HP ProLiant Lights Out-100 User Guide For HP ProLiant G6 and G7 Servers HP Part Number: Part Number 616302-002 Published: September 2010 Edition: First
© Copyright 2010 Hewlett-Packard Development Company, L.P. Notices The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software.
Table of Contents 1 Operational overview....................................................................................................5 Overview.................................................................................................................................................5 New features...........................................................................................................................................5 Server management.............................................
Viewing sensor data from the BIOS Setup Utility...........................................................................29 Platform event filtering configuration.............................................................................................29 Platform event trap configuration...................................................................................................31 Using the system event log............................................................................................
1 Operational overview Overview This guide explains the standard and optional operational features of the HP Onboard Administrator Powered by Lights-Out 100 (LO100) available for the following HP ProLiant server models: • • • • • • • • • • • • • • ML110 G6 server ML150 G6 server DL120 G6 server DL160 G6 server DL160se G6 server DL170h G6 server DL180 G6 server SL160z G6 server SL170z G6 server SL2x170z G6 server ML110 G6 server DL120 G6 server HP ProLiant DL165 G7 Server HP ProLiant SL165z G7 Server New f
• • • • • • • Configure TCP/IP settings for the LO100 NIC Control user access Discover, identify, and launch LO100 from HP Systems Insight Manager Access LO100 and server controls using a standard browser or new industry-standard SMASH CLP command line interface Access command line help Manage the server with IPMI 2.0 and DCMI 1.0 compliant applications Access Telnet Not all of the features displayed and described in the guide are available on all systems.
2 Configuration Configuring LO100 with the LO100CFG utility The SmartStart Scripting Toolkit is a server deployment product that delivers unattended automated installation for high volume ProLiant server installations. Available in Win32 and Linux editions, the Toolkit supports ProLiant DL and ML 300, 500, 700 and ProLiant BL servers in both Windows and Linux environments and now includes limited ProLiant 100 series support.
Configuring user accounts LO100 supports four accounts types, with varying levels of permissions to view and control features. For more information on user accounts, see the "User administration" section. Two accounts are available by default, one of type administrator and one of type operator. The administrator account enables the user to execute the full set of CLP commands and change management processor configuration.
a. b. c. d. • 5. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. Set Serial Port Assignment to BMC. Set Serial Port Switching to Enabled. Set Serial Port Connection Mode to Direct. On DL160 G6, DL160se G6, DL170h, DL180 G6, SL160z G6, SL170z G6, SL 170s G6, SL2x170z G6 servers and DL165 and SL165z G7 servers: a. Press the down arrow (↓) key to scroll to IPMI Configuration. Press the Enter key. b. Scroll down to Serial Port Configuration. c. Set Serial Port Assignment to BMC. d.
network traffic and LO100 network traffic reducing the number of network cables that you must attach to the server. NOTE: Not all servers come with the option of selecting a sideband or dedicated NIC. Some have only one option. Selecting a shared Ethernet management port 1. 2. 3. Power on the server by pressing the Power On/Off button on the front panel. When POST displays the message, ROM-Based Setup, press the F10 key.
a. b. c. 5. Press the down arrow (↓) key to navigate to IPMI. Press the Enter key. Press the down arrow (↓) key to navigate to LAN Settings. Press the Enter key. Set IP Address Assignment to DHCP. • On ML150 G6 servers: a. Press the down arrow (↓) key to navigate to IPMI. b. Scroll to BMC LAN Configuration. Press the Enter key. • On DL160 G6, DL160se G6, DL180 G6, and SL160z G6 servers: a. Press the down arrow (↓) key to navigate to IPMI Configuration. b.
Setting up a static IP address from the BIOS Setup Utility By default, LO100 has DHCP enabled and automatically negotiates an IP address. To disable DHCP and enable a static IP address: 1. 2. 3. 4. Press the F10 key during POST to enter the BIOS Setup Utility. Press the right arrow (→) key to navigate to the Advanced menu. To set your network BIOS settings, choose one of these options: • On ML110 G6 and DL120 G6 servers: a. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. b.
1. 2. 3. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. Press the down arrow (↓) key to scroll to the LAN Settings menu. Press the Enter key. Press the down arrow (↓) key to scroll to the Telnet Services and HTTP Services. Press the Enable or Disable key as appropriate. On ML150 G6 servers: 1. 2. Select Advanced>IPMI.
Updating the firmware To update the LO100 firmware, use the ROMPaq utility. Downloads for the ROMPaq utility are available on the HP website (http://www.hp.com/support). For more information about using the ROMPaq utility, refer to the HP website (http://www.hp.com/servers/manage). NOTE: LO100 does not support ROMPAQ flashing from virtual media. After the ROMPaq utility flashes the selected device, cycle power manually to reboot the operating system.
To update the firmware, log in to LO100 as the administrator through the CLP interface, and issue the load command to upload and install the firmware from the map1/firmware directory. 1. Start a CLP session. To access CLP: a. Navigate to Start>All Programs>Accessories>Command Prompt. b. At the command prompt, enter telnet . 2. 3. At the CLP prompt, enter cd map1/firmware.
6. 7. Click Apply. The BMC is reset. Reconnect to the web browser. A typical flash can take several minutes. Updating the firmware through the online flash utility The Lights-Out 100 Online Flash Utility allows a user to update the BMC firmware through a supported operating system without resetting the server. The online flash utilities may be downloaded at http://www.hp.com/ under the downloads section for each platform. Supported operating systems include the following: • Red Hat Enterprise Linux 5.
3. Execute the following commands: chmod 777 CPxxxxxx.scexe ./CPxxxxxx.scexe 4. Wait for the installation process to complete. NOTE: This may take up to 15 minutes on some servers. Do not shut down the server or interrupt the flash process. 5. Click “Finish.” No restart is necessary upon completion.
3 Using LO100 Using SSL SSL is a protocol used to transmit private documents through the Internet and uses a private key or certificate to encrypt data transferred over the SSL connection. The Lights-Out 100 provides security for remote management in distributed IT environments by using an industry-standard encryption protocol for data traveling on unsecured networks. SSL is available by default. LO100 comes preinstalled with a certificate.
Using the PuTTY utility PuTTY 0.54 is a terminal emulation product that includes support for telnet and the SSH protocol. PuTTY 0.54 is available for download from the Internet. • • To start a PuTTY session, double-click the PuTTY icon in the directory in which PuTTY is installed. To start a PuTTY session from the command line: — To start a connection to a server called host, enter: putty.
— — — — • start stop exit version • Target —The default target is the /. The target can be changed by the cd command or by specifying a target on the command line. Options — The following options are valid: — -help/-h — -all/-a • • Properties are the attributes of the target that can be modified. Output —The output syntax is text. The valid Boolean values for any command are true and false.
show [][][] ◦ — /./-> Help for targets Calling help for a target returns any information about the target and its contents. You can call help for any target that is not contained in the current directory (help map1 can be called from system1). — ◦ /./-> system1 -h Invalid command ◦ /./-> system1 -help Invalid command ◦ /./-> help system1 Host System Directory ◦ /./-> help map1 Management Service Processor Directory ◦ /./-> cd system1 ◦ /.
• The cd command sets the current default target. The context works similar to a directory path. The root context for the server and the starting point for a CLP system is /. (forward slash period). By changing the context, you can shorten commands. For example: — — — • The cd command changes the directory. The cd .. command moves up the tree one directory. The cd myfolder command moves to the myfolder folder if myfolder is in the current directory.
Firmware Upgrade Diskette Utility available for download from the HP website (http:// www.hp.com/servers/lights-out). — Specify one of the following: ◦ "-oemhpfiletype csr" for loading firmware ◦ "-oemhpfiletype key" for loading a key ◦ "-oemhpfiletype cer" for loading a certificate Example: /./map1/firmware/-> load -s //16.110.181.187/404.bin -oemhpfiletype csr Firmware download is in progress. BMC will be automatically reset once image is programmed and validated.
Specific commands CLP syntax for specific commands is found in the sections that also describe the functionality through the Web interface. DCMI 1.0 support LO100 supports Data Center Manageability Interface (DCMI). DCMI enables you to simplify platform management implementations while enhancing robustness. Specifications are derived from Intelligent Platform Management Interface (IPMI) 2.0, which has been widely adopted by the computing industry for server management and system-health monitoring.
Logging in through the CLP 1. 2. 3. 4. Establish a connection to the remote management processor by launching a telnet session or an SSH session. Enter the user name at the login prompt. The default user name for the Administrator account is admin. The default user name for the Operator account is Operator. Enter the password at the password prompt. The default password for the Administrator account is admin. The default password for the Operator account is Operator.
Option Description IPMI PET Configuration Accesses the PET destinations and alert policy table. Application License Key Displays the licensing screen. Security Settings Accesses LO100 security, personal certificate, and key installation options. Firmware Download Enables you to flash firmware through the web browser. NOTE: The Virtual KVM / Media option is an advanced feature available through license upgrade and not available on all G6 systems unless the license is purchased.
NOTE: The UID is not available on all LO100 servers. For more information, see your server user guide. A restore policy controls how the system responds when power is connected to the server. To set a restore policy: 1. Select the Power Restore Policy by choosing one of the following options: • Always power up—Powers on the server immediately after power is supplied. • Restore to powered state prior to power loss—Powers on the system if the system was in the powered on state before a loss of power.
To update the display, click the Refresh button. To view or add a PEF action, click PEF. For more information, see "Platform Event Filtering configuration." Viewing sensor data from the BIOS Setup Utility 1. 2. 3. 4. Press the F10 key during POST to enter the BIOS Setup Utility. Press the right arrow (→) key to navigate to the Advanced menu. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. Choose one of these options based on server model: • ML110 G6 and DL120 G6 servers: a.
cd map1 oemhp i 20 10 D0 18 00 12 01 03 D2 oemhp i 20 10 D0 18 00 12 02 3F 95 To configure a PEF for a particular sensor, click the PEF button to the far right of that sensor on the Monitoring Sensors screen. The PEF button adjacent to each sensor opens a PEF Configuration page for that sensor. The PEF Configuration screen contains two sections: Current PEF Entries and Add PEF Entry. The Current PEF Entries section includes Sensor Type, Sensor Name, PEF Action, and PEF Control information.
configuring your alert policies, you can select from the defined alert policies for this sensor and PEF. — Add—Adds the new entry to the PEF Current Entry table at the top of the page. Platform event trap configuration The IPMI PEF Configuration screen enables you to set an alarm or specified condition originating on the server to alert an IPMI 2.0-supported systems management console. To display the IPMI PEF Configuration screen, on the main menu navigation bar, click IPMI PEF Configuration.
Accessing the system event log from a web browser The System Event Log screen displays a brief description of the event, including event type, date, time, source, description, and direction. To access the System Event Log from a web browser, on the main menu navigation bar, click System Event Log. To clear the system event log, click Clear Event Log. Accessing the system event log from the CLP 1. 2. 3. 4. Log in to the CLP as described in the "Logging in to LO100" section. Enter cd /.
3. 4. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. Choose one of these options based on server model: • On ML110 G6 and DL120 G6 servers: a. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. b. Press the down arrow (↓) key to scroll to System Event Log. Press the Enter key. • • 5. 6. On ML150 G6 servers, scroll to the bottom of the IPMI page.
Using the remote graphic console The Remote KVM/Media Viewer displays a virtual desktop and provides full control over the display, keyboard, and mouse of the host server. There are three different menus in the remote graphic console menu bar: Control, Preferences, and Help. • • • Control—Enables you to access virtual media devices and the virtual keyboard, refresh the screen, and exit the client. Preferences—Enables you to set mouse, keyboard, and logging options.
NOTE: The Keyboard, Refresh Screen, Take Full Control, Disconnect Session, and Relinquish Full Control menu options are an advanced feature available with full Virtual KVM access only. Remote graphic console settings To change the mouse, keyboard, and logging settings, select Preferences. • The Mouse tab enables you to set the Mouse mode. To display the Mouse Mode list, select Mouse, which has the following options: — Hide Mode (Relative) causes the LO100 remote graphic console to change to Relative mode.
Mouse synchronization To synchronize the local mouse pointer and the server mouse pointer, bring the local mouse to the top left corner to attract the server mouse pointer to the top left corner. Both pointers become synchronized when they overlap as one pointer. For mouse synchronization to work correctly, you must change the Enhance Mouse pointer and Hardware Acceleration options on the remote machine (server side) using the LO100 remote graphic console.
the LO100 remote graphic console Task Manager. You can use any combination of virtual and physical Alt, Ctrl, and Del keys. • • • Lock and special buttons, when pressed, remain in a pressed state until released. To release special buttons, click [Lock], and press the system buttons. Selecting or pairing LCtrl and RCtrl, LAlt and RAlt, LWin and RWin function as they would on an English language keyboard. However, they might function differently on keyboards of other languages.
To add a new virtual media device, click Add on the Virtual Media page. The Add Virtual Media Devices window appears. This window has the following options: • • • • The Look In list enables you to change your directory or drive. The Virtual Media Type list enables you to specify the file type that you want to share. You must declare a Virtual Media Type before LO100 recognizes they type of device it is sharing. The File Name textbox is the shared name of the image.
1. 2. 3. 4. Before removing a shared device, verify the device is safe to remove. If necessary, perform any required steps necessary to ensure the safe removal of removable media devices on the server. On the Virtual KVM menu, select Virtual Media from the Control menu. The Virtual Media window appears. Select the device you want to remove and click Remove. A dialog box appears, indicating that the device has been successfully disconnected. Click OK to close the Virtual Media window.
a. b. — — — — — • 4. 5. 6. 7. 8. Press the down arrow (↓) key to scroll down to the Console Redirection option, and press the Enter key. Verify the following settings: Console Redirection—Enabled Serial Port Mode—9600 8,n,1 Terminal Type—VT100+ Flow Control—None Redirection after BIOS POST—On On DL160 G6, DL160se G6, DL170h G6, DL180 G6, SL160z G6, SL170z G6, SL170s G6, and SL2x170z G6 servers and DL165 and SL165z G7 servers: a.
NOTE: 1. The actual steps will vary depending on your version of Linux.
SAFE=yes 6. After modifying and saving the previous files, reboot the server. You can now log in to the operating system through remote console. After POST, in the remote console, the server prompts you with a login. Enter a valid login and use the server as you normally would. Use the ESC+Q keys to start remote console through the telnet and the ESC+( keys to exit the remote console in telnet. Microsoft Windows EMS management Windows Server 2003 provides text-based console access.
target server by pressing the Esc+Q keys. You can end an EMS session by pressing the Esc+( keys. See your operating system documentation for instructions on establishing Telnet sessions. NOTE: If you encounter problems logging in to the remote console, be aware that some telnet programs might require you to enable their send line feed at end of line option. If the remote console does not respond to the Enter key, try setting this option in your telnet program.
Option User Operator Network Settings No No PET Configuration No No User Configuration No No Virtual KVM No No Application License Key No No Security Settings No No Changing user settings through a web browser The User Administration screen displays user information, enables you to modify user settings, and enable or disable user accounts. The first user account is a fixed null value. You cannot change the properties of the first user or use it to log in.
Changing user settings through the CLP The first user is a fixed null value. Customizable users start at user2 and continue through user16. You can only enable users for log in through the browser. However, you can change the values through any connection. 1. 2. 3. 4. Log in to the CLP as described in the "Logging in to LO100" section. At the command prompt, enter cd map1/accounts. Select a user by entering cd user1 or cd user#, where # is the user you want to modify and a whole number between 2 and 16.
To modify the network settings, from the browser main menu navigation bar, click Network Settings, enter the new settings, and then click Apply. The Network Settings page now lists the following information: • • • • MAC Address—Displays the MAC address. IP Address—Displays the current BMC IP address and enables you to set it to Static. Subnet Mask—Displays the LO100 IP network subnet mask. If you are using DHCP, the subnet mask is automatically supplied. If not, enter the network subnet mask.
4. 5. To set your network BIOS settings, choose one of these options: • On ML110 G6 and DL120 G6 servers: a. Press the down arrow (↓) key to scroll to IPMI, and press the Enter key. b. Press the down arrow (↓) key to scroll to LAN Settings, and press the Enter key. c. Set IP Address Assignment to Static. • On ML150 G6 servers: a. Press the down arrow (↓) key to scroll to the end, and select BMC LAN Configuration. b. On BMC LAN Configuration, select Static. c.
• • • • • oemhp_nonvol_mask specifies the subnet mask stored in non-volatile memory. oemhp_gateway specifies the gateway IP address for the NIC. This setting is dynamic. oemhp_nonvol_gateway specifies the gateway IP address stored in non-volatile memory. oemhp_dhcp_enable specifies whether DHCP is enabled for the NIC. Boolean values are accepted oemhp_nonvol_dhcp_enable specifies whether DHCP is enabled for the NIC and address stored in non-volatile memory. Applying a license key 1. 2.
NOTE: When you use the CLP load command with TFTPD32, HP recommends using a 4-second timeout and 10 retries. NOTE: When using the CLP load command in Linux set the timeout to 4000000. The firewall built into some Linux systems might not allow the TFTP server to send and receive information. You might have to disable the firewall to allow these connections. If you are experiencing firewall issues, change the firewall settings to allow connections on port 69 (the default port for TFTP servers).
To install a certificate through the browser: 1. 2. 3. 4. 5. 6. Log in to LO100 as an administrator. On the browser main menu navigation bar, click Security Settings. In the TFTP server IP address field, enter the IP address of the TFTP server. On the menu under File type, select Certificate. Enter the file name of the certificate created (server_cacert.pem) in the File Name field. Include the path relative to the TFTP server root in the file name. Click Apply.
where: • • • • is the //tftpserver IP/path/filename to be downloaded. tftpserver is the URL or IP address of the TFTP server containing the certificate. Path is the path of the file relative to the TFTP server root. filename is the file name of the certificate file (server_cacert.pem in this example).
• For applications such as PuTTY with Linux redirection: 1. Click Connection>Telnet. 2. Clear Return key sends Telnet New Line instead of ^M. LO100 has a default of 0x08 (input) and 0x03 (output) filter setting that must not be changed. If the default settings are changed, functionality issues might occur and you must restore the default settings. After the defaults are reset, you must log out and back in to the shell to restore normal functionality.
• To set SSH inbound to 0x08: — CLP: oemhp I 20 c0 20 18 00 29 01 00 01 02 00 08 b3 — DOS: ipmitool 20 c0 29 01 00 01 02 00 08 — Linux: ipmitool raw 0x30 0x29 0x01 0x00 0x01 0x02 0x00 0x08 • To set SSH outbound to 0x03: — CLP: oemhp I 20 c0 20 18 00 29 01 00 01 02 01 03 b7 — DOS: ipmitool 20 c0 29 01 00 01 02 01 03 — Linux: ipmitool raw 0x30 0x29 0x01 0x00 0x01 0x02 0x01 0x03 For example, to restore the default setting using telnet in Windows: 1. 2.
4 Technical support Software technical support and update service HP LO100i Advanced Packs are available with Technical Support and Update licenses that provide for optional future upgrades. For more information about these options, see the HP website (http://www.hp.com/servers/lights-out). A license entitlement certificate is delivered in place of a license activation key.
Acronyms and abbreviations BIOS Basic Input/Output System BMC baseboard management controller CLI Command Line Interface CLP command line protocol CMS central management server CR carriage return DCMI Data Center Manageability Interface DHCP Dynamic Host Configuration Protocol DSA Digital Signature Algorithm EMS Emergency Management Services HTTP hypertext transfer protocol IP Internet Protocol IPMI Intelligent Platform Management Interface JVM Java Virtual Machine KVM keyboard,
Index A administration, 7 alert messages, 31 authorized reseller HP contact information, 55 Technical support, 55 B base management controller (BMC), 10 BIOS configuration, 10 BIOS Setup Utility Monitoring sensors, 28 Obtaining a DHCP IP address from the BIOS Setup Utility, 10 Updating the firmware, 14 BIOS upgrade, 14 BMC (base management controller), 10 browser-based setup, 45 C certificates Creating a certificate, 49 Importing a certificate, 48 Installing a certificate or private key through a web brow
help resources, 55 HP Systems Insight Manager, support, 51 HP technical support, 55 HP website, 55 HP, contacting, 55 I importing, certificates, 48 Intelligent Platform Management Interface (IPMI) IPMI 2.
Installing a certificate or private key through the CLP, 50 power control options Controlling server power from a browser, 27 Controlling server power remotely, 27 Controlling server power through the CLP, 28 Privacy Enhanced Mail (PEM) Creating a certificate, 49 Installing a certificate or private key through a web browser, 49 Installing a certificate or private key through the CLP, 50 private key Installing a certificate or private key through a web browser, 49 Installing a certificate or private key thro
Technical support, 55 telephone numbers Before you contact HP, 55 HP contact information, 55 Technical support, 55 telnet Accessing the remote console through Telnet, 39 Resolving character and line feed issues, 51 TFTP (Trivial File Transfer Protocol) Creating a certificate, 49 Importing a certificate, 48 Installing a certificate or private key through a web browser, 49 Installing a certificate or private key through the CLP, 50 Trivial File Transfer Protocol (TFTP) Creating a certificate, 49 Importing a c
