HP Integrated Lights-Out 2 User Guide

In the example, security policy dictates general use is restricted to clients within the corporate subnet, andserver reset capability is additionally restricted to after hours.Alternatively, the directory administrator could create a role that grants the login right and restrict it to thecorporate network, then create another role that grants only the server reset right and restrict it to afterhoursoperation. This configuration is easier to manage but more dangerous because on-goingadministration might create another role that grants users from addresses outside the corporate networkthe login right, which could unintentionally grant the LOM administrators in the server Reset role the abilityto reset the server from anywhere, provided they satisfy the time constraints of that role.The previous configuration meets corporate security policy. However, adding another role that grants thelogin right can inadvertently grant server reset privileges from outside the corporate subnet after hours. Amore manageable solution would be to restrict the Reset role, as well as the General Use role.Using bulk import toolsAdding and configuring large numbers of LOM objects is time consuming. HP provides several utilities toassist in these tasks. Below is a brief description of the utilities available.• HP Lights-Out Migration UtilityThe HP Lights-Out Migration utility, HPQLOMIG.EXE, imports and configures multiple LOM devices.HPQLOMIG.EXE includes a GUI that provides a step-by-step approach to implementing or upgradinglarge numbers of management processors. HP recommends using this GUI method when upgradingnumerous management processors. For more information, refer to the "Lights-Out directoriesmigration utilities (on page 136)" section.• HP Lights-Out Migration Command UtilityThe HP Lights-Out Migration Command utility, HPQLOMGC.EXE, offers a command-line approach tomigration, rather than a GUI-based approach. This utility works in conjunction with the ApplicationLaunch and query features of HP SIM to configure many devices at a time. Customers that mustconfigure only a few LOM devices to use directory services might also prefer the command-lineapproach. For more information, refer to the "Lights-Out directories migration utilities (on page 136)"section.Directory-enabled remote management 134