HP ProLiant Lights-Out 100 Remote Management User Guide For HP ProLiant ML110 G4, ML115 G1, DL140 G3, DL145 G3, and ML150 G3 Servers Part Number 419106-008 October 2008 (Eighth Edition)
© Copyright 2006, 2008 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software.
Contents Operational overview ................................................................................................................... 5 Overview ................................................................................................................................................. 5 New features ............................................................................................................................................ 5 Server management.................................
Monitoring sensors .................................................................................................................................. 29 Viewing sensor data from a web browser......................................................................................... 29 Viewing sensor data from the BIOS Setup Utility ................................................................................ 30 Platform event filtering configuration .........................................................
Operational overview Overview This guide discusses the standard and optional operational features of the LO100 used in HP ProLiant ML110 G4, ProLiant ML115 G1, ProLiant DL140 G3, ProLiant DL145 G3, and ProLiant ML150 G3 servers. New features This release of LO100 adds support for the following: • Updated user interface • Update CLP support • Updated Java™ support to include JRE 1.4.2 up to 1.
• Access virtual media • Configure TCP/IP settings for the LO100 NIC • Control user access • Discover, identify, and launch LO100 from HP SIM • Access LO100 and server controls using a standard browser or new industry-standard SMASH CLP command line interface • Access command line help • Manage the server with IPMI 2.0 compliant applications • Access telnet Not all of the features displayed and described in the guide are available on all systems.
o Virtual KVM Operational overview 7
Installation of the HP Lights-Out 100c Remote Management Card Remote management card kit contents Installation of the HP Lights-Out 100c Remote Management Card is required to activate the optional features of the HP ProLiant ML115 G1, ProLiant ML110 G4, and ProLiant ML150 G3 servers. See "LO100 optional features (on page 6)" for more information.
Installing the remote management card 1. Remove the access panel. 2. Carefully lay the server on its unexposed side to gain access to the system board. 3. Locate the remote management card connectors on the system board. 4. Install the remote management card in the connectors on the system board. Post-installation procedures 1. Be sure all components are installed according to the installation procedures. 2. Be sure you have not left any loose tools or parts inside the server. 3.
Configuration Configuring network access Your server is connected to the network using a standard Ethernet cable. Through this connection, you can access the remote management CLP, verify POST remotely, and access the BIOS Setup Utility remotely. To configure network access: 1. 2. Connect a standard Ethernet cable from the LO100 to a network jack. o On HP ProLiant ML150 G3, ProLiant ML110 G4, and ProLiant ML115 G1, servers, connect the NIC port on the remote management card.
Accessing BIOS Setup Utility and using function keys Throughout the document, the F10 key is listed as the standard method of accessing the BIOS Setup Utility, saving changes, and exiting the utility. In some cases, the function keys (F keys) might not pass through the telnet client correctly to the remote system.
d. Press the down arrow (↓) key to scroll to Serial Port Connection Mode. Select Direct. e. Press the Esc key to return to the Advanced menu. f. Press the down arrow (↓) key to scroll to IO Device Configuration. Press the Enter key. g. Select Serial Port 1 and press the Enter key to toggle between Enabled and Disabled. Select Enabled. o On HP ProLiant DL140 G3 servers: a. Press the down arrow (↓) key to scroll to IO Device Configuration. Press the Enter key. b.
e. Set Serial Port1 Address to 3F8/IRQ4. o On DL140 G3 servers, perform the following steps: a. Press the down arrow (↓)key to scroll to IO Device Configuration. Press the Enter key. b. Set Serial Port A to Enabled. o On DL145 G3 servers, perform the following steps: a. Press the down arrow (↓) key to scroll to the Console Redirection menu. Press the Enter key. b. Set Com Port Address to On-board COM A. o On ML150 G3 servers, perform the following steps: a.
c. Press the down arrow (↓) key to scroll to Share NIC Mode option. Press the Enter key to toggle between Enabled and Disabled. Select Enabled. o On ProLiant DL140 G3 servers, press the down arrow (↓) key to scroll to NIC Option. Press the Enter key to toggle between Dedicated NIC or the Side-band NIC. Select Side-band NIC. o On ProLiant DL145 G3 servers: a. Press the down arrow (↓) key to scroll to IPMI Configuration. Press the Enter key. b.
To configure or change your network settings, see "Network settings (on page 48)" for more information. Setting up a static IP address from the BIOS Setup Utility By default, LO100 has DHCP enabled and automatically negotiates an IP address. To disable DHCP and enable a static IP address: 1. Press the F10 key during POST to enter the BIOS Setup Utility. 2. Press the right arrow (→) key to navigate to the Advanced menu. 3. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. 4.
o BMC Telnet Service: [Enabled] o BMC Ping Response: [Enabled] o BMC HTTP Server: [Enabled] Updating the firmware To update the LO100 firmware, use the ROMPaq utility. Downloads for the ROMPaq utility are available on the HP website (http://www.hp.com/support). For more information about using the ROMPaq utility, refer to the HP website (http://www.hp.com/servers/manage). NOTE: LO100 does not support ROMPAQ flashing from a virtual floppy.
a. Navigate to Applications>Systems Settings>Server Settings>Services and make sure that TFTP and xinetd are running. b. Open the /etc/xinetd.d/tftp file and modify the parameter server_args to include -T 15000000. For example, server_args = -c -s /tftpboot -T 15000000. c. If a firewall is enabled, disable it or modify the settings to allow the firewall to connect to the TFTP port.
Using LO100 Using SSL SSL is a protocol used to transmit private documents through the Internet and uses a private key or certificate to encrypt data transferred over the SSL connection. The Lights-Out 100 provides security for remote management in distributed IT environments by using an industry-standard encryption protocol for data traveling on unsecured networks.
copy of the public key in its own database. The utility recognizes the server when future connections are attempted by comparing the public key to the one stored in its database. NOTE: Logging in to an SSH session could take up to 90 seconds. Depending on the client used, you might not see on-screen activity during this time. To access the remote management processor using SSH: 1. Open an SSH window. 2. When prompted, enter the IP address, login name, and password. Using the PuTTY utility PuTTY 0.
LO100 CLP supports two simultaneous SSH connections, two SSH connections and one telnet connection, or one SSH connection and two telnet connections. You cannot have more than two simultaneous SSH connections and up to three (telnet and SSH) connections at a time.
Base commands • The help command displays context-sensitive help. Entering help displays all the supported commands. Entering -help displays the help message specific to that command. o Help for verbs Calling help for a verb returns the general syntax and usage associated with issuing that verb. Calling help for a verb that is not present in the current directory returns an Unsupported Command message. The following examples are all valid ways to call help for a verb. — /.
Properties name=Hewlett-Packard enabledstate=enabled Verbs cd version exit show reset start stop help /./system1/-> help name Unsupported Command /./system1/-> help enabledstate Unsupported Command /./system1/-> help properties Unsupported Command /./system1/-> name -h Invalid command /./system1/-> • The exit command terminates the CLP session. • The cd command sets the current default target. The context works similar to a directory path.
Properties Verbs cd version exit show help The first line of information returned by the show command is the current context. In the example, /. is the current context. Following the context is a list of subtargets (Targets) and properties (Properties) applicable to the current context. The verbs section (Verbs) shows which commands are available in this context. You can also specify the show command with an explicit or implicit context and a specific property.
//192.168.2.1/pub/firmwareimage.bin transferred to /map1/firmware/firmwareimage • The reset command cycles the target from enabled to disabled and then back to enabled. • The set command assigns a specific value to a property or group of properties. The standard syntax for the set command is set property = new value. The set command is used to change any property (if applicable.
Specific commands CLP syntax for specific commands is found in the sections that also describe the functionality through the browser interface. To turn on or off the server LED1 (UID): 1. Browse to the /./system1/led1/-> directory. 2. Enter the following command: set led1 enabledstate=enabled or disabled To view a license key: 1. Browse to the /./map1/-> directory. 2. Enter the following command: show To display the firmware version: 1. Browse to the /./map1/firmware/-> directory. 2.
o AES-CBC-128 Logging in to LO100 You can log in to the remote management processor through a web browser ("Logging in through a web browser" on page 26) or through the CLP ("Logging in through the CLP" on page 26). If you are unsure of your DHCP IP address, refer to the "Configuring network access (on page 10)" section. Logging in through a web browser 1. Browse to the IP address of the remote management processor to access the login screen. 2. Enter your user name and password.
Browser main menu options Using a web browser, you can access all of the basic remote management capabilities of LO100. Not all of the features displayed and described in the guide are available on all systems. To verify which features are supported on your system, see "LO100 standard features (on page 6)" and "LO100 optional features (on page 6)" for more information.
Controlling server power remotely LO100 enables you to remotely operate the power button of a host server using a web browser or the CLP. LO100 virtual power support enables you to power on, power off, and power cycle the host server. This virtual power support operates independently of the state of the operating system. Controlling server power from a browser The Virtual Power screen displays current power status, how long the server has been powered on, and the reason for the last server restart.
Controlling server power through the CLP 1. Log in to LO100 CLP as described in the "Logging in to LO100 (on page 26)" section. 2. Change to the system1 target by entering cd system1. 3. To power on the server, enter start /system1. For example: /./system1/> start /system1 System1 started. 4. To power off the server, enter stop /system1. For example: /./system1/> stop /system1 System1 stopped. The -force option can also be used with the stop command.
Viewing sensor data from the BIOS Setup Utility 1. Press the F10 key during POST to enter the BIOS Setup Utility. 2. Press the right arrow (→) key to navigate to the Advanced menu. 3. Choose one of these options: o On HP ProLiant ML110 G5 and ProLiant ML150 G5 servers: i. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. ii. Scroll to Realtime Sensor Data by pressing the down arrow (↓) key. Press the Enter key. o On HP ProLiant ML115 G5 servers: i.
Initially, there are no entries are in the Current PEF Entries section because no PEFs are defined. When PEF entries are defined, the PEF Control field is active and enables you to set the individual entries to enabled, disabled, or deleted. To configure an action (PEF entry), select the desired Event Offsets, select the desired PEF Action settings, and then click Add. • Event Offsets—Are trip points (movements across thresholds) that define what type of sensor event triggers an action.
Platform event trap configuration The IPMI PEF Configuration screen enables you to set an alarm or specified condition originating on the server to alert an IPMI 2.0-supported systems management console. To display the IPMI PEF Configuration screen, on the main menu navigation bar, click IPMI PEF Configuration. The Global PEF Enable section enables you to set a global PEF action. To create a global PEF action, select Enabled in the PEF Enable box, select the PEF action, and then click Apply.
Accessing the system event log from a web browser The System Event Log screen displays a brief description of the event, including event type, date, time, source, description, and direction. To access the System Event Log from a web browser, on the main menu navigation bar, click System Event Log. To clear the system event log, click Clear Event Log. Accessing the system event log from the CLP 1. Log in to the CLP as described in the "Logging in to LO100 (on page 26)" section. 2. Enter cd /.
2. Press the right arrow (→) key to navigate to the Advanced menu. 3. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. 4. Choose one of these options: o On ProLiant ML110 G4 and ProLiant ML150 G3 servers, scroll to the bottom of the IPMI page. The available options include System Event Log and System Event Log (list mode). o On ProLiant ML115 G1 servers: a. Press the down arrow (↓) key to scroll to the SEL Configuration menu. Press the Enter key. b.
To start the LO100 remote graphic console using a web browser: 1. Log in to LO100. 2. Click Virtual KVM / Media. The LO100 remote graphic console window appears. NOTE: The Virtual KVM / Media option is an advanced feature and not available on all systems. This link may appear as Virtual Media or not at all depending on your system implementation. To verify which features are supported on your system, see "LO100 standard features (on page 6)" and "LO100 optional features (on page 6)" for more information.
• Virtual Media—Displays the Virtual Media Devices page. The Virtual Media Devices page displays all accessible media drives of the storage server. Supported devices are CD-ROM, DVD-ROM floppy disk, and mass storage devices. For more information, see "Using Virtual Media (on page 39)." • Virtual Keyboard—Opens a virtual keyboard enabling you to change the language of the virtual keyboard. To change keyboard settings, see "Remote graphic console settings (on page 37).
NOTE: The Keyboard, Refresh Screen, Take Full Control, Disconnect Session, and Relinquish Full Control menu options are an advanced feature available with full Virtual KVM access only. Remote graphic console settings To change the mouse, keyboard, and logging settings, select Preferences. • The Mouse tab enables you to set the Mouse mode.
To change the Enhance Mouse pointer option: 1. Select Start>Control Panel. 2. Double-click Mouse. The Mouse Properties window appears. 3. Select Pointer Options. 4. In the Pointer Options window: a. Set the Pointer speed bar in the middle. b. Be sure the Enhance pointer precision option is not selected. To change the Hardware Acceleration option: 1. Right-click the desktop screen 2. Select Properties. The Display Properties window appears. 3. Click Settings>Advanced.
• Selecting or pairing LCtrl and RCtrl, LAlt and RAlt, LWin and RWin function as they would on an English language keyboard. However, they might function differently on keyboards of other languages. • Clicking Context is equivalent to right-clicking the LO100 remote graphic console window. Using Virtual Media LO100 Virtual Media enables you to add, browse, remove, and share media devices and refresh the displayed virtual media devices list.
Adding a virtual media device The LO100 virtual media option provides you with a virtual media drive, which can direct a remote host server to boot and use standard media from anywhere on the network. Virtual media devices are available while the host system boots. To add a new virtual media device, click Add on the Virtual Media Devices page. The Add Virtual Media Devices window appears. This window has the following options: • The Look In list enables you to change your directory or drive.
Shared virtual media devices You can share a virtual media device from the Storage Devices window. Only one device may be shared at a time. To share a virtual media device, do the following: 1. On the Virtual KVM menu, select Storage. The Storage Devices window appears. 2. Click Add. A dialog box appears, enabling you to specify which device you would like to share. 3. In the File Name field, enter either the file name or the drive you want to share.
18 34 B4 20 00 01 00 DF .4...... NOTE: These commands only work in firmware versions 2.21 or later. Redirecting BIOS console text through telnet LO100 BIOS console text redirection enables you to view the entire boot process remotely and make changes in the BIOS Setup Utility from a remote computer. This tool is valuable in troubleshooting and managing servers remotely. To configure the BIOS Setup Utility on the target system: 1. Press the F10 key during POST to enter the BIOS Setup Utility. 2.
— Baud Rate—115.2k — Console Type—vt100 plus — Flow Control—None — Console Connection—Direct — Continue C.R. after POST—On — # of video pages to support—1 o On ProLiant ML150 G3 servers, press the down arrow (↓) key to scroll down to the Console Redirection option, and press the Enter key. Verify the following settings: — Console Redirection—Enabled — Baud Rate—115.2K — Terminal Type—VT100+ — Flow Control—None — Redirection after BIOS POST—On 4. Press the Esc key to return to the previous screen. 5.
o On ProLiant ML110 G4 servers, verify or change the following settings: Configure Console Redirection — Console Redirection—Enabled — EMC Support (SPCR)—Enabled — Flow Control—None — Redirection After BIOS POST—Always — Terminal Type—VT100 — Sredir Memory Display Delay—No Delay I/O Device Configuration—Configure IO Port — Serial Port 1 Address—3F8/IRQ4 o On ProLiant ML115 G1 servers, verify or change the following settings: Configure Console Redirection — Console Redirection—Enabled — EMS Support (SPC
— Baud Rate—115.2K — Console Type—VT100 — Continue C.R. after POST—On I/O Device Configuration — Serial Port A—Enabled — Base I/O address—3F8 — Interrupt—IRQ 4 2. In the /boot/grub/menu.lst file, append the following to the kernel startup line: console=ttyS0 115200 Comment out the line GRAPHICAL DISPLAY LINE # splashimage=(hd0,0)/grub/splash.xpm.gz 3. Add an entry to allow serial console login in /etc/inittab. For example: S0:12345:respawn:/sbin/agetty -L 115200 ttyS0 vt102 4.
o On ProLiant ML115 G1 servers, press the down arrow (↓) key to scroll down to the Console Redirection option, and press the Enter key. Verify the following settings: — Console Redirection—Enabled — EMS Support (SPCR)—Enabled — Serial Port Mode—09600 8,n,1 — Flow Control—None — Redirection After BIOS POST—Always — Terminal Type—VT100 — Sredir Memory Display Delay—No Delay 4. Press the Esc key to return to the previous screen, or press the F10 key to save the changes and exit setup.
nonvolatile memory and can be changed through a web browser ("Changing user settings through a web browser" on page 47) or through the CLP ("Changing user settings through the CLP" on page 48). When using CLP, if you do not have the correct privileges a warning message appears. If you receive a warning message, you must end the telnet connection and re-establish a connection. There are no restrictions when logged in as either OEM or administrator. User and operator accounts have the following access.
3. Select the User Privilege level from the list. For more information on user privileges and access rights, see "User administration (on page 46)." 4. (Optional) Change the user name. 5. To save the changes, click Set. Changing user settings through the CLP The first user is a fixed null value. Customizable users start at user2 and continue through user16. You can only enable users for log in through the browser. However, you can change the values through any connection. 1.
Configuring network settings using a web browser The Network Settings screen displays IP address, subnet mask, and other TCP/IP-related settings. From the Network Settings screen, you can enable or disable DHCP and configure a static IP address for servers not using DHCP. You can view and modify the network settings when logged in as either OEM or administrator (admin).
4. To set your network BIOS settings, choose one of these options: o On ProLiant ML110 G4 and ML150 G3 servers: a. Press the down arrow (↓) key to scroll to the end, and select DHCP IP Source. b. Set DHCP IP Source to Disabled. c. Press the down arrow (↓) key to scroll down and enter a valid IP address, subnet mask, and gateway address (press the Tab key to move between address fields). o On ProLiant ML115 G1 servers: a. Press the down arrow (↓) key to scroll to the BMC LAN Configuration menu.
2. Press the right arrow (→) key to navigate to the Advanced menu. 3. Press the down arrow (↓) key to scroll to IPMI. Press the Enter key. 4. Press the down arrow (↓) key to scroll to the LAN Settings submenu. Press the Enter key. 5.
NOTE: When you use the CLP load command with TFTPD32, HP recommends using a 4second timeout and 10 retries. NOTE: When using the CLP load command in Linux set the timeout to 15000000. The firewall built into some Linux systems might not allow the TFTP server to send and receive information. You might have to disable the firewall to allow these connections. If you are experiencing firewall issues, change the firewall settings to allow connections on port 69 (the default port for TFTP servers).
Installing a certificate or private key through a web browser The Security Settings page enables you to install new keys and certificates for SSL and SSH connections. To install a certificate through the browser: 1. Log in to LO100 as an administrator. 2. On the browser main menu navigation bar, click Security Settings. 3. In the tftp server IP address field, enter the IP address of the TFTP server. 4. On the menu under File type, select Certificate. 5.
NOTE: After using the load command LO100 will reset ending your CLP interface session. You must reconnect to the CLP interface. To install a private key, log in to LO100 as administrator through the CLP interface and issue the load command to upload and install the certificate. For example: load -source -oemhpfiletype key where: o is the //tftpserver IP/path/filename to be downloaded. o tftpserver is the URL or IP address of the TFTP server containing the private key file.
b. Clear Return key sends Telnet New Line instead of ^M. LO100 has a default of 0x08 (input) and 0x03 (output) filter setting that must not be changed. If the default settings are changed, functionality issues might occur and you must restore the default settings. After the defaults are reset, you must log out and back in to the shell to restore normal functionality.
3. Set input default to 0x08 using the command: oemhp I 20 c0 20 18 00 29 01 00 00 02 00 08 b4 4. Set output default to 0x03 using the command: oemhp I 20 c0 20 18 00 29 01 00 00 02 01 03 b8 5. Log out.
Technical support HP contact information For the name of the nearest HP authorized reseller: • See the Contact HP worldwide (in English) webpage (http://welcome.hp.com/country/us/en/wwcontact.html). For HP technical support: • • In the United States, for contact options see the Contact HP United States webpage (http://welcome.hp.com/country/us/en/contact_us.html). To contact HP by phone: o Call 1-800-HP-INVENT (1-800-474-6836). This service is available 24 hours a day, 7 days a week.
Acronyms and abbreviations BIOS Basic Input/Output System BMC baseboard management controller CLI Command Line Interface CLP command line protocol CMS central management server CR carriage return DHCP Dynamic Host Configuration Protocol DSA Digital Signature Algorithm EMS Emergency Management Services ESD electrostatic discharge HTTP hypertext transfer protocol IP Internet Protocol Acronyms and abbreviations 58
IPMI Intelligent Platform Management Interface JVM Java Virtual Machine KVM keyboard, video, and mouse LF line feed LO100 HP Lights-Out 100 Remote Management processors MAC Media Access Control NIC network interface card PEF Platform Event Filtering PEM Privacy Enhanced Mail PET Platform Event Trap POST Power-On Self Test RBSU ROM-Based Setup Utility SLES SUSE Linux Enterprise Server SMASH System Management Architecture for Server Hardware Acronyms and abbreviations 59
SSH Secure Shell SSL Secure Sockets Layer TCP/IP Transmission Control Protocol/Internet Protocol TFTP Trivial File Transfer Protocol UID unit identification URL uniform resource locator VNC virtual network computing Acronyms and abbreviations 60
Index A accessing software, browser 11, 26 administration 10 alert messages 32 authorized reseller 57 B DHCP (Dynamic Host Configuration Protocol) 13, 14, 15, 32, 49 DHCP addresses 14 DHCP, disabling 15 DHCP, enabling 14 Digital Signature Algorithm (DSA) 52 Dynamic Host Configuration Protocol (DHCP) 10, 14, 15, 49 base management controller (BMC) 10, 14, 16, 33, 43, 49 BIOS console, access 41 BIOS console, text redirection 42 BIOS Setup Utility 10, 11, 14, 15, 16, 29, 30, 33, 42, 43, 45, 49 BIOS upgrade
IP (Internet Protocol) 14, 15, 27, 49 IP address assignment 15 IPMI (Intelligent Platform Management Interface) 5, 25, 32, 34 IPMI support 25 K key, license 51 key, private 53 keyboard, video, mouse (KVM) 5, 37, 46 keys, system 38 kit contents, LO100c management card 8 KVM, (keyboard, video, mouse) 5, 37, 46 L license key, installing 51 Linux procedures 15, 43 Linux, console redirection 43 LO100, logging in through browser 26 logging in 26 logging in, through the CLP 26 M MAC (medium access control) 32,
SMASH (System Management Architecture for Server Hardware) 5, 6, 19 SSH (Secure Shell) 5, 6, 18, 19, 26, 51, 53 SSH keys, importing 51, 53 SSH utility 18 SSL, (Secure Sockets Layer) 5, 6, 18, 51, 52, 53 SSL, importing key and certificate 51 SSL, overview 18 SSL, using 18 static IP addresses 15 storage devices, adding 40 storage devices, sharing 41 storage devices, using 39 support, HP Systems Insight Manager 57 support, IPMI 25 SUSE Linux Enterprise Server (SLES) 37 system buttons 38 system event log, acces
