User's Manual
Table Of Contents
- HP Remote Insight Lights-Out Edition II User Guide
- Notice
- Contents
- Operational overview
- Installing the RILOE II
- Configuring the RILOE II
- Using the RILOE II
- Accessing RILOE II for the first time
- Features of the RILOE II
- Managing the user and configuration settings of the RILOE II
- Using the Remote Console
- Terminal Services pass-through option
- Using virtual devices
- Resetting the RILOE II to the factory default settings
- Getting help
- Pocket PC access with RILOE II
- RILOE II security
- Systems Insight Manager integration
- Directory services
- Overview of directory integration
- Benefits of directory integration
- How directory integration works
- Advantages and disadvantages of schema-free and HP Extended
- Setup for Schema-free directory integration
- Setting up HP schema directory integration
- Features supported by HP schema directory integration
- Setting up directory services
- Directory services support
- Schema required software
- Schema installer
- Management snap-in installer
- Directory services for Active Directory
- Active Directory Lights-Out management
- Directory services for eDirectory
- User login using directory services
- Directory settings
- Directory-enabled remote management
- Scripting, command line, and utility options
- Overview of the Lights-Out DOS utility
- Lights-Out directories migration utilities
- Compatibility
- Pre-migration checklist
- HP Lights-Out directory package
- HPQLOMIG operation
- Finding management processors
- Upgrading firmware on management processors
- Selecting a directory access method
- Naming management processors
- Configuring directories when HP Extended schema is selected
- Configuring directories when schema-free integration is sele
- Setting up management processors for directories
- HPQLOMGC operation
- Lights-Out Configuration Utility
- Using Perl with the XML scripting interface
- HPONCFG
- Remote Insight command language
- RIBCL sample scripts
- RIBCL general guidelines
- XML header
- Data types
- Response definitions
- RIBCL
- LOGIN
- USER_INFO
- ADD_USER
- DELETE_USER
- GET_USER
- MOD_USER
- GET_ALL_USERS
- GET_ALL_USER_INFO
- RIB_INFO
- RESET_RIB
- GET_NETWORK_SETTINGS
- MOD_NETWORK_SETTINGS
- GET_GLOBAL_SETTINGS
- MOD_GLOBAL_SETTINGS
- CLEAR_EVENTLOG
- UPDATE_RIB_FIRMWARE
- GET_FW_VERSION
- HOTKEY_CONFIG
- DIR_INFO
- GET_DIR_CONFIG
- MOD_DIR_CONFIG
- SERVER_INFO
- RESET_SERVER
- INSERT_VIRTUAL_FLOPPY
- EJECT_VIRTUAL_FLOPPY
- COPY_VIRTUAL_FLOPPY
- GET_VF_STATUS
- SET_VF_STATUS
- GET_HOST_POWER_STATUS
- SET_HOST_POWER
- GET_VPB_CABLE_STATUS
- GET_ALL_CABLES_STATUS
- GET_TWOFACTOR_SETTINGS
- MOD_TWOFACTOR_SETTINGS
- Troubleshooting the RILOE II
- Supported client operating systems and browsers
- Supported hardware and software
- Server PCI Slot and Cable Matrix
- Network connection problems
- Alert and trap problems
- NetWare initialization errors
- Miscellaneous problems
- Accessing System Partition Utilities
- Inability to reboot the server
- Inability to upgrade the RILOE II firmware
- Incorrect time or date of entries in the event log
- Interpreting LED indicators
- Invalid Source IP address
- Login name and password problems
- Remote Console mouse control issue
- Resetting the RILOE II to Factory Default Settings
- Virtual Floppy media applet is unresponsive
- Video Problems
- Troubleshooting the host server
- Directory Services errors
- Directory Services schema
- Technical support
- Regulatory compliance notices
- Acronyms and abbreviations
- Index
Scripting, command line, and utility options 170
GET_TWOFACTOR_SETTINGS parameters
None
GET_TWOFACTOR_SETTINGS runtime errors
None
GET_TWOFACTOR_SETTINGS return messages
Starting with RILOE II 1.20, users can be authenticated with a digital certificate. Depending on the RILOE
II Two-Factor Authentication settings, the response to GET_TWOFACTOR_SETTINGS will contain different
data.
Examples of GET_TWOFACTOR_SETTINGS return messages are:
Example of a Two-Factor Authentication settings return message with default settings:
<GET_TWOFACTOR_SETTINGS>
<AUTH_TWOFACTOR_ENABLE VALUE="N"/>
<CERT_REVOCATION_CHECK VALUE="N"/>
<CERT_OWNER_SUBJECT/>
</GET_TWOFACTOR_SETTINGS>
Example of a Two-Factor Authentication settings return message when SAN field in the certificate for
directory authentication is enabled:
<GET_TWOFACTOR_SETTINGS>
<AUTH_TWOFACTOR_ENABLE VALUE="Y"/>
<CERT_REVOCATION_CHECK VALUE="N"/>
<CERT_OWNER_SAN/>
</GET_TWOFACTOR_SETTINGS>
MOD_TWOFACTOR_SETTINGS
The MOD_TWOFACTOR_SETTINGS command is used modify the Two-Factor Authentication settings on
the RILOE II. For this command to parse correctly, the MOD_TWOFACTOR_SETTINGS command must
appear within a RIB_INFO command block, and RIB_INFO MODE must be set to write. You must have the
configure RILOE II privilege to execute this command. Changing the value of
AUTH_TWOFACTOR_ENABLE will cause the RILOE II to reset in order for the new setting to take effect.
NOTE: The GET_TWOFACTOR_SETTINGS and MOD_TWOFACTOR_SETTINGS commands are supported
with iLO firmware version 1.80 and above and with iLO 2 firmware version 1.10 and above. iLO 1.80
requires CPQLOCFG version 2.24, and iLO 1.10 requires CPQLOCFG version 2.25.
A Trusted CA Certificate is required for Two-Factor Authentication to function. The RILOE II will not allow
the AUTH_TWOFACTOR_ENABLE setting to be set to Yes if a Trusted CA certificate has not been
configured. Also, a client certificate must be mapped to a local user account if local user accounts are
being used. If the RILOE II is using directory authentication, client certificate mapping to local user
accounts is optional.
To provide the necessary security, the following configuration changes are made when Two-Factor
Authentication is enabled:
• Remote Console Data Encryption: Yes (This will disable telnet access)
• Enable Secure Shell (SSH) Access: No
• Serial Command Line Interface Status: Disabled