Integrated Lights-Out technology: enhancing the manageability of ProLiant servers technology brief

ManualsBrandsHP ManualsComputer AccessoriesHP Integrated Lights-Out 2 (iLO 2) Firmware for ProLiant G6 Servers

Abstract.............................................................................................................................................. 3

Integrated Lights-Out technology: Enhancing

the manageability of HP ProLiant Servers

technology brief, 7

edition

Introduction......................................................................................................................................... 3

Naming conventions and capabilities .................................................................................................... 3

Integrated Lights-Out architecture ........................................................................................................... 4

Firmware levels and upgrades ........................................................................................................... 4

Management processor overview....................................................................................................... 5

Integrated Lights-Out technologies.......................................................................................................... 7

Remote Console technologies ............................................................................................................ 7

Text-based remote console with first-generation iLO .......................................................................... 7

Text-based remote console with iLO 2 ............................................................................................. 7

Virtual Serial Port/Remote Serial Console........................................................................................ 8

Integrated Remote Console ............................................................................................................ 9

Console capture and replay........................................................................................................... 9

Shared remote console................................................................................................................ 10

Terminal Services ....................................................................................................................... 11

Virtual media................................................................................................................................. 11

Virtual folders ................................................................................................................................ 12

Web-based or scriptable virtual media ............................................................................................. 12

Power Management Capabilities......................................................................................................... 13

Virtual power control ...................................................................................................................... 13

Managing server power ................................................................................................................. 13

HP Power Regulator.................................................................................................................... 13

Power Meter .............................................................................................................................. 14

HP Power Capping..................................................................................................................... 14

HP Dynamic Power Capping ....................................................................................................... 15

Sensors and fan control .................................................................................................................. 16

Security ............................................................................................................................................ 16

Authorization and authentication ..................................................................................................... 17

Two-factor authentication............................................................................................................. 17

Directory services ....................................................................................................................... 17

Data encryption ............................................................................................................................. 18

SSL Certificate Import.................................................................................................................. 18

Data integrity................................................................................................................................. 18

Event generation for failed login attempts.......................................................................................... 19

Integration with other management tools .............................................................................................. 19

HP Systems Insight Manager ........................................................................................................... 19

SNMP....................................................................................................................................... 19

Discovery of management processors ........................................................................................... 19

Summary of content (24 pages)

PAGE 1
Integrated Lights-Out technology: Enhancing the manageability of HP ProLiant Servers technology brief, 7th edition Abstract.............................................................................................................................................. 3 Introduction......................................................................................................................................... 3 Naming conventions and capabilities ........................................................
PAGE 2
Power monitor............................................................................................................................ 20 Single sign-on from HP SIM to iLO ................................................................................................ 20 Integration with deployment tools ..................................................................................................... 20 Standards-based management........................................................................
PAGE 3
Abstract HP Integrated Lights-Out is an autonomous management subsystem residing on select HP ProLiant and BladeSystem server platforms. It provides system administrators with secure remote management capabilities, regardless of server status or location. This technology brief discusses the architecture of Integrated Lights-Out processors. It also describes key technologies that provide comprehensive remote management capabilities.
PAGE 4
Integrated Lights-Out architecture The iLO architecture consists of an independent firmware-based operating environment and a management processor. The management processor resides on the system board, using auxiliary power and operating independently of the host processor and the OS.
PAGE 5
Management processor overview As indicated in Figure 1, the iLO 2 management processor includes the following chip architecture: • 66-MHz RISC processor core with separate instruction set and integrated data cache • Memory controller • 4 megabytes (MB) of flash ROM • 16 megabytes of memory (SDRAM) • 24-MHz digital video redirection engine • Dedicated 10/100 or at host NIC speed Like the first-generation iLO processor, iLO 2 is a 32-bit, PCI-based processor.
PAGE 6
Selected servers offer a Shared Network Port (SNP) that allows network access to both iLO and the host server through a single network port (see Figure 2), rather than dedicating a second port to the management processor. An SNP allows HP ProLiant servers to deliver optimal performance with fewer required ports, which can reduce recurring port use costs. With the SNP, iLO network traffic can be routed through a sideband connection on one of the NIC interfaces.
PAGE 7
Host power and fault isolation logic monitors the host system for any unexpected behavior such as a system power fault or PCI bus fault. The iLO management processor records power faults and operates normally on auxiliary power to provide key functions such as web browser access, alerting, and access to event logs. The host power and fault isolation logic allows either the management processor or the host processor to reset independently of the other.
PAGE 8
an iLO Advanced license for ProLiant ML, DL and SL-systems, but that functionality is included with the iLO Blade Standard package for ProLiant BL systems. Administrators can access the iLO Virtual Serial Port using Remote Serial Console in the iLO 2 firmware. They can use the iLO Virtual Serial Port for text console access during POST and OS operation.
PAGE 9
Figure 3. This diagram represents an overview of how the iLO 2 digital video redirection (DVR) engine operates. An encoding process uses video characteristics such as changed/unchanged data and repetition/alternation for efficient video compression. Before it is sent over the network to the remote console, the video is encrypted and packetized. Either a Java or an ActiveX application on the client decodes and displays the data.
PAGE 10
The iLO 2 processor stores captured video data in an internal buffer area for boot sequences and for ASR-2 and OS faults. With additional configuration, iLO 2 can export the captured data to an external file after the buffer fills. The external file is stored on a web server on the network. The iLO 2 processor continues to export captured files to the specified web server every time there is a reboot or an OS failure, as long as space is available.
PAGE 11
Terminal Services The iLO processor can use the OS functionality of Windows Terminal Services 3 to increase the responsiveness of the graphical remote console. Terminal Services provide a software-based remote console as long as the host OS is functioning normally. If the host OS is not functioning normally, the iLO processor can revert to the iLO hardware-based remote console. The iLO management processor accesses the Terminal Services application through the iLO passthrough service (Figure 5).
PAGE 12
ROM, upgrade device drivers, deploy an OS from network drives, create an emergency repair diskette, and perform disaster recovery of failed operating systems, among other tasks. The iLO processor uses a client-server model to perform virtual media functions. It streams the virtual media data across a live network connection between the remote management console and the host server. The virtual media Java applet provides the data to iLO as it is requested.
PAGE 13
Power Management Capabilities Virtual power control The iLO 2 processor allows administrators to power cycle a server remotely. Using a supported browser interface, a system administrator can use iLO 2 to remotely operate the power button of a host server as easily as pushing the physical power button. Virtual power support allows the user to power on, power off, and power cycle the server.
PAGE 14
Power Meter Being able to quantify how much power a server is actually using is the first step in managing power consumption at the server or facility level. Beginning with iLO 2 v 1.11, administrators can view actual system power consumption data in watts and Btu/hr. A snapshot of this historical data (Figure 6) is accessible from all iLO 2 interfaces. The data can be recorded and saved every 5 minutes. For example, a graphical display of power consumption can be retained up to 24 hours. Figure 6.
PAGE 15
HP Dynamic Power Capping Some ProLiant servers support HP Dynamic Power Capping. Dynamic Power Capping uses special hardware in the server to bring a server experiencing a sudden increase in workload back under its power cap in less than one-half second. This prevents any surge in power demand that could cause an enterprise-class circuit breaker to trip.
PAGE 16
Support for Dynamic Power Capping requires HP ProLiant hardware and the following system firmware: • System BIOS 2008.11.01 or later • iLO 2 version 1.70 or later • Firmware version 3.4 or greater for HP ProLiant G5 and c-Class blades servers • Firmware version 2.32 or greater for HP ProLiant G6 servers in ML and DL form factors • Onboard Administrator firmware version 2.32 or later for HP BladeSystem enclosures For more information on Dynamic Power Capping, refer to the support matrix at http://h18004.
PAGE 17
Because administrators generally use a network connection to access iLO, HP carefully considered security requirements of the enterprise and built iLO to provide secure ways to perform the following functions: • Authorize and authenticate users • Encrypt data transmitted over the network between the managed server and the management console • Ensure data integrity by using digital signatures and digitally-signed firmware • Alert administrators of potential login attacks Authorization and authentication Aut
PAGE 18
Using directory services simplifies user administration in multiple ways: • Provides a single repository for all user accounts and Lights-Out devices. This allows IT managers to scale their infrastructure easily by managing all users’ rights—including those for iLO management processors—in a single database. • Uses the same security (password) policies as the rest of the network.
PAGE 19
Event generation for failed login attempts The iLO processor tracks all login attempts and maintains a record of all login failures. When login attempts fail, iLO generates alerts and can send them to a remote management console such as HP Systems Insight Manager. In addition, iLO adds progressive delays at each failed login attempt.
PAGE 20
Figure 8. This diagram shows the HP iLO 2 device list accessible using HP Systems Insight Manager. Power monitor Using the Insight Power Manager plug-in, administrators can track overall power use from multiple servers and use this information to set power caps on groups of servers. Single sign-on from HP SIM to iLO HP SIM can provide single sign-on capabilities to iLO, allowing administrators to browse directly from HP SIM to iLO, bypassing an intermediate login step. Single-sign-on requires HP SIM v 5.
PAGE 21
available in the more information section at the end of this document. For example, administrators can automatically power off servers, mount virtual CD images, and power on servers to deploy an OS to multiple servers. Or administrators can use these tools to browse to an iLO processor and access the iLO interface. This provides easy access to the iLO management features of HP ProLiant server systems.
PAGE 22
Administrators who want to use text-based controls can access the iLO and iLO2 processors using SSH or telnet. If the OS supports it, they can also use the virtual serial port infrastructure, as described in the section “Virtual Serial Port/Remote Serial Console.” The text-based interface allows administrators to use the SMASH SM CLP to configure or update iLO and execute iLO processes.
PAGE 23
For more information Visit the following links to learn more about Integrated Lights-Out and related remote management technologies. Resource description Web address Integrated Lights-Out home page www.hp.com/go/ilo iLO support and downloads www.hp.com/support/ilo www.hp.com/support/ilo2 Industry-standard servers technology papers www.hp.com/servers/technology HP Integrated Lights-Out security http://h20000.www2.hp.com/bc/docs/support/Su pportManual/c00212796/c00212796.
PAGE 24
Call to action Send comments about this paper to TechCom@HP.com. © 2004, 2005, 2006, 2007, 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.