HP MicroServer Remote Access Card User Manual Part Number: 664489-002 February 2013 Edition: 2
© Copyright 2011, 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Microsoft and Windows are U.S.
Contents Operational Overview .......................................................................................................................... 5 Guide Overview ......................................................................................................................................... 5 BMC Overview ........................................................................................................................................... 5 Server management through IPMI version 2.
Viewing sensor data from a web browser..................................................................................... 44 Viewing sensors data from Rom-Based setup utility ........................................................................ 44 System Event Log ................................................................................................................................. 45 Accessing the system event log from a web browser ...........................................................
Operational Overview Guide Overview The Remote Access Card provides multiple ways to configure, update, and operate servers remotely. This Remote Access Card User Guide describes these features and how to use them with the browserbased interface and RBSU. The SMASH CLP is designed for users who prefer a non-graphical interface. The SMASH CLP chapter describes the syntax and the ways to remote control server.
interface provides a set of I/O mapped communications registers. The default system base address for the I/O mapped KCS Interface is 0xCA2 and is byte aligned at this system address. The KCS interface is accessible to SMS software that is running on the local system. Examples of compatible SMS software applications are as follows: IPMI version 2.0 Command Test Tool is a low-level MS-DOS command line tool that enables hex formatted IPMI commands to be sent to an IPMI BMC that implements the KCS interface.
Key: S = authenticated session setup (correct role, username and password/key required to establish session) A = authenticated payload data supported. E = authentication and encrypted payload data supported.
Platform Event Filtering (PEF) and Alert Policies PEF (IPMIv2.0, Chapter 17 Platform Event Filtering) will be supported to allow alerting in response to configured system events. On the HP MicroServer platform, the following event filters and alert policies will be implemented by default. Any additional filters or alert policies desired by the user must be configured using the Set PEF Configuration Parameters command discussed in Section 30.3 of the IPMIv2.0.
BMC SETUP Quick setup To quickly setup BMC using the default settings for BMC features, follow the steps below: 1. Prepare the hardware installation — Refer to the MicroServer Remote Access Card Installation Instructions for detail 2. If you are not using dynamic IP addressing, use the BIOS RBSU to configure a static IP address (“Configuring the IP address”). 3. Methods for Log in: Users can either: - Log into BMC from a supported browser (“Logging in to BMC Web for the first time”).
4. Install a new Remote Access Card: • Align the card with the system PCIE slot • Press the card down to ensure the full connection with the board. 5. Follow the steps of installing the system tray. 6. Connect the VGA cable to the VGA port on the Remote Access Card. 7. Power on the server, it will have BMC functions. Configuring the IP address The management processor acquires an IP address and subnet mask using either a dynamic or static process.
1. Power on the server by pressing the Power on/Off button on the front panel 2. When POST prompts the message “press F10 for Rom-based setup Utility”, press the F10 key, the main screen of the BIOS Setup Utility appears 3. Press the right arrow (→) key to na vig a te to the“Advanced” menu. 4. Press the down arrow (↓) key to scroll to“IPMI Configuration”. Press the “Enter” key. 5. Press the down arrow (↓) key to scroll the“Set LAN Configuration” menu. Press the “Enter” key.
6. Set the “BMC LAN Configuration” to “DHCP” 7. Press the F10 key to save and exit RBSU To configure a static IP address, use the RBSU with the following procedure to disable DHCP and configure the IP address and the subnet mask: 1. Power on the server by pressing the Power on/Off button on the front panel 2. When POST prompts the message “press F10 for Rom-based setup Utility”, press the F10 key, the main screen of the BIOS Setup Utility appears 3.
8. Press the F10 key to save and exit RBSU. 9. With IP address, use SSH to log in to the remote management CLP, or use a web browser to access the HTML interface. Logging in to BMC Web for the first time BMC is configured with a default user name and password. 1. BMC is connected to the network through a NIC port (RJ45) on the Remote Access Card. If you want to access BMC via LAN, you need to connect the BMC LAN port and the switch via a network cable. 2. Get “BMC LAN configuration” from the RBSU 3.
For security reasons, HP recommends changing the default settings after logging in to BMC for the first time. The default values are: • User name—admin • Password—password After input the default user name and password and click “sign in”, then you will log it successfully. Logging in to BMC SMCLP for the first time 1. Get BMC IP address first as last section.
2. User SSH client to connect the BMC via the IP address. Enter the “Host Name” (IP address), and the “User Name” (such as admin).Then click the “Connect” button. 3. If connect OK, it will prompt “Enter Password”. And enter the password.
4. Then it will login the CLP console.
Configuring BMC BMC Firmware Update User Guide There are two methods to update BMC firmware. • Update via Web UI This method just can be used when old BMC firmware work normally and its Web UI can be login. • Update under DOS mode When BMC firmware crashes, you need to use this method to update BMC firmware. Update BMC Firmware via Web UI 1. Log in the BMC Web, and you can update BMC firmware via “Update” web page. 2. Click “Browse” button, select BMC firmware (Phrixus.bmc.
3. Then click “Upload” button then click “OK” to upload firmware 4. Update is running.
5. Update is finished. 6. Connect the Web UI again to check the current BMC firmware version.
Update BMC Firmware under DOS mode 1. Prepare a bootable USB flash drive or hard drive 2. Copy the update.bat, socflash.exe, DOS4GW.EXE and the BMC firmware image (all.xxx.bin) to the USB flash drive or hard drive. Make sure they are in the same folder/directory. 3. Boot the system to DOS, and run update.bat under DOS.
4. Update is running…. 5. Update is finished.
6. Connect the Web UI to check the current BMC firmware version. Update Firmware under Windows 1. Copy the "socflash.exe", "update.bat", the BMC firmware image (all.xxx.bin) and corresponding driver(x86 and x64) into the same directory under Windows.
2. Click update.bat to update firmware. 3. Connect the Web UI to check the current BMC firmware version.
Update Firmware under Linux 1. Copy the BMC firmware image (all.xxx.bin) and all files in “Linux” folder (socflash/Linux) into the same directory under Linux 2. Click “update.
3. Update is running….. 4. Connect the Web UI to check the current BMC firmware version.
User account and access The Server supports three accounts types: User, Administrator and Operator. Different account types have different levels of permissions to view and control features. Administrator User Account is a user privilege that allows you to add, modify, and delete local BMC user accounts. It also allows you to alter privileges for all users, including granting all permissions to yourself. Without this privilege, you can only view your own settings and changes your own password.
Using Remote Access Card Using BMC Web UI Browser main menu options Using a web browser, you can access all of the links to do remote control Title Item Properties Configuration HP ProLiant MicroServer Remote Access Card Sessions Update Utilities Power Server Information Thermal System Event Log Event Management Options Description / Get current firmware version of Remote Access Card Network Enable to view and modify network settings for BMC Network Security Include four fields to allow vie
messages that it receives Virtual KVM & Virtual Media Trap Settings Enables you to specify destination addresses, and enable/disable SNMP alerts Email Settings Allows to enable email alert and specify email address to receive alert message / Accesses virtual media or the remote graphic console Properties This section provides current Firmware Version.
Network Interface Card Settings NIC Selection enables to select which LAN port to use. The default value is “dedicated”. MAC Address identifies this unique device on the network Auto Negotiation toggles on/off the auto negotiation of the connection speed and duplex mode. This is only applies if it is in dedicated NIC mode. Network Speed enables to set the network speed to 10Mb or 100Mb to match your network settings.
IPV4 Settings Use DHCP: DHCP Server is the IP address of the DHCP server. This field cannot be assigned. It is received from DHCP if DHCP is enabled. Subnet Mask: Use the subnet mask parameter to identify the subnet mask for the IPMI Port. IP Address is the BMC IP address. Use this parameter to assign a static IP address to BMC on your network. By default, the IP address is assigned by DHCP Gateway displays the IP address of the network gateway.
IP Address 1: The information will be appeared if checked auto-configuration. When autoconfiguration is disabled, the IP address needs to be entered by manually. IP Gateway: Specifies the gateway for the ProLiant MicroServer NIC. To change this setting, you must first uncheck the auto configuration checkbox. Link Local Address: Specifies the IPv6 address for the ProLiant MicroServer NIC IP Address 2: Specifies the additional IPv6 address for the ProLiant MicroServer NIC if one is available.
Network Security This page includes four fields for network security values. If you have the Administrator or Operator privilege level, you can modify the values and click the apply changes button to execute the change. The new values are available to the firewall immediately, but may not be utilized until the next security event occurs.
3. On the open dialog window, click “save” button to save file on your local system 4. Open the file csr.txt and copy the request number. 5. Build the CSR with Microsoft Certificate service or other OpenSSL tools to generate the certificate. 6. Choose advanced certificate request.
7. Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a base-64-encoded PKCS #7 file. 8. Copy the text from cert.txt and paste in to the form, then click “Submit” button.
9. The certificate will be pending. 10.
11. Open the requested certificate and select Details tab, then click “Copy to File” button. 12. Select the format as “Base-64 encoded X.509(.CER)” and click next.
13. Specify the path and the file name, and then click next button. 14. Click “Finish” button, the certificate has been exported successfully.
15. Upload certificate to BMC 16. Click “Upload Server Certificate” button to upload certificate Users This page displays all user information and configuration.
To add a user: 1. On the main menu navigation bar, click configuration -> Users. 2. Click any user ID number in the user ID column, 3. Select enable user, and enter the user name in the user name field 4. Enter password in the new password and confirm new password fields 5. Select User Role and IPMI LAN Privilege from the list 6. Click Apply Changes to take effect Services This page allows you to view the services parameters.
HTTP Port (Decimal number only) used by the embedded software that listens for a server connection. The default value is 80. HTTPS Port (Decimal number only) used by the embedded software that listens for a secure server connection. The default value is 443. Timeout is the time that a connection is allowed to remain idle (60 to 10800 seconds). The session is canceled when the time-out is reached. Max Sessions is the maximum number of simultaneous sessions allowed for this system.
Enable “IPMI Over LAN” by checking the box. Disable “IPMI Over LAN” by un-checking the box. Channel Privilege Level Limit is the maximum privilege level that can be accepted on the LAN channel (Administrator, Operator or User). Encryption Key allows from 0 to 20 two-digit Hex characters and no spaces. Sessions Use this page to view information about the active sessions. Additionally, privileged users can click on the trash can icon to kill an active session.
Update Preparation before online firmware flashing 1. Remote Access Card correctly installed in the connectors on the system board 2. Download the latest firmware version from website and save it on your local system. 3. The remote system needs to connect with network. Start to update firmware of Remote Access Card Following procedures are used to update firmware 1. Accessing the firmware page from a web browser 2. On the main menu navigation bar, click Update 3.
4. Click the Upload button. If the file is valid, all other sessions will be terminated and the image upload will begin. If the upload fails, a message will notify you to upload another file. For a successful upload, the current firmware version and the version of the new file will be displayed, as well as the Preserve Configuration checkbox, Update button and Cancel button. 5. Click the Update button to begin the firmware update process and view the update status.
Thermal The Server provide the monitoring of the current major sensors status, including system temperature and system fan. You can view the data for this feature on the Thermal Page through a web browser or through the BIOS Setup Utility. Viewing sensor data from a web browser To access this page from a web browser, on the main menu navigation bar, click Thermal. The thermal screen displays a snapshot of the temperature, fans sensor data, including sensor reading, warning threshold, failure threshold.
3. Press the down arrow (↓) key to scroll to“IPMI Configuration”. Press the Enter key. 4. Press the down arrow (↓)key to scroll to “System Temperature Configuration”. Press the Enter key. The system temperature sensors will be displayed. 5. Press ESC key to exit, and the down arrow (↓)key to scroll to “System Fan Health Information”. System Event Log The BMC provides the interface to the System Event Log (SEL) for the system.
Accessing the system event log from a web browser To access this page from a web browser, on the main menu navigation bar, click system event log. The system event log screen displays a snapshot of each system event, including the date/ time of the event occurred, severity of each event and brief description. Accessing the SEL from BIOS SETUP UTILITY 1. Press the F10 key during POST to enter the BIOS Setup Utility. 2. Press the right arrow (→) key to na vig a te to the“advanced” menu. 3.
Event Management Platform Events Platform Event Filtering (PEF) provides a mechanism for configuring the BMC to taking selected actions on event messages that it receives. These actions include operations such as reboot, Power Cycle, Power off, as well as triggering the generation of an alert. The event messages can be selected are Fan Critical Assert, Temperature Critical assert and Temperature Warning Assert Filter. To configure an action, select the desired action on desired event.
Trap Settings The trap setting configuration screen enables you to specify destination addresses, and enable/disable SNMP alerts, the event traps can issue an alert if an authentication failure occurs. Enable-- Enables or disables IPv4/IPV6 destination addresses IPv4 Destination—Specifies where to send the PET trap from the destinations your defined Note IPV4 address only support numerical values between 0-255.
Enable—Activate email address settings. Destination Email Address-- Specifies where receive the alert messages Email Description-- Configures the email alert description. Send alert-- Initiates the request to send a test email to the email address SMTP (e-mail) Server IP Address—Configures the SMTP email server IP address. Only numerical values between 0-255 are allowed.
3. Check the “Enabled” item, and click the “Apply Changes” button. 4. Click “Launch KVM Viewer” to start a KVM session.
There are five different menu bars in virtual KVM session window: File, View, Macros, Tools and Help. File--- Including two submenus Capture/Exit. The capture to file is used to capture an image and allows saving the file to a specified location on client. The exit submenu is used to close virtual session window. View---Refresh/Full Screen/Windowed Mode Select Refresh to update the view of the Video Viewer. This will result in the Viewer requesting a reference video frame from the server.
remote system. For example, when you press the Ctrl+Alt+Del keys on the physical keyboard in local system, the Task Manager of your local machine appears in addition to the task manager on the server. Tools---Session Options/Session user list/Stats The Session Options window allows you to control client configuration settings with additional general, mouse, video quality viewer control adjustments and stats.
3. The virtual media sessions will start according the device on your client (USB key, floppy etc.). Sharing a virtual media device (Floppy) 1 Prepare the media you want to add, take floppy device as example. Insert floppy disk in your local system. 2 Start a virtual Media session, the Virtual Media will display the list of devices available for mapping in Virtual Media session 3 Select the mapped checkbox for the device (A: Floppy), the option window will be opened.
4 The virtualized drive appears in remote system as a real drive with a new drive letter. Adding the ISO image 1. Start a virtual Media session and click the Add Image button 2. On the open dialog window, select the ISO image file in your local system and click open button.
3. Select the mapped checkbox for the ISO Image Note: If you want to read only the ISO image, please select read only checkbox before it is mapped. The ISO Image file is available in remote system Using BMC SMCLP The SMASH CLP is designed for users who prefer a non-graphical interface. The SMASH CLP chapter describes the syntax and the ways to remote control server. If you want to access BMC SMCLP, you need to have a SSH client (putty or others).
The “verbs” shows the all the supported verbs under current directory. And “targets” show all the directories under current directory. Use “cd target” command, you can enter the existent directory. Use “cd ..” you can return parent directory Get CPU/Memory Info Enter /admin1/system1/cpu1, and you can get CPU info with “show “verb.
Enter /admin1/system1/memory1, and you can get memory info with “show “verb.
Get Thermal Reading/Get Fan Speed Reading There are three thermal sensors and one fan sensors. The relations between the sensors and SMCLP target as below: “numericsensor1” is the target of “CPU_THERMAL” sensor. “numericsensor2” is the target of “NB_THERMAL” sensor. “numericsensor3” is the target of “AMBIENT_THERMAL” sensor. “numericsensor4” is the target of “SYS_FAN” sensor. Please notice the “unit” of reading. Below pictures show the read method and the related between SMCLP and the Web UI.
Get Fan Status The target “fan1” can show fan status. When fan works OK, it will show status (OK). When fan fails, it can report the fan fail status.
SMCLP Power Control Function Under “system1”, it has the verbs ”start”, “stop” and “reset”. “start” can power on the server, when the server in standby. “stop” can power off the server, when the server in working. “reset” can hard reset the server.
Frequently Asked Questions (FAQ) Recovering a BMC username and password BMC supports the IPMI command “Set User Password”. So when forgetting user name or password, you can use IPMI command to get the username and reset the user password under DOS or Linux. Example, There is a default user “admin” as the picture below: Under DOS: Get the user name: Ipmitool 20 18 46 2 (the value “2” is the User ID) Set user password: Ipmitool 20 18 47 02 02 + password.
About how to get ipmitool, please review “IPMI Messaging interface”. Verifying that the BMC firmware is functioning Open the front panel of the server chassis, and check the heartbeat LED (CR1, which location is near the “Aspeed” chipset) on the Remote Access Card. Normally, it should blink with one second interval. If not, the BMC firmware should work abnormally. Under OS, you can send IPMI command (Get Self Test Result) to BMC to check the whether the response values right or not.
Troubleshooting BMC Heartbeat LED Indicator The Heartbeat LED (CR1, which location is near the “Aspeed” chipset) is used to indicate whether the BMC work normally or not. When BMC firmware works normally, it should blink with one second interval. Otherwise, the BMC firmware should be in ill. When encounter this failure, you should remove the server power and reboot the server (unplug the server power cable, and then plug it again) to let BMC reboot.
failure event was asserted threshold going high AMBIENT_THERMAL: Temperature sensor, warning event was asserted When ambient temperature upper warning threshold going high AMBIENT_THERMAL: Temperature sensor, warning event was deasserted When ambient temperature return lower warning threshold AMBIENT_THERMAL: Temperature sensor, failure event was asserted When ambient temperature upper failure threshold going high SEL Rate: Other FRU sensor, Warning event was asserted Non-critical for SEL rate: The
Proxy server issues If the Web browser software is configured to use a proxy server, it will not connect to the BMC IP address. To resolve this issue, configure the browser not to use the proxy server for the IP address of BMC. For example, in Internet Explorer, select Tools-> Internet Options-> Connections-> LAN Settings> Advanced, and then enter the BMC IP address or DNS name in the Exceptions field.
Glossary BMC Baseboard Management Controller CLP Command Line Protocol DNS Domain Name System GUI Graphical user interface.