HP Integrated Lights-Out 2 User Guide

More documents

Recommendations

Info

Parameter Default value DescriptionsRequire Login for iLO2 RBSUShow iLO 2 duringPOSTSerial Command LineInterface StatusSerial Command LineInterface SpeedMinimum PasswordLengthDisabledDisabledEnabled-AuthenticationRequiredThis setting allows RBSU access with or without a usercredentialschallenge. If this setting is Enabled and ispressed during POST to enter iLO 2 RBSU, a login dialogueappears.This setting enables the display of the iLO 2 network IPaddress during the host server POST process.This setting enables you to change the login model of the CLIfeature through the serial port. The following settings arevalid:• Enabled-Authentication Required• Enabled-No Authentication• Disabled9600 This setting enables you to change the speed of the serialport for the CLI feature through the serial port. Valid speedsare (in bits/s) 9600, 19200, 38400, 57600, and 115200.The serial port configuration must be set to No parity, 8 databits, and 1 stop bit (N/8/1) for proper operation. The serialport speed set by this parameter must match the speed of theserial port set in the System ROM RBSU setup.8 This setting specifies the minimum number of charactersallowed when a user password is set or changed. Thecharacter length can be set at a value from 0 to 39.Server Name - This setting enables you to specify the host server name. Thisvalue is assigned when using the HP ProLiant ManagementAgents, but if you do not use the agents and host unnamed isdisplayed, you can change it here. If the agents are running,the value you assign can be overwritten.To force the browser to refresh, save this setting and pressthe F5 key.SecurityiLO 2 provides the following security features:• User-defined TCP/IP ports ("Network Settings" on page 47)• User actions logged in the iLO 2 Event Log• Progressive delays for failed login attempts ("Login security" on page 36)• Support for X.509 CA signed certificates• Support for RBSU settings• Support for optional LDAP-based directory services authentication and authorization (requires iLOAdvanced)• Encrypted ("Encryption" on page 35) communication using SSL and SSHGeneral security guidelinesThe following are general guidelines concerning security for iLO 2:• For maximum security, iLO 2 should be set up on a separate management network.• iLO 2 should not be connected directly to the Internet.• A 128-bit cipher strength browser must be used.Configuring iLO 2 34
Password guidelinesEncryptionThe following is a list of recommended password guidelines. Passwords should:• Never be written down or recorded• Never be shared with others• Not be words generally found in a dictionary, or easy to guess words, such as the company name,product names, the user's name, or the user's User ID• Include at least three of the four following characteristics:• At least one numeric character• At least one special character• At least one lowercase character• At least one uppercase characterPasswords issued for a temporary user ID, password reset, or a locked-out user ID should also conform tothese standards. Each password must be a minimum length of zero characters and a maximum length of39 characters. The default minimum length is set to eight characters. Setting the minimum password lengthto fewer than eight characters is not recommended unless you have a physically secure managementnetwork that does not extend outside the secure data center.iLO 2 provides strong security for remote management in distributed IT environments by using 128-bit SSLencryption of HTTP data transmitted across the network. SSL encryption ensures that the HTTP informationis secure as it travels across the network.Remote Console data is protected using 128-bit RC4 bidirectional encryption.User accounts and accessPrivilegesiLO 2 supports the configuration of up to 12 local user accounts. Each of these accounts can be managedthrough the use of the following features:• Privileges (on page 35)• Login security (on page 36)iLO 2 can be configured to use a directory to authenticate and authorize its users. This configurationenables a virtually unlimited number of users, and easily scales to the number of Lights-Out devices in anenterprise. Additionally, the directory provides a central point of administration for Lights-Out devices andusers, and the directory can enforce a stronger password policy. iLO 2 enables you to use local users,directory users, or both.Two configuration options are available: using a directory that has been extended with HP Schema("Setting up HP schema directory integration" on page 108) or using the directory’s default schema(schema-free ("Setup for Schema-free directory integration" on page 105)).iLO 2 allows the administrator to control user account access to iLO 2 functions through the use ofprivileges. When a user attempts to use a function, the iLO 2 system verifies that the user has the privilegebefore the user is allowed to perform the function.Each feature available through iLO 2 can be controlled through privileges, including Administer UserAccounts, Remote Console Access, Virtual Power and Reset, Virtual Media, and Configure iLO 2 Settings.Privileges for each user can be configured on the User Administration page of the Administration tab.Configuring iLO 2 35
Page 1 and 2: HP Integrated Lights-Out 2User Guid
Page 3 and 4: ContentsOperational overview ......
Page 5: Schema-free HPLOMIG-based setup ...
Page 9 and 10: iLO 2 overviewiLO 2 Standard provid
Page 11 and 12: functionality can be provided by va
Page 13 and 14: A separate network increases the se
Page 15 and 16: 4. Select Network>NIC>TCP/IP, press
Page 17 and 18: Install iLO 2 device driversThe iLO
Page 19 and 20: Configuring iLO 2In this sectioniLO
Page 21 and 22: 3. Click Upgrade iLO 2 Firmware.4.
Page 23 and 24: • Scripted virtual media• Apple
Page 25 and 26: 3. Click Add.4. Complete the fields
Page 27 and 28: Group administrationThe Group Accou
Page 29 and 30: Parameter Default value Description
Page 31 and 32: If the iLO 2 installation is comple
Page 33: 4. Verify that the iLO Management I
Page 37 and 38: By default, iLO 2 creates a self-si
Page 39 and 40: necessary security, the following c
Page 41 and 42: 10. Change Certificate Owner Field
Page 43 and 44: Owner Field is set to SAN, iLO 2 ob
Page 45 and 46: The test page displays the results
Page 47 and 48: To change network settings for iLO
Page 49 and 50: After iLO 2 resets, the Shared Netw
Page 51 and 52: 5. Navigate to the Virtual LAN ID f
Page 53 and 54: • Verify NSLOOKUP correctly resol
Page 55 and 56: On select p-Class blades in enclosu
Page 57 and 58: Subnet Mask—Assigns the subnet ma
Page 59 and 60: This configuration causes the iLO 2
Page 61 and 62: Using iLO 2In this sectioniLO 2 bro
Page 63 and 64: • Last Used Remote Console displa
Page 65 and 66: Temperaturesfan failure, some fan o
Page 67 and 68: DiagnosticsThe iLO 2 processor reco
Page 69 and 70: The status of these self-tests is i
Page 71 and 72: Remote Console Information screenRe
Page 73 and 74: Supported hot keysThe Program Remot
Page 75 and 76: • Ctrl-Alt-Del—Enters the key s
Page 77 and 78: Security informationIf Remote Conso
Page 79 and 80: High-Performance Mouse option. You
Page 81 and 82: Graceful shutdown• No—Server wi
Page 83 and 84: Processor StatesSelecting the Proce
Page 85 and 86:
You can access virtual media on a h
Page 87 and 88:
Virtual Floppy and USB key drives d
Page 89 and 90:
3. Click Connect.To use an image fi
Page 91 and 92:
4. Click Create. The virtual media
Page 93 and 94:
Rack ViewThe Rack View page present
Page 95 and 96:
Enclosure informationEnclosure info
Page 97 and 98:
Power component informationSelectin
Page 99 and 100:
Enclosure bay IP addressingDuring t
Page 101 and 102:
Field Possible value DescriptionDNS
Page 103 and 104:
BL p-Class and BL c-Class featuresT
Page 105 and 106:
• Flexibility—You can create a
Page 107 and 108:
10. Select the certificate authorit
Page 109 and 110:
NOTE: When connected through the Di
Page 111 and 112:
Schema PreviewThe Schema Preview sc
Page 113 and 114:
Management snap-in installerThe man
Page 115 and 116:
Snap-in installation and initializa
Page 117 and 118:
d. Add users to the role. Click the
Page 119 and 120:
MembersAfter user objects are creat
Page 121 and 122:
Active Directory Lights-Out managem
Page 123 and 124:
e. Repeat the process for several m
Page 125 and 126:
Role managed devicesThe Role Manage
Page 127 and 128:
To remove any of the entries, highl
Page 129 and 130:
Directory-enabled remote management
Page 131 and 132:
How directory login restrictions ar
Page 133 and 134:
Using DNS-based restrictions can cr
Page 135 and 136:
• HP SIM can:• Manage multiple
Page 137 and 138:
• Windows® Server 2003• Novell
Page 139 and 140:
1. Click Start and select Programs>
Page 141 and 142:
This page determines if the HP Exte
Page 143 and 144:
• Role DN—The role distinguishe
Page 145 and 146:
NOTE: The feature associated with t
Page 147 and 148:
HP Systems Insight Manager integrat
Page 149 and 150:
Clicking on a status icon for iLO 2
Page 151 and 152:
Troubleshooting iLO 2In this sectio
Page 153 and 154:
LED indicatorPOST code(activitycomp
Page 155 and 156:
Event log displayEvent log explanat
Page 157 and 158:
The DHCP server must be configured
Page 159 and 160:
• The use of the diagnostic port
Page 161 and 162:
AlertFailed Login AttemptGeneral Er
Page 163 and 164:
2. On the Level of Privacy screen,
Page 165 and 166:
Terminal Services proxy stops respo
Page 167 and 168:
For example, when User1 logs in, th
Page 169 and 170:
1. Attempt to connect to iLO 2 thro
Page 171 and 172:
Directory services schemaIn this se
Page 173 and 174:
SyntaxOptionsRemarksDistinguished N
Page 175 and 176:
Lights-Out Management specific LDAP
Page 177 and 178:
DescriptionSyntaxOptionsRemarksLoca
Page 179 and 180:
Acronyms and abbreviationsACPIAdvan
Page 181 and 182:
HPONCFGHP Lights-Out Online Configu
Page 183 and 184:
RASremote access serviceRBSUROM-Bas
Page 185 and 186:
IndexAaccess options 23, 28, 33acce
Page 187 and 188:
memory 66Microsoft software 104, 11
Page 189:
virtual media 59, 84, 85, 87, 91, 1
show all

HP Integrated Lights-Out 2 User Guide

Create successful ePaper yourself

Delete template?

Save as template?