsettingontheAccessSettingspage,thepassword
canhaveaminimumofzerocharacters(nopassword)andamaximumof39characters.The
defaultMinimumPasswordLengthiseightcharacters.
ManagingiLOusersbyusingtheiLOwebinterface49  
						

							IMPORTANT:HPdoesnotrecommendsettingtheMinimumPasswordLengthtofewerthaneight
charactersunlessyouhaveaphysicallysecuremanagementnetworkthatdoesnotextendoutside
thesecuredatacenter.ForinformationaboutsettingtheMinimumPasswordLength,see
“Configuringaccessoptions”(page59).
IPMI/DCMIusers
TheiLOfirmwarefollowstheIPMI2.0specification.WhenyouaddIPMI/DCMIusers,thelogin
namemustbeamaximumof16characters,andthepasswordmustbeamaximumof20characters.
WhenyouselectiLOuserprivileges,theequivalentIPMI/DCMIuserprivilegeisdisplayedinthe
IPMI/DCMIPrivilegebasedonabovesettingsbox.
•User—Auserhasread-onlyaccess.AusercannotconfigureorwritetoiLO,orperformsystem
actions.
ForIPMIUserprivileges:Disableallprivileges.Anycombinationofprivilegesthatdoesnot
meettheOperatorlevelisanIPMIUser.
•Operator—Anoperatorcanperformsystemactions,butcannotconfigureiLOormanageuser
accounts.
ForIPMIOperatorprivileges:EnableRemoteConsoleAccess,VirtualPowerandReset,and
VirtualMedia.AnycombinationofprivilegesgreaterthanOperatorthatdoesnotmeetthe
AdministratorlevelisanIPMIOperator.
•Administrator—Anadministratorhasreadandwriteaccesstoallfeatures.
ForIPMIAdministratorprivileges:Enableallprivileges.
Administeringdirectorygroups
iLOenablesyoutoviewiLOdirectorygroupsandmodifysettingsforthosegroups.Youmusthave
theConfigureiLOSettingsprivilegetoaddoreditdirectorygroups.UsetheAdd/EditDirectory
GrouppagetoaddoreditiLOdirectorygroups.
Toaddoreditadirectorygroup:
1.NavigatetotheAdministration→UserAdministrationpage.
2.Dooneofthefollowing:
•ClickNewintheDirectoryGroupssection.
•SelectagroupintheDirectoryGroupssection,andthenclickEdit.
TheAdd/EditDirectoryGrouppageopens.
50ConfiguringiLO