HP Integrated Lights-Out 2 User Guide

More documents

Recommendations

Info

6. Log in to iLO 2, and browse to the Two-Factor Authentication Settings page.7. Click Import Trusted CA Certificate. The Import Root CA Certificate page appears.8. Click inside the white text area so that your cursor is in the text area, and paste the contents of theclipboard by pressing the Ctrl+V keys.9. Click Import Root CA Certificate. The Two-Factor Authentication Settings page appears againwith information displayed under Trusted CA Certificate Information.10. From your desktop, open the file for the user certificate in Notepad, select all the text, and copy thetext to the clipboard by pressing the Ctrl+C keys.11. Browse to the User Administration page on iLO 2, and select the user for which you have obtained apublic certificate or create a new user.12. Click View/Modify.13. Click Add a certificate.14. Click inside the white text area so that your cursor is in the text area, and paste the contents of theclipboard by pressing the CTRL+V keys.15. Click Add user Certificate. The Modify User page appears again with a 40-digit number in theThumbprint field. You can compare the number to the thumbprint displayed for the certificate byusing Microsoft® Certificate Viewer.16. Browse to the Two-Factor Authentication Settings page.17. Select Enabled for the Two-Factor Authentication option.18. Select Disabled for the Certificate Revocation Checking option. This value is the default.19. Click Apply. iLO 2 is reset. When iLO 2 attempts to go to the login page again, the browserdisplays the Client Authentication page with a list of certificates that are available to the system.If the user certificate is not registered on the client machine, you will not see it in the list. The usercertificate must be registered on the client system before you can use it. If there are no clientcertificates on the client system you might not see the Client Authentication page and instead see aPage cannot be displayed error. To resolve the error, the client certificate must be registered on theclient machine. For more information on exporting and registering client certificates, see thedocumentation for your smart card or contact your certificate authority.20. Select the certificate that was added to the user in iLO 2. Click OK.21. If prompted to do so, insert your smart card, or enter your PIN or password.After completing the authentication process, you have access to iLO 2.Setting up directory user accounts1. Obtain the public certificate from the CA that issues user certificates or smart cards in yourorganization.2. Export the certificate in Base64-encoded format to a file on your desktop (for example, CAcert.txt).3. Open the file in Notepad, select all the text, and copy the contents to the clipboard by pressing theCtrl+C keys.4. Log in to iLO 2, and browse to the Two-Factor Authentication Settings page.5. Click Import Trusted CA Certificate. Another page appears.6. Click inside the white text area so that your cursor is in the text area, and paste the contents of theclipboard by pressing the Ctrl+V keys.7. Click Import Root CA Certificate. The Two-Factor Authentication Settings page appears againwith information displayed under Trusted CA Certificate Information.8. Change Enforce Two-Factor authentication to Yes.9. Change Certificate Revocation Checking to No (default).Configuring iLO 2 40
10. Change Certificate Owner Field to SAN. For more information, see the "Two-Factor Authentication(on page 38)" section.11. Click Apply. iLO 2 is reset. When iLO 2 attempts to go to the login page again, the browserdisplays the Client Authentication page with a list of certificates that are available to the system.12. Select the certificate added to the user in iLO 2. Click OK.13. If prompted to do so, insert your smart card, or enter your PIN or password. The login page shouldbe displayed with the e-mail address for the user in the Directory User field. You cannot change theDirectory User field.14. Enter the password for the directory user. Click Login.After completing the authentication process, you have access to iLO 2. See the "Directory settings" sectionfor more information on configuring directory users and privileges.Setting up a user for two-factor authenticationTo authenticate a user with a local iLO 2 account, a certificate must be associated with the user's localuser name. On the Administration>Modify User page, if a certificate has been mapped to the user, athumbprint (an SHA1 hash of the certificate) appears with a button that removes the certificate. If acertificate has not been mapped to the user, Thumbprint: A certificate has NOT beenmapped to this user appears with a button that starts the certificate import process.To set up a user for two-factor authentication and add a user certificate:1. Log in to iLO 2 using an account that has the Configure iLO 2 Settings privilege.2. Click Administration>User Administration. Select a user.3. Click View/Modify.4. Under the User Certificate Information section, click Add a certificate.5. On the Map User Certificate page, paste the user certificate into the text-box and click ImportCertificate. For more information on creating, copying, and pasting certificate information, see the"Setting up two-factor authentication for the first time (on page 39)" section.Configuring iLO 2 41
Page 1 and 2: HP Integrated Lights-Out 2User Guid
Page 3 and 4: ContentsOperational overview ......
Page 5: Schema-free HPLOMIG-based setup ...
Page 9 and 10: iLO 2 overviewiLO 2 Standard provid
Page 11 and 12: functionality can be provided by va
Page 13 and 14: A separate network increases the se
Page 15 and 16: 4. Select Network>NIC>TCP/IP, press
Page 17 and 18: Install iLO 2 device driversThe iLO
Page 19 and 20: Configuring iLO 2In this sectioniLO
Page 21 and 22: 3. Click Upgrade iLO 2 Firmware.4.
Page 23 and 24: • Scripted virtual media• Apple
Page 25 and 26: 3. Click Add.4. Complete the fields
Page 27 and 28: Group administrationThe Group Accou
Page 29 and 30: Parameter Default value Description
Page 31 and 32: If the iLO 2 installation is comple
Page 33 and 34: 4. Verify that the iLO Management I
Page 35 and 36: Password guidelinesEncryptionThe fo
Page 37 and 38: By default, iLO 2 creates a self-si
Page 39: necessary security, the following c
Page 43 and 44: Owner Field is set to SAN, iLO 2 ob
Page 45 and 46: The test page displays the results
Page 47 and 48: To change network settings for iLO
Page 49 and 50: After iLO 2 resets, the Shared Netw
Page 51 and 52: 5. Navigate to the Virtual LAN ID f
Page 53 and 54: • Verify NSLOOKUP correctly resol
Page 55 and 56: On select p-Class blades in enclosu
Page 57 and 58: Subnet Mask—Assigns the subnet ma
Page 59 and 60: This configuration causes the iLO 2
Page 61 and 62: Using iLO 2In this sectioniLO 2 bro
Page 63 and 64: • Last Used Remote Console displa
Page 65 and 66: Temperaturesfan failure, some fan o
Page 67 and 68: DiagnosticsThe iLO 2 processor reco
Page 69 and 70: The status of these self-tests is i
Page 71 and 72: Remote Console Information screenRe
Page 73 and 74: Supported hot keysThe Program Remot
Page 75 and 76: • Ctrl-Alt-Del—Enters the key s
Page 77 and 78: Security informationIf Remote Conso
Page 79 and 80: High-Performance Mouse option. You
Page 81 and 82: Graceful shutdown• No—Server wi
Page 83 and 84: Processor StatesSelecting the Proce
Page 85 and 86: You can access virtual media on a h
Page 87 and 88: Virtual Floppy and USB key drives d
Page 89 and 90: 3. Click Connect.To use an image fi
Page 91 and 92:
4. Click Create. The virtual media
Page 93 and 94:
Rack ViewThe Rack View page present
Page 95 and 96:
Enclosure informationEnclosure info
Page 97 and 98:
Power component informationSelectin
Page 99 and 100:
Enclosure bay IP addressingDuring t
Page 101 and 102:
Field Possible value DescriptionDNS
Page 103 and 104:
BL p-Class and BL c-Class featuresT
Page 105 and 106:
• Flexibility—You can create a
Page 107 and 108:
10. Select the certificate authorit
Page 109 and 110:
NOTE: When connected through the Di
Page 111 and 112:
Schema PreviewThe Schema Preview sc
Page 113 and 114:
Management snap-in installerThe man
Page 115 and 116:
Snap-in installation and initializa
Page 117 and 118:
d. Add users to the role. Click the
Page 119 and 120:
MembersAfter user objects are creat
Page 121 and 122:
Active Directory Lights-Out managem
Page 123 and 124:
e. Repeat the process for several m
Page 125 and 126:
Role managed devicesThe Role Manage
Page 127 and 128:
To remove any of the entries, highl
Page 129 and 130:
Directory-enabled remote management
Page 131 and 132:
How directory login restrictions ar
Page 133 and 134:
Using DNS-based restrictions can cr
Page 135 and 136:
• HP SIM can:• Manage multiple
Page 137 and 138:
• Windows® Server 2003• Novell
Page 139 and 140:
1. Click Start and select Programs>
Page 141 and 142:
This page determines if the HP Exte
Page 143 and 144:
• Role DN—The role distinguishe
Page 145 and 146:
NOTE: The feature associated with t
Page 147 and 148:
HP Systems Insight Manager integrat
Page 149 and 150:
Clicking on a status icon for iLO 2
Page 151 and 152:
Troubleshooting iLO 2In this sectio
Page 153 and 154:
LED indicatorPOST code(activitycomp
Page 155 and 156:
Event log displayEvent log explanat
Page 157 and 158:
The DHCP server must be configured
Page 159 and 160:
• The use of the diagnostic port
Page 161 and 162:
AlertFailed Login AttemptGeneral Er
Page 163 and 164:
2. On the Level of Privacy screen,
Page 165 and 166:
Terminal Services proxy stops respo
Page 167 and 168:
For example, when User1 logs in, th
Page 169 and 170:
1. Attempt to connect to iLO 2 thro
Page 171 and 172:
Directory services schemaIn this se
Page 173 and 174:
SyntaxOptionsRemarksDistinguished N
Page 175 and 176:
Lights-Out Management specific LDAP
Page 177 and 178:
DescriptionSyntaxOptionsRemarksLoca
Page 179 and 180:
Acronyms and abbreviationsACPIAdvan
Page 181 and 182:
HPONCFGHP Lights-Out Online Configu
Page 183 and 184:
RASremote access serviceRBSUROM-Bas
Page 185 and 186:
IndexAaccess options 23, 28, 33acce
Page 187 and 188:
memory 66Microsoft software 104, 11
Page 189:
virtual media 59, 84, 85, 87, 91, 1
show all

HP Integrated Lights-Out 2 User Guide

Create successful ePaper yourself

Delete template?

Save as template?