Import and Export of Secure Server Profiles Server Profile Import and Export Securing a known coherent state for system firmware and configurations Weijia Zhang Bill Edwards Vance Corn 1
Import and Export of Secure Server Profiles This document is for informational purposes only and may contain typographical errors and technical inaccuracies. The content is provided as is, without express or implied warranties of any kind. © 2012 Dell Inc. All rights reserved. Dell and its affiliates cannot be responsible for errors or omissions in typography or photography. Dell, the Dell logo, and PowerEdge are trademarks of Dell Inc.
Import and Export of Secure Server Profiles Contents Executive summary ..................................................................................................... 4 Introduction ............................................................................................................. 4 System and setup requirements...................................................................................... 4 Setup .......................................................................................
Import and Export of Secure Server Profiles Executive summary Server profile import and export is a cutting-edge feature of Lifecycle Controller that allows users and field technicians to fully capture and restore BIOS and firmware in any system state—including bare metal or system down. This capability provides an automatic one-touch solution for hardware or firmware problems in use scenarios such as motherboard replacement.
Import and Export of Secure Server Profiles 1. For 12G, ensure your Enterprise License level iDRAC is set up according to the user documentation for the iDRAC with Lifecycle Controller. Collect System Inventory On System Restart (CSIOR) must be enabled. Restart at least once after CSIOR is enabled. 2. If the export destination is vFlash: a. Make sure supported vFlash media is inserted in the maintenance port. 3. If the export destination is a network share: a. Select the network connection for iDRAC to use.
Import and Export of Secure Server Profiles Figure 1. Export system profile process Remote Managment Local System Interface Export Export USC NETWORK Export Data Store Hardware OR OR vFlash Network Share USB key Using WSMAN methods The method for exporting system would take in target and storage profile location, transport protocol and access credential for backup the image. The method is provided by Lifecycle Controller provider.
Import and Export of Secure Server Profiles Storage Location Transport Protocol Access credential (Username and Password) Passphrase for the image Once a backup method is called, it will validate input parameters and create a backup job if valid parameters have been collected. If there is a missing or error parameter, there provider will return error and a modified request would need to be sent.
Import and Export of Secure Server Profiles ImageName=bk_20111130.img IPAddress=192.168.0.77 ShareName=/nfsshare # Start time for job to start # In datetime format:yyyymmddhhmmss # The string "TIME_NOW" means immediate. ScheduledStartTime=TIME_NOW #ScheduledStartTime=20120707000000 In the above sample setting, the storage type (ShareType), backup image name, storage location and share name are specified.
Import and Export of Secure Server Profiles Figure 2. Import system profile process Remote Managment Local System Interface Import Import USC NETWORK Import Data Store Hardware OR OR vFlash Network Share USB key Using WSMAN methods The WSMAN method for importing a system profile would take in target and storage location, transport protocol and access credentials for backing up the image. The method is provided by the Lifecycle Controller provider.
Import and Export of Secure Server Profiles Parameters: Storage Location Transport Protocol Access credential (Username and Password) Passphrase for the image Once a RestoreImage method is called, it will validate input parameters and create a Restore job if valid parameters have been collected. If there are missing or incorrect parameters, the provider will return an error, and a modified request would need to be sent.
Import and Export of Secure Server Profiles ShareName=/nfsshare … # Start time for job to start # In datetime format:yyyymmddhhmmss # The string "TIME_NOW" means immediate. ScheduledStartTime=TIME_NOW #ScheduledStartTime=20120707000000 In the above sample restore setting, the storage type (ShareType), backup image name, storage location and share name are specified. Once the script is executed with correct parameters, it will output a JobID which identifies this restore job.
