Users Guide

Table Of Contents
Read-Only account: An express or basic install of iSM installs iDRAC SSO launcher, enabling the administrator to log in
to iDRAC as a Read-Only account. Besides the ability to view component health status, logs, and inventory, few additional
SupportAssist operations that are required by the service personnel are enabled.
Administrative account: Installing this feature by selecting the Administrator privilege enables the host operating system
administrator to log in to iDRAC as an operator user. Using this account, you can perform all the operations that an iDRAC
root user can perform, except configuring or deleting iDRAC users or clearing the Lifecycle Log.
NOTE: Host operating system accounts without administration rights cannot initiate the iDRAC GUI Launcher if the iDRAC
firmware version is 4.00.00.00 or later and the communication between iDRAC and iSM is not through IPv4.
NOTE: See iDRAC 9 User's Guide for specific privileges that are granted to a Read-only or Operator account.
Disable single sign-on to iDRAC from host operating system: You can also opt to Disable this feature completely. When iSM is
installed by disabling this feature, launching iDRAC GUI launcher launches the iDRAC log in page with the default browser.
Invoke-iDRACLauncher is independent of the iSM service and can be invoked even if iSM service is stopped.
When browsers are not installed on the host operating system or Invoke-iDRACLauncher is not able to launch iDRAC due to a
browser issue, a session is however created in iDRAC. Using an iDRAC administrator account, you can log in to iDRAC and delete
the sessions.
Following are the iDRAC GUI Launcher behavior with different OS-to-iDRAC Passthru states:
When the OS-to-iDRAC Passthru setting in iDRAC is disabled, Invoke-iDRACLauncher prompts if you want to enable
OSBMC-Passthru in USBNIC mode.
When the OS-to-iDRAC Passthru setting is already configured in LOM mode, the iDRAC GUI Launcher does not launch the
iDRAC UI.
When the OS-to-iDRAC Passthru setting is disabled in iDRAC and Disable iDRAC Local Configuration using Settings
is also disabled or lockdown mode is enabled in iDRAC, the iDRAC UI is not launched.
NOTE:
When Local Configuration using Settings or Local Configuration using RACADM is disabled in iDRAC, the
iDRAC login screen is displayed.
When an iDRAC SSO session is active on the host operating system, closing the related terminal closes the browser with SSO
session as well.
NOTE:
Ensure that you invoke the iDRAC GUI Launcher from a UI-supported and UI-capable interface. SSO over IPv4
does not work when you modify the third octet in the USB-NIC IP address. Using this feature with IPv6 requires iDRAC9
firmware 4.00.00.00 or later.
Prerequisites
Linux packages:
1. Browser such as Mozilla firefox
2. Sudo
3. yx4x and later PowerEdge servers
4. iDRAC firmware versions 3.30.30.30 and later
NOTE: Single sign-on over IPv6 is supported on iDRAC firmware version 4.00.00.00 and later.
Limitations for Linux operating systems
The limitations of the iDRAC SSO Launcher on Linux operating systems that does not support:
1. Desktop utilities other than GNOME
2. Browsers other than Mozilla Firefox
NOTE: When local configuration over KC or RACADM is disabled in iDRAC, then the iDRAC login screen is displayed.
42 iSM monitoring features