HP Integrated Lights-Out 2 User Guide

Management snap-in installerThe management snap-in installer installs the snap-ins required to manage iLO 2 objects in a Microsoft®Active Directory Users and Computers directory or Novell ConsoleOne directory.iLO 2 snap-ins are used to perform the following tasks in creating an iLO 2 directory:• Creating and managing the iLO 2 and role objects (policy objects will be supported at a later date)• Making the associations between iLO 2 objects and the role (or policy) objectsDirectory services for Active DirectoryThe following sections provide installation prerequisites, preparation, and a working example of DirectoryServices for Active Directory. HP provides a utility to automate much of the directory setup process. Youcan download the HP Directories Support for Management Processors on the HP website(http://h18004.www1.hp.com/support/files/lights-out/us/index.html).Active Directory installation prerequisites• The Active Directory must have a digital certificate installed to allow iLO 2 to connect securely overthe network.• The Active Directory must have the schema extended to describe Lights-Out object classes andproperties.• The firmware version must be iLO v1.40 or later, or iLO v1.00 or later.• iLO 2 advanced features must be licensed.You can evaluate iLO Advanced with a free evaluation license key that you can download from theHP website (http://h10018.www1.hp.com/wwsolutions/ilo/iloeval.html).Directory Services for iLO 2 uses LDAP over SSL to communicate with the directory servers. Beforeinstalling snap-ins and schema for Active Directory, read and have available the followingdocumentation:IMPORTANT: Installing Directory Services for iLO 2 requires extending the Active Directory schema.Extending the schema must be completed by an Active Directory Schema Administrator.• Extending the Schema in the Microsoft® Windows® 2000 Server Resource Kit, available on theMicrosoft® website (http://msdn.microsoft.com).• Installing Active Directory in the Microsoft® Windows® 2000 Server Resource Kit• Microsoft® Knowledge Base ArticlesThese articles are accessed using the Knowledge Base Article ID Number Search option on theMicrosoft® website (http://support.microsoft.com/).• 216999 Installing the Remote Server Administration Tools in Windows® 2000• 314978 Using the Adminpak.msi to Install a Server Administration Tool in Windows® 2000• 247078 Enabling SSL Communication over LDAP for Windows® 2000 Domain Controllers• 321051 Enabling LDAP over SSL with a Third-Party Certificate Authority• 299687 MS01-036: Function Exposed By Using LDAP over SSL Could Enable Passwords to BeChangediLO 2 requires a secure connection to communicate with the directory service. This requires the installationof the Microsoft® CA. Refer to the Microsoft® technical reference Knowledge Base Article 321051: Howto Enable LDAP over SSL with a Third-Party Certification Authority.Directory services 113