Professional Documents
Culture Documents
Certified documentation
according to DIN EN ISO 9001:2000
To ensure a consistently high quality standard and
user-friendliness, this documentation was created to
meet the regulations of a quality management system
which complies with the requirements of the standard
DIN EN ISO 9001:2000.
cognitas. Gesellschaft fr Technik-Dokumentation mbH
www.cognitas.de
Contents
1
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
1.1
1.2
1.3
1.4
1.5
1.6
Notational conventions
2.1
Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . 31
2.2
2.3
3.1
3.1.1
3.1.1.1
3.1.1.2
3.1.1.3
3.1.2
3.1.3
3.1.4
3.2
. . . . . . . . . . . . . . . . . . . . 29
. 36
. 37
. 37
.
.
.
.
.
38
38
38
39
41
3.2.1
3.2.2
3.3
3.3.1
3.3.2
iRMC
Contents
3.4
3.4.1
3.4.2
3.4.3
3.5
3.5.1
3.5.2
4.1
4.2
User permissions . . . . . . . . . . . . . . . . . . . . . . . . 60
4.3
4.3.1
4.3.2
4.4
4.4.1
4.4.2
4.4.2.1
4.4.2.2
4.4.2.3
4.4.3
4.4.3.1
4.4.3.2
4.4.4
4.4.4.1
4.4.4.2
4.4.4.3
4.4.5
4.4.5.1
4.4.5.2
4.4.5.3
4.4.5.4
4.4.5.5
4.4.5.6
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
52
52
53
53
. . . . . . . . . . . 58
. . . 66
. . . 67
.
.
.
.
.
.
.
.
.
.
.
.
68
68
69
72
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
73
73
76
77
77
.
.
.
.
.
.
.
.
.
.
.
.
.
. .
. .
. 83
. 88
. 95
. 95
. 96
103
109
117
121
iRMC
Contents
4.4.6
4.4.6.1
4.4.6.2
4.4.6.3
4.4.6.4
4.4.6.5
4.4.7
5.1
5.2
5.2.1
5.2.2
5.2.3
5.2.4
5.2.4.1
5.2.4.2
.
.
.
.
.
.
5.3
5.3.1
5.3.2
5.3.3
5.3.4
.
.
.
.
.
Remote Storage
6.1
6.1.1
6.1.2
6.1.3
6.1.4
6.1.5
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
156
157
159
161
163
164
6.2
6.2.1
6.2.2
6.2.3
.
.
.
.
.
.
.
.
.
.
.
.
165
166
171
172
5.2.4.3
iRMC
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
124
124
124
125
126
129
131
. . . . . . . . . . . . . . . . . 133
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
. . . . . . . . . . . 134
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
135
136
137
138
140
140
. . . . 142
. . . . 145
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
147
148
151
151
152
. . . . . . . . . . . . . . . . . . . . . . . . 155
Contents
7
7.1
7.2
7.3
7.4
7.4.1
7.4.2
7.5
7.5.1
7.5.2
7.5.3
7.5.4
7.6
7.6.1
7.6.2
7.6.3
. . . . . . . . . . . . 178
. . . . . . . . . . . . . . . . . 180
Power Management . . . . . . . . . . . . . . . . .
Power On/Off - power the server up/down . . . . . .
Power Options - Configuring power management
for the server . . . . . . . . . . . . . . . . . . . . .
Power Supply Info - Power supply and IDPROM data
for the FRU components . . . . . . . . . . . . . . .
. . . . 191
. . . . 192
. . . . 196
. . . . 198
. . . . 204
. . . . . 206
. . . . . 207
. . . . . 211
. . . . . 214
7.7
7.7.1
7.7.2
7.7.3
7.7.4
7.7.5
7.8
7.8.1
7.8.2
7.9
.
.
.
.
.
.
215
216
218
220
221
222
iRMC
Contents
7.10
7.10.1
7.10.2
. 235
. 236
7.10.3
7.10.4
7.11
7.11.1
7.11.2
7.11.3
.
.
.
.
.
.
.
.
247
248
250
252
7.12
User Management - Manage users . . . . . . . . . . . . .
7.12.1
iRMC User - local user management on the iRMC . . . . . .
7.12.1.1
New User Configuration - Configuring a new user . . . . .
7.12.1.2
User <name> Configuration - User configuration (details)
7.12.2
Directory Service Configuration (LDAP) Configuring the directory service at the iRMC . . . . . . . . .
.
.
.
.
259
259
261
262
7.13
7.13.1
.
.
.
.
.
.
.
.
. 239
. 243
. 245
. 269
. . . . . 277
. . . . . 277
. . . . . 279
. . . . . 281
. . . . . 286
. . . . . 288
7.14
Remote Storage
7.15
8.1
8.2
8.2.1
8.2.2
8.2.3
Remote Manager . . . . .
Operating Remote Manager
Overview of menus . . . .
Logging in . . . . . . . . .
iRMC
. . . . . . . . . . . . . . . . . . . . . . . . 296
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
305
305
306
308
Contents
8.2.4
8.2.5
8.2.6
8.2.7
8.2.8
8.2.9
8.2.12
8.2.13
9.1
9.1.1
8.2.10
8.2.11
9.1.2
9.1.3
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
310
312
313
314
315
. . . 317
. . . 321
. . . 322
. . . 323
. . . 324
. . . . . . 330
. . . . . . 330
. . . . . . 331
. . . . . . 333
9.2
. . . . . . . . . . . . . . . . . . . . . 338
9.3
9.4
9.5
9.6
9.7
9.8
9.9
9.10
. . . . 351
iRMC
Contents
9.11
9.12
9.12.1
9.12.2
9.13
10
10.1
10.2
10.3
10.3.1
10.3.2
10.3.3
Online update . . . . . . . . . . . . . . . . . . . . . . .
Online update using the ServerView Update Manager . .
Online update using ServerView Update Manager Express
or ASPs . . . . . . . . . . . . . . . . . . . . . . . . . .
Online update using the operating system flash tools. . .
. . . 381
. . . 381
10.4
10.4.1
10.4.2
10.4.3
Offline update . . . . . . . . . . . . . . . . . . . .
Offline update using the ServerView Update Manager
Offline update via the FlashDisk menu . . . . . . . .
Offline update using the flash tool flbmc . . . . . . . .
.
.
.
.
10.5
10.6
11
11.1
11.2
11.3
11.4
11.4.1
11.4.2
iRMC
.
.
.
.
.
.
.
.
. . . 380
. . . 380
.
.
.
.
.
.
.
.
383
383
384
385
Contents
12
. . . . . . . . . . . . . . . . . . . . 415
12.1
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . 415
12.2
12.2.1
12.2.2
12.2.3
12.2.4
12.2.5
12.2.6
12.2.7
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
.
417
417
418
423
425
426
430
432
Index
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 447
iRMC
Preface
iRMC
11
Preface
This manual describes how to configure the iRMC and the various user
interfaces available.
1.1
12
iRMC
Preface
1.2
In addition to the wide range of standard functions provided, the iRMC also
supports Advanced Video Redirection (AVR) and Remote Storage, two
additional advanced features for the remote management of PRIMERGY
servers. To use AVR and Remote Storage, you require a valid license key, which
can be purchased separately.
Standard functions of the iRMC
Browser access
The iRMC features its own web server which can be accessed by the
management station from a standard web browser.
ServerView Integration
The ServerView agents detect the iRMC and automatically assign it to the
relevant server. This means that it is possible to start the iRMC web interface
and text console redirection using the ServerView Remote Management
Frontend directly from ServerView Operations Manager.
Power Management
Irrespective of the status of the system, you have the following options for
powering the managed server up or down from the remote workstation
over the iRMC web interface
using the Remote Manager and the command line interface (CLP)
with a script.
iRMC
13
Preface
Identification LED
To facilitate identification of the system, for instance if it is installed in a fully
populated rack, you can activate the identification LED from the iRMC web
interface.
LAN
On some systems, the LAN interface of the fitted system NIC (Network
Interface Card) on the server is reserved for the management LAN. On other
systems, you have the option of configuring this LAN interface to
reserve it for the management LAN
set it up for shared operation with the system or
make it completely available to the system.
The ports marked with a wrench symbol are assigned to the iRMC (see
figure 7 on page 37).
14
iRMC
Preface
DNS / DHCP
The iRMC provides support for automatic network configuration. It has a
default name and DHCP support is set by default so that the iRMC gets its
IP address from the DHCP server. The iRMC name is registered by the
Domain Name Service (DNS). Up to five DNS servers are supported. If
DNS/DHCP is not available, the iRMC also supports static IP addresses.
iRMC
15
Preface
Power supply
The iRMC is powered by the standby supply of the system.
Alert management
The alert management facility of the iRMC provides the following options for
forwarding alerts (alerting):
Platform Event Traps (PET) are sent via SNMP.
Direct notification by email.
A modem can be connected to the serial interface. This can then be used
to send alerts (e.g. to a mobile phone via SMS).
In addition, the iRMC provides the ServerView agents with all the relevant
information.
16
iRMC
Preface
Remote Storage
Remote Storage makes a virtual drive available which is physically located
on a remote workstation or made available centrally on the network using a
Remote Storage server.
The virtual drives available with Remote Storage are simply managed in
much the same way as local drives and offer the following options:
CD ROM
DVD ROM
Memory stick
Floppy image
CD ISO image
DVD ISO image
iRMC
17
1.3
Preface
18
iRMC
Preface
1.4
The iRMC makes the BMC functions available over the IPMI interface.
Intelligent Platform Management
The Intelligent Platform Management initiative is a response to the increasing
complexity of modern server systems. A number of manufacturers have joined
this initiative in order to come up with a new solution for monitoring these server
systems.
The term Intelligent Platform Management expresses the core aspect of this
approach to the solution: Functions for monitoring and recovery of systems are
implemented directly in the hardware and firmware for platform management.
Objective
The objective was to define a standardized, abstract and message-based
interface between the central system controller (Baseboard Management
Controller - BMC) and intelligent platform management hardware.
The standardization committees combined the central characteristics of various
platform management modules into standardized descriptions.
Definition
The IPMI specification defines:
IPMI is a hardware level interface specification that is management
software neutral providing monitoring and control functions that can be
exposed through standard management software interfaces such as
DMI, WMI, CIM, SNMP, etc. As a hardware level interface, it sits at the
bottom of a typical management software stack [see section IPMI and
other management standards on page 20].
iRMC
19
Preface
Advantage
The IPMI specifications ensure the independence of functions for inventory,
logging, recovery and monitoring of a system by the system processor, BIOS or
operating system.
This means that a system can still be involved in platform management when it
is shut down and turned off.
IPMI and other management standards
IPMI is best used in conjunction with system management software running
under the relevant operating system. Integration of the IPMI functionality into the
management functionality offered by a management application and the
operating system results in a powerful platform management environment.
SOFTWARE
Management S/W
Standards
'In-band'
Remote Access
Service Provider
SP Interface
Instrumentation Code
IPMI I/F Code
IPMI
HARDWARE
IPMI I/F
IPMI H/W I/F
Baseboard Management
Controller
Figure 2: IPMI in the management software stack (source: IPMI specification, see section
References on page 27)
20
iRMC
Preface
iRMC
21
Preface
In addition, IPMI provides low level I2C commands, which can be accessed via
a management controller connected to the IPMB on 'unintelligent' I2C modules
that cannot process IPMI commands.
An overview of the fundamental elements of an IPMI implementation is available
in figure 3 on page 23.
22
iRMC
iRMC
Serial
Connector
Modem
MOTHERBOARD
System Bus
Non-volatile Storage
IPMB
Aux. IPMB
Connector
MEMORY BOARD
Temperature
Sensor
FRU
SEEPROM
PROCESSOR
BOARD
FRU
SEEPROM
Chassis Sensors
e.g. Fans,
Temperatures, Power
Supplies
FRU
SEEPROM
CHASSIS
MANAGEMENT
(SATELLITE
CONTROLLER)
REDUNDANT POWER
BOARD
FRU
SEEPROM
CHASSIS BOARD
ICMB BRIDGE
(optional)
Serial
Controller
RS-485
Transceivers
Aux. IPMB
Connector
IPMI
MESSAGES
System Interface
Serial
Controller
BASEBOARD
MANAGEMENT
CONTROLLER
(BMC)
PCI Management
Bus
Motherboard
Serial
Controller
Serial
Port
Sharing
side-band
interface
to NIC,
e.g.
Network
SMBus
(LAN)
Controller
LAN
Connector
LAN
Remote
Management Card
Preface
IPMI - technical background
23
Preface
24
iRMC
Preface
Of the two ports that RCMP uses under UDP, the BMC communicates with the
LAN controller via port 623 (primary RMCP Port).
UDP datagrams to
"Mgmt. Port"
Remote
mgmt.
system
Datagrams
generated
by BMC
LAN
LAN
Controller
PCI
Outgoing packets
from system
software
SEL,
SDR,
FRU
BMC
E.g. mii
or I2C
System Bus
All incoming
packets
iRMC
25
Preface
UDP datagrams to
"Mgmt. Port"
Remote
mgmt.
system
Datagrams
generated
by BMC
LAN
LAN
Controller
PCI
Outgoing packets
from system
software
All incoming
packets
SEL,
SDR,
FRU
BMC
E.g. mii
or I2C
System Bus
Motherb. Serial Controller
The SOL character data is then exchanged between the BMC of the managed
system and the remote workstation as SOL messages. The SOL messages are
encapsulated in RMCP+ data packets and transferred in UDP datagrams over
an Ethernet LAN connection using IPv4 (Internet Protocol Version 4). The
RMCP+ protocol is based on the RMCP protocol, but includes extensions for
encryption, authentication, etc.
Serial over LAN permits headless management by console redirection by both
the BIOS and the operating system of the managed server. High-cost
concentrator solutions are not required.
Channel concept under IPMI
Channels provide the mechanisms with which IPMI messages are routed to
the BMC via various connection carriers. Up to nine channels can be supported.
The system interface and the primary IPMB are fixed. The other seven channels
are available for the implementation.
Channels can be either session based or sessionless. The session concept
has two meanings: It is either a concept for user authentication (see the section
User identifications on page 27) or a concept for routing multiple IPMI
message streams via a single channel.
Examples of session based channels are LAN channels or serial / modem
channels. Examples of sessionless channels are the system interface and the
IPMB.
26
iRMC
Preface
User identifications
For session based channels (see the section Channel concept under IPMI on
page 26), a user login is necessary. By contrast, the sessionless channels
have no user authentication.
Under IPMI, the user configuration is channel specific. Thus, users can have
different privileges depending on whether they are accessing the BMC via the
LAN channel or the serial channel.
References
Information about the IPMI standards can be found on the Internet:
http://developer.intel.com/design/servers/ipmi/index.htm
iRMC
27
1.5
Preface
28
iRMC
Preface
1.6
Notational conventions
Notational conventions
V Warning
I
Text in italics
<text>
Monospaced font
Monospaced font
Commands to be entered at the keyboard are
Bold monospaced font shown in bold, monospaced font.
[square brackets]
{braces}
[Keyboard] [symbols]
iRMC
29
The factory default settings of the iRMC allow you to log in to the iRMC for the
first time without the need for any configuration activities.
2.1
Requirements
iRMC
31
2.2
admin
Password:
admin
I The serial number corresponds to the last 3 bytes of the MAC address of
the iRMC. You can take the MAC address of the iRMC from the label on
your PRIMERGY server.
After you have logged in, the MAC address of the iRMC can be found as
a read-only entry above the fields on the page
Network Interface (see page 236).
32
iRMC
2.3
Open a web browser on the remote workstation and enter the DNS name or
IP address of the iRMC.
I You can take the DNS name of the iRMC from the label on your
PRIMERGY server.
I If the login prompt does not appear, check the LAN connection (see
section Testing the LAN interface on page 41).
iRMC
33
iRMC
35
LAN interface
3.1
I Spanning Tree tree for the connection of the iRMC must be deactivated
(e.g. Port Fast=enabled; Fast Forwarding=enabled).
36
iRMC
3.1.1
LAN interface
Prerequisites
Indicates the
port for the iRMC.
In this case: Port 1
iRMC
37
LAN interface
3.1.1.2
The LAN controller of the PRIMERGY server requires a separate IP address for
the iRMC in order to ensure that data packets are reliably transferred to the
iRMC (and not to the operating system).
The IP address of the iRMC must be different from that of the system (operating
system).
3.1.1.3
If the remote workstation accesses the iRMC of the managed server from a
different subnet and DHCP is not used, you must configure the gateway.
3.1.2
Depending on the type of the PRIMERGY server, you can configure the iRMCs
LAN interface in a number of ways:
using the BIOS Setup program (see page 39),
using the iRMC web interface (see section Network Settings - Configure the
LAN parameters on page 235),
using the Server Configuration Manager (see iRMC LAN Interface Configuring the LAN parameters of the iRMC on page 342),
using the Server Management Tool (IPMIVIEW).
38
iRMC
3.1.3
LAN interface
iRMC
39
LAN interface
40
iRMC
LAN interface
Local IP Address
Enter the IP address you have determined for the iRMC of the
managed system.
Subnet Mask
Enter the subnet mask for the network.
Gateway Address
Specify the IP address of the gateway.
Save the settings.
If you want to use console redirection on the iRMC, continue with section
Configuring text console redirection via LAN using the BIOS Setup
program on page 42.
If you do not want to use text console redirection on the iRMC, exit the BIOS
and continue with the next section Testing the LAN interface.
3.1.4
iRMC
41
3.2
I You can also configure text console redirection via LAN using the iRMC
web interface (see section BIOS Text Console - Configure and start text
console redirection on page 277).
42
iRMC
3.2.1
Call the BIOS Setup program of the managed server. Do this by pressing
[F2] while the server is booting.
Settings in the Peripheral Configuration menu
Call the Peripheral Configuration menu:
Advanced Peripheral Configuration
iRMC
43
Console Redirection
Set the value to Enabled.
Port
Set the value to Serial 1.
Baud Rate
Specify the baud rate.
Protocol
Leave this setting unchanged. (The setting depends on the terminal
type used.)
Flow Control
Leave this setting unchanged. (The setting depends on the terminal
type used.)
44
iRMC
Mode
This setting affects the behavior of console redirection while the
operating system is running (after the POST phase has completed) see section Using console redirection while the operating system is
running on page 46:
Standard
Console redirection is terminated after the BIOS POST phase.
Enhanced
Console redirection continues to be available after the BIOS
POST phase.
Exiting the BIOS Setup program
Save your settings and exit the BIOS Setup program.
Continue with section Testing the LAN interface on page 41.
iRMC
45
3.2.2
Depending on the operating system used on the managed server, you can
continue to use console redirection after the BIOS POST phase.
DOS
The BIOS setting for console redirection mode must be set as follows (see
section Settings in the Console Redirection menu on page 44):
BIOS Setup Utility: Mode: Enhanced
TrustedCore Setup Utility: Continue C.R. after POST: On
Windows Server 2003
Windows Server 2003 handles console redirection automatically after the
POST phase. No further settings are necessary. While the operating system is
booting, the Windows Server 2003 SAC console is transferred:
Linux
You must configure a Linux operating system in such a way that it handles
console redirection after the POST phase. Once it has been configured, you
have unrestricted access from the remote workstation.
46
iRMC
Settings required
The settings may differ between program versions.
SuSe and RedHat
Add the following line to the end of the file /etc/inittab:
xx:12345:respawn:/sbin/agetty <baud-rate> ttyS0
RedHat
Insert the following kernel boot parameter in the file /etc/grub.conf:
console=ttyS0,<baud-rate> console=tty0
SuSE
Insert the following kernel boot parameter in the file /boot/grub/menu.lst :
console=ttyS0,<baud-rate> console=tty0
iRMC
47
Serial interface
3.3
The serial interface of the iRMC offers you the following possibilities:
You can use the terminal application Remote Manager (Serial) over a null
modem cable (see section Using the Remote Manager (Serial) interface on
page 51).
You can forward alerts via modem. You can configure alerting via modem
using the web interface of the iRMC (see section Serial / Modem Alerting Configure alerting via modem on page 250).
48
iRMC
3.3.1
Serial interface
iRMC
49
Serial interface
The following values are not shown in the menu and are preset (see
page 51, Terminal program (VT100+)):
Bits per second
9600
Data bits
8
Parity
None.
Stop bits
1
Flow Control
None
Exiting the BIOS / TrustedCore setup
Save your settings and exit the BIOS/TrustedCore Setup utility.
Continue with section Testing the LAN interface on page 41.
50
iRMC
3.3.2
If you connect a computer over a null modem cable and start a terminal program
(VT100+) on this computer, you can access the Remote Manager (Serial)
terminal program. The Remote Manager (Serial) interface is identical to the
Remote Manager interface (see chapter iRMC via Telnet/SSH (Remote
Manager) on page 303).
Prerequisites
On the managed server:
The Serial Multiplexer BIOS setting must be configured on the iRMC
(see section Configuring the serial interface on page 49).
Terminal program (VT100+):
Configure the following port settings for the terminal program:
Bits per second
Set the value to 9600.
Data bits
Set the value to 8.
Parity
Set the value to None.
Stop bits
Set the value to 1.
Flow Control
Set the value to None.
iRMC
51
3.4
Start the iRMC web interface (see section Logging into the iRMC web
interface on page 178).
3.4.1
In the navigation area, click Network Settings (see section Network Settings
- Configure the LAN parameters on page 235).
Configuring the LAN settings
Configure the LAN settings in the page Network Interface. See the section
Network Interface - Configure Ethernet settings on the iRMC on page 236
for the settings required.
Configuring ports and network services
Configure the ports and network services in the Ports and Network Services
page. See the section Ports and Network Services - Configuring ports and
network services on page 239 for the settings required.
Configuring DHCP
Configure the DHCP settings in the DHCP Configuration page. See the
section DHCP Configuration - Configuring the host name for the iRMC on
page 243 for the settings required.
Configuring DNS
Configure the DNS settings in the DNS Settings page. See the section DNS
Configuration - Enable DNS for the iRMC on page 245 for the settings
required.
52
iRMC
3.4.2
Configuring alerting
The pages for configuring alerting are grouped in the navigation area under
Alerting (see section Alerting - Configure alerting on page 247).
Configuring alert forwarding over SNMP
In the navigation area, click SNMP Traps. The SNMP Traps page appears.
Configure SNMP trap forwarding. See the section SNMP Trap Alerting Configure SNMP trap alerting on page 248 for the settings required.
Configuring alert forwarding to a mobile phone via modem
In the navigation area, click Serial / Modem. The Serial Modem Alerting page
appears.
Configure alert forwarding via modem. See the section Serial / Modem
Alerting - Configure alerting via modem on page 250 for the settings
required.
Configuring email notification (email alerting)
In the navigation area, click Email. The Email Alerting page appears.
Configure email alerting. See the section Email Alerting - Configure email
alerting on page 252 for the settings required.
3.4.3
iRMC
53
3.5
3.5.1
54
iRMC
3.5.2
Configuring alerting
iRMC
55
User management for the iRMC uses two different types of user identifications:
Local user identifications are stored locally in the iRMCs non-volatile
storage and are managed via the iRMC user interfaces.
Global user identifications are stored in the central data store of a directory
service and are managed via this directory services interfaces.
The following directory services are currently supported for global iRMC
user management:
Microsoft Active Directory
Novell eDirectory
OpenLDAP
This chapter provides information on the following topics:
iRMC
57
Concept
4.1
User management for the iRMC permits the parallel administration of local and
global user identifications.
When validating the authentication data (user name, password) which users
enter when logging in to one of the iRMC interfaces, iRMC proceeds as follows
(see also figure 14 on page 59):
1. The iRMC compares the user name and password with the locally stored
user identifications:
2. The iRMC authenticates itself at the directory service via LDAP with a user
name and password, determines the user rights by means of an LDAP query
and checks whether the user is authorized to work with these at the iRMC.
58
iRMC
iRMC web
interface
Login
SSH
Login
SSL
SSH
Concept
Telnet
Login
Serial
interface
Login
SSL
SSH
iRMC
SSL
LDAP login
directory service
global user identifications
I Although optional, the use of SSL for the LDAP connection between the
iRMC and directory service is recommended. An SSL-secured LDAP
connection between iRMC and the directory service guarantees secure
data exchange, and in particular the secure transfer of the user name
and password data.
SSL login via the iRMC web interface is only required if LDAP is active
(LDAP enable option, see page 270).
iRMC
59
User permissions
4.2
User permissions
I The privileges and permissions required for the use of the individual
iRMC functions are described
User
Operator
Administrator
OEM
60
iRMC
User permissions
admin
Password:
admin
iRMC
61
4.3
4.3.1
You can view a list of configured users under the web interface. You can also
configure new users, change the configuration of existing users and remove
users from the list.
Start the iRMC web interface (see section Logging into the iRMC web
interface on page 178).
Showing the list of configured users
In the navigation area, click the iRMC User function.
The User Management page opens containing a list of configured users (see
page 260). Here, you can delete users and call the page for configuring new
users.
This page is described in section User Management - Manage users on
page 259.
62
iRMC
iRMC
63
4.3.2
I Prerequisite:
The current ServerView agents must be installed on the managed server.
You can view a list of configured users under Server Configuration Manager.
You can also configure new users, change the configuration of existing users
and remove users from the list.
Start the Server Configuration Manager (see chapter Configuring iRMC
using the Server Configuration Manager on page 329).
Showing the list of configured users
Choose the iRMC User Management dialog box.
The dialog box contains a list of all the configured users (see page 357).
Here you can delete users and call the Edit existing user window showing the
settings for the selected user.
This window is described on page 358.
Configuring new users
In the iRMC User Management dialog box, select a line below the displayed
user in which only the user ID is shown.
Click the Modify... button or double-click the selected line.
The Edit existing user window opens.
Make the settings for the new user in the Edit existing user window.
Confirm your settings by clicking OK.
64
iRMC
User management on the iRMC ... locally via the Server Configuration Mana
Modifying the configuration of a user
Select a user in the iRMC User Management dialog box.
Click the Modify... button or double-click the selected user.
The Edit existing user window opens showing the configured settings for this
user.
Modify the settings for the user in the Edit existing user window.
Confirm your settings by clicking OK.
Deleting users
Select a user in the iRMC User Management dialog box.
Click the Delete button to delete the user.
iRMC
65
4.4
The global user IDs for the iRMC are managed centrally using an LDAP
directory service.
The following directory services are currently supported for iRMC user
management:
Microsoft Active Directory
Novell eDirectory
OpenLDAP
This section provides you with information about the following topics:
Overview of global user management for the iRMC
Concept of global user management for the iRMC using an LDAP directory
service
Configuring global iRMC user management in the directory service
(generating the iRMCgroups structure in the directory service).
Global iRMC user management via Microsoft Active Directory
Global iRMC user management via Novell eDirectory
Global iRMC user management via OpenLDAP
66
iRMC
4.4.1
Overview
The global user IDs for the iRMC are stored centrally in the directory service's
directory. This makes it possible to manage the user identifications on a central
server. They can therefore be used by all the iRMCs that are connected to this
server in the network.
Furthermore, using a directory service for the iRMC makes it possible to use the
same user identifications for logins at the iRMCs as are used for the operating
system of the managed servers.
iRMC 1
Login
Authentication
Login
Authentication
directory service
iRMC 2
iRMC n
Login
Authentication
Figure 15: Shared use of the global user identifications by multiple iRMCs
iRMC
67
4.4.2
68
iRMC
iRMC users obtain their privileges by virtue of being members of a group in the
OU iRMCgroups.
I The user entries for the iRMC may be located at any point below the base
domain which contains the OU iRMCgroups.
In large enterprises, the servers which are managed via iRMC are usually
assigned to different departments. Furthermore, the administrator permissions
for the managed servers are also often assigned on a department-specific
basis.
Departments are combined in the OU Departments
The OU Departments combines the servers which are managed by iRMC to form
a number of groups. These correspond to the departments in which the same
user IDs and permissions apply. In figure 17 on page 70, for example, these
are the departments DeptX, DeptY and Others.
The entry Others is optional, but recommended. Others is a predefined
department name subsuming all the servers which do not belong to another
department. There are no restrictions concerning the number of departments
(OUs) listed under Departments.
I When configuring the directory service at the iRMC via the iRMC web
interface (see page 269), via the Server Configuration Manager (see
page 362) or via the Server Management Tool (IPMIVIEW) (see ), you
specify the name of the department to which the managed server with
the relevant iRMC belongs. If there is no department of this name in the
LDAP directory then the permissions present in the Others department
are used.
iRMC
69
V CAUTION!
Make sure that no user simultaneously belongs to more than one
permission group in one and the same department. (If a user belongs to
more than one permission group in the same department then the first
result returned by an LDAP query always apples.)
70
iRMC
If, for example, you click a department (e.g. DeptX) (1) in the hierarchy tree in
Active Directory Users and Computers (see figure 18) then the permission groups
(security groups) defined for this department are listed in the display area (here:
DeptX).
You can click on one of the displayed security groups (2) to open the Properties
dialog box for this security group (here: Maintenance). The associated
permission is listed under Notes: using the following syntax:
LAN: OEM | Administrator | Operator | User | None
Serial: OEM | Administrator | Operator | User | None
UserAccounts: On | Off
iRMCsettings: On | Off
Video Redirection: On | Off
Remote Storage: On | Off
(2)
(1)
Figure 18: Properties dialog box for the Maintenance security group
iRMC
71
In the LDAP server, you can specify not only the user permissions but also the
preferred shell for a user. Unlike when you assign permissions, the definition of
the preferred shell is purely user-specific and not department-dependent.
I A user should only belong to a single shell group. Any user who belongs
to multiple shell groups is automatically assigned to the group with the
highest priority among these groups. The sequence of priorities follows
the above list (with priority descending from top to bottom).
Any user who does not belong to a shell group is assigned by default to
the Remote Manager group
72
iRMC
4.4.3
Before you can handle global iRMC user management via a directory service,
it is necessary to generate the structure (OU) iRMCgroups in the directory
service.
To do this, proceed as follows:
1. Create the LDIF (Lightweight Directory Interchange Format) file which
contains the iRMC-specific structures for integration in the directory service.
2. Import the LDIF file into the directory service.
4.4.3.1
You create the LDIF file (.ldif) from a configuration file (.txt) using the tool
iRMCldifCreate.
iRMC
73
74
iRMC
In the Windows prompt window, use the following syntax to call the tool
iRMCldifCreate:
iRMCldifCreate [-v] [-h] [-d <display_level>]
[-c <cfg_file>] [-o <out_file>] [-l <log_file>]
-v
-h
-d <display_level>
Display level; controls the scope of program display at the text
console and in the log file.
A distinction is made between the following display levels:
0: Only errors and status messages are displayed.
1: In addition to the level 0 display, OUs and group names are also
displayed.
2: In addition to the level 1 display, attribute values are also displayed.
Default: 1
-c <cfg_file>
Name of the configuration file
Default: iRMCldifConfig.txt
-o <out_file>
Name of the LDIF file
Default: iRMCdirServiceInit.ldif
-l <log_file> | none
Name of the iRMCldifCreate log file.
none: No log file is written.
Default: iRMCldifCreateLog.txt
I Alternatively, you can also call the tool iRMCldifCreate from the
Example
The following call generates the LDIF file ctrl.ldif from the configuration
file config_ldif.txt:
iRMCldifCreate -c config_ldif.txt -o ctrl.ldif
iRMC
75
Various tools are available for importing an LDIF file depending on the directory
service you are using.
Recommended tools include:
Active Directory: LDAP Browser\Editor
For a more detailed description, see Importing the LDIF file into Microsoft
Active Directory. on page 77.
eDirectory: iManager - eDir maintenance with ICE (Import Convert Export
wizard)
For a more detailed description, see Importing the LDIF file into Novell
eDirectory on page 111.
OpenLDAP: ldapadd (management tools)
For a more detailed description, see Importing the LDIF file into
OpenLDAP. on page 126.
76
iRMC
4.4.4
This section describes how you integrate iRMC user management in Microsoft
Active Directory.
I Prerequisite:
The LDIF file must have been created (see section Generating the
"iRMCgroups" structure in the LDAP directory service on page 73).
You must perform the following steps to integrate iRMC user management in
Microsoft Active Directory:
1. Import the LDIF file into Active Directory.
2. Assign iRMC users to iRMC user groups in Active Directory.
3. Configuring iRMC LDAP/SSL access at the Active Directory server
4.4.4.1
Among other things, you can use the following tools to import the LDIF file into
Active Directory:
iRMC
77
Example
ldifde -i
-s
-b
-j
78
-f iRMCdirServiceInit.ldif
domino.fwlab.firm.net
Administrator fwlab.firm.net my_password
. -k
iRMC
iRMC
79
Host:
The DNS name or IP address of the domain controller
Port:
Port number 389 for data exchange via LDAP
Version:
Version number (choose 2 or 3.)
Base DN:
Fully qualified domain name presented as an LDAP DN name.
Alternatively, click the Fetch DNs. button.
Fetch DNs
You can click on the Fetch DNs button to display a list of DN names.
This contains the fully qualified domain name (presented as an LDAP
DN name) together with other information.
User DN:
Users login name extended by @ and the full domain path name.
Click Save.
The Open LDAP Browser/Editor displays the following window (see figure
22 on page 81):
80
iRMC
iRMC
81
LDIF File:
LDIF file previously created using the tool iRMCldifCreate.
Import method
Choose the Update/Add method to extend and/or modify the
iRMCgroups tree.
Click the Import button to start importing the LDIF file into the Active
Directory.
82
iRMC
An RSA certificate is required before iRMC can use LDAP via SSL.
The following steps are involved in configuring LDAP access:
1. Install an Enterprise CA
2. Generate an RSA certificate for the domain controller.
3. Install the RSA certificate on the server
Installing the Enterprise CA
iRMC
83
84
iRMC
In the file request.inf , adapt the specification under Subject= to the name of
the employed domain controller, e.g.
Subject = CN=domino.fwlab.firm.net.
Enter the following command in the Windows prompt window: certreq -new
request.inf request.req
Enter the following URL in the certification authority browser:
http://localhost/certsrv
Click on Request a Certificate.
Click on advanced certificate request.
Click on Submit a certificate request.
Copy the content of the file request.req to the Saved Request window.
Select the Web Server certificate template.
Download the certificate and save it (e.g. in the file request.cer).
iRMC
85
Enter the following command in the Windows prompt window: certreq -accept
request.cer
Export the certificate with the private key.
To do this, proceed as follows:
Enter mmc in the Windows prompt window to start the Management
Console.
Add the snap-in for local computer certificates.
Navigate to
Certificates (Local Computer) - Personal Certificates - Certificates.
Double-click on the new server certification authentication certificate.
Click on the Details tab in the certificate window.
Click on Copy to File.
Select Yes, export the private key.
Assign a password.
Choose a file name for the certificate and click on Finish.
86
iRMC
iRMC
87
You can assign iRMC users to iRMC groups in the OU iRMCgroups either
on the basis of the user entry, or
on the basis of the group entry
I The description below indicates the assignment on the basis of the group
entry. The assignment procedure on the basis of the user entry is very
similar.
88
iRMC
iRMC
89
Select the container (OU) containing your users. (By default, this is the OU
Users.). Click OK to confirm.
The Select Users, Contacts, or Computers dialog box opens (see figure 28 on
page 91).
iRMC
iRMC
91
Click the Find Now button to display all the users in your domain.
Under Search results: in the display area you can now view the search result
(see figure 30 on page 93).
92
iRMC
Figure 30: Select Users, Contacts, or Computers dialog box - displaying the search results
Select the users who are to be added to the group and click OK to confirm.
The selected users are now displayed (see figure 31 on page 94).
iRMC
93
Figure 31: Select Users, Contacts, or Computers dialog box - confirming the search results
94
iRMC
4.4.5
This section provides you with information about the following topics:
The Novell eDirectory system components and system requirements
Installing Novell eDirectory
Configuring Novell eDirectory
Integrating iRMC user management in Novell eDirectory
Tips on administering Novell eDirectory.
4.4.5.1
iRMC
95
0.0.0.0
240.0.0.0
eth0
96
iRMC
Accept the EULA with "y" and confirm with the [Enter] key.
If you are asked which program you want to install:
Enter "1" to install the Novell eDirectory server and press the [Enter] key
to confirm.
The eDirectory packages are then installed.
iRMC
97
After installation of the Novell eDirectory Server, you must update the names for
the paths to the eDirectory in a number of environment variables and export
these variables.
To do this, open your configuration file (in the example: /etc/bash.bashrc) and
enter the following lines in the specified sequence ahead of "# End of ...":
export PATH/opt/novell/eDirectory/bin:/opt/novell/eDirectory/
sbin:$PATH
export LD_LIBRARY_PATH=/opt/novell/eDirectory/lib:/
opt/novell/eDirectory/lib/nds-modules:/opt/novell/
lib:$LD_LIBRARY_PATH
export MANPATH=/opt/novell/man:/opt/novell/eDirectory/
man:$MANPATH
export TEXTDOMAINDIR=/opt/novell/eDirectory/share/
locale:$TEXTDOMAINDIR
Close the terminal and open a new terminal in order to export the
environment variables.
Installing the eDirectory administration utilities
Go to the setup subdirectory of the eDirectory directory:
cd eDirectory/setup
Accept the EULA with "y" and confirm with the [Enter] key.
If you are asked which program you want to install:
Enter "2" to install the Novell eDirectory administration utilities and
press the [Enter] key to confirm.
The eDirectory administration utilities are then installed.
98
iRMC
Proceed as follows:
Log in with root permission (superuser).
Go to the directory /home/eDirectory:
cd /home/eDirectory
iRMC
99
Firefox as your web browser. In Mozilla Firefox, it is possible that not all
the context menu's pop-up windows will be displayed.
100
iRMC
iRMC
101
Proceed as follows:
Open the configuration file for editing (in the example: /etc/bash.bashrc)
Enter the following line in the configuration file in front of # End of ...:
export C1_JRE_HOME=/opt/novell/j2sdk1.4.2_05/jre
used here. However, you can also specify the path name of any other
Java runtime environment installed on the eDirectory Server.
ConsoleOne obtains the available tree hierarchies either via the local
configuration file hosts.nds or via the SLP service and multicast.
Proceed as follows to insert your tree hierarchy in the configuration file:
Go to the configuration directory:
cd /etc
Starting ConsoleOne
You start ConsoleOne in the system prompt using the following command:
/usr/ConsoleOne/bin/ConsoleOne
102
iRMC
iRMC
103
104
iRMC
Assign RBS2 to the container that is to be managed. (In the example above,
this is "mycompany".)
Installing plug-in modules
Proceed as follows:
In iManager, select the Configure tap (by clicking on the desk icon).
In the Configure tab, select
Plug-in installation - Available Novell Plug-in Modules
In the modules listed in the page Available Novell Plug-in Modules, select the
eDirectory-specific package eDir_88_iMan26_Plugins.npm.
Click Install.
Configuring Role Based Services (RBS)
In the page Available Novell Plug-in Modules, select all the modules that are
required for LDAP integration. If you are not certain, select all the modules.
Click Install.
Configuring eDirectory for SSL/TLS-secured access
iRMC
105
I Anonymous login and the transfer of plain text passwords via non-
If you want to use LDAP without SSL then you must perform the following steps:
1. Enable a non-SSL-secured LDAP- connection.
2. Relax the bind restrictions.
3. Reload the LDAP configuration.
106
iRMC
Proceed as follows:
1. Enable a non-SSL-secured LDAP- connection.
Start iManager via the web browser.
Log in at iManager with valid authentication data.
Select the Roles and Tasks view.
Select LDAP - LDAP Options - LDAP Server - Connection.
In the Connection tab, deactivate the option
Require TLS for all Operations.
Select LDAP - LDAP Options - LDAP Group - General.
In the General tab, deactivate the option
Require TLS for Simple Binds with password.
2. Relax the bind restrictions.
Log in at iManager with valid authentication data.
In the object tree, navigate to the LDAP Server object.
Click with the mouse to highlight the LDAP Server object and select Modify
Object in the associated context menu.
In the right-hand content frame, open the Other sheet.
Under Valued Attributes, select ldapBindRestrictions.
Click the Edit button.
Set the value to 0.
Click OK.
In the Other sheet, click the Apply button.
3. Reload the LDAP configuration.
Start ConsoleOne and log in to eDirectory.
Click on the Base DN object at the left of the window (e.g. Mycompany).
The LDAP server object is then displayed on the right-hand side of the
window.
Right-click to highlight the LDAP Server object and select Properties... in
the associated context menu.
In the General tab, click Refresh NLDAP Server Now.
iRMC
107
Try to log in at eDirectory under the administrator ID (in the example: admin)
via a non-SSL-secured connection.
108
iRMC
You must perform the following steps in order to integrate iRMC user
management in Novell eDirectory:
Import the iRMC LDIF file into eDirectory.
Generating the principal iRMC user.
Declare the iRMC groups and user permissions in eDirectory.
Assign users to the organizational unit (OU) iRMCgroups.
LDAP authentication process for iRMC users in eDirectory
The authentication of a global iRMC user on login at the iRMC is performed in
accordance with a predefined process (see page 58). figure 34 on page 110
illustrates this process for global iRMC user management with Novell
eDirectory.
The establishment of a connection and login with the corresponding login
information is referred to as a BIND operation.
iRMC
109
SSL-based communication
iRMC: Bind as Principal User
1
iRMC is authenticated
iRMC determines the
fully-qualified DN of User1
eDirectory
iRMC
User permissions
3
User1 is authenticated
1) The iRMC logs in at the eDirectory server with the predefined, known
permission data (iRMC setting) as Principal User and waits for the
successful bind.
2) The iRMC asks the eDirectory server to provide the fully qualified Distinguished
Name (DN) of the user with cn=User1. eDirectory determines the DN
from the preconfigured subtree (iRMC setting).
3) The iRMC logs in at the eDirectory server with the fully-qualified DN of the
user User1 and waits for the successful bind.
4) The iRMC asks the eDirectory server to provide the user permissions of the
user User1.
Figure 34: Authentication diagram for global iRMC permissions
I You configure the "Principal User's" permission data and the subtree
which contains the DNs in the page Directory Service Configuration page
of the iRMC web interface (see page 269).
110
iRMC
I Prerequisite:
The LDIF file must have been created (see section Generating the
"iRMCgroups" structure in the LDAP directory service on page 73).
You use iManager to import the iRMC LDIF file into Novell eDirectory.
Proceed as follows:
Start iManager via the web browser.
Log in at iManager with valid authentication data.
Select eDirectory Maintenance and use the ICE (Import Convert Wizard).
Select Import data from file on disk and click Next.
In the file browser, navigate to your LDIF file.
Deactivate the option exit on error and click Next.
Enter the DNS name / IP address of your LDAP server as well as the
permission data for the administrator ID (see figure 35 on page 112).
iRMC
111
Click Next.
Click Finish to start the import of the LDIF file.
112
iRMC
iRMC
113
114
iRMC
iRMC
115
Figure 37: iManager - Roles and Tasks - Rights To Other Objects - Add Property
Highlight the property [All Attributes Rights] and click OK to add it.
For the property [All Attributes Rights], enable the options Compare, Read
and Inherit and click OK to confirm.
This authorizes the user/user group to query all the attributes in the
selected object's subtree.
Click Apply to activate your settings.
116
iRMC
You can assign iRMC users for instance from the OU people to the OU
iRMCgroups either
starting from the individual user entries (preferable if there are only a few
user entries), or
starting from the group entry (preferable if there are a lot of user entries).
Proceed as follows:
Start iManager via the web browser.
Log in at iManager with valid authentication data.
Select Roles and Tasks.
Select Groups - Modify Group.
The Modify Group page is displayed.
Perform the following steps for all the iRMC groups to which you want to
assign iRMC users:
Use the object selector button
to select the iRMC group to which
you want to add iRMC users.
(In the example, this is
Administrator.Others.Departments.iRMCgroups.sbrd4.)
Select the Members tab.
The Members tab of the Modify Group page is displayed:
iRMC
117
Figure 38: iManager - Roles and Tasks - Modify Group - Members tab
Perform the following steps for all the users of the OU people which you
want to assign to the iRMC group:
Click the object selector button
118
iRMC
iRMC
119
Figure 40: Display of the selected iRMC users in the "Members" tab
120
iRMC
If, for any unidentifiable reason, the lndap daemon fails to start:
Start the lndap daemon "manually":
/etc/init.d/nldap restart
I If you are starting ConsoleOne for the first time, no tree is configured.
Proceed as follows to configure a tree:
Under My World, select the node NDS.
In the menu bar, select: File - Authenticate
Enter the following authentication data for login:
1. Login-Name: root
2. Password: <password>
3. Tree: MY_TREE
4. Context: mycompany
iRMC
121
In the left-hand part of the window, click the Base DN object (Mycompany).
The LDAP Server object is then displayed in the right-hand side of the
window.
Right-click on the LDAP Server object and select Properties... in the context
menu.
In the General tab, click the Refresh NLDAP Server Now button.
Configuring the NDS message trace
The nds daemon generates debug and log messages which you can trace using
the ndstrace tool. The purpose of the configuration described below is to redirect
the output from ndstrace to a file and display the content of this file at another
terminal. For this latter task, you use the screen tool.
The following procedure is recommended:
Open the command box (e.g. bash).
Configuring ndstrace
Go to the eDirectory directory /home/eDirectory:
cd /home/eDirectory
122
iRMC
To switch between the virtual terminals, use the key combination [Ctrl] + [a],
[Ctrl] + [0].
(The terminals are numbered from 0 to 9)
iRMC
123
4.4.6
This section provides you with information about the following topics:
Installing OpenLDAP (Linux).
Creating an SSL certificate.
Configuring OpenLDAP.
Integrating iRMC user management in OpenLDAP.
Tips on OpenLDAP administration
4.4.6.1
Installing OpenLDAP
To install the packages OpenSSL and OpenLDAP2 from the distribution medium,
use the setup tool YaST.
4.4.6.2
http://www.akadia.com/services/ssh_test_certificate.html
http://www.freebsdmadeeasy.com/tutorials/web-server/apache-ssl-certs.php
http://www.flatmtn.com/computer/Linux-SSLCertificates.html
http://www.tc.umn.edu/~brams006/selfsign.html
124
iRMC
Following certificate creation, you must have the following three PEM files:
Root certificate: root.cer.pem
Server certificate: server.cer.pem
Private key: server.key.pem
I The private key must not be encrypted with a pass phrase since you
should only assign the LDAP daemon (ldap) read permission for the file
server.key.pem.
You use the following command to remove the pass phrase:
4.4.6.3
Configuring OpenLDAP
iRMC
125
I If the configuration created by YaST does not function overall, check that
the following obligatory entries are present in the file
/etc/openldap/slapd.conf:
allow bind_v2
TLSCACertificateFile /path/to/ca-certificate.pem
TLSCertificateFile /path/to/certificate.pem
TLSCertificateKeyFile /path/to/privat.key.pem
I If the configuration created by YaST for SSL does not function, check that
the following entry is present in the configuration file
/etc/sysconfig/openldap:
OPENLDAP_START_LDAPS=yes
4.4.6.4
I Prerequisite:
The LDIF file must have been created (see section Generating the
"iRMCgroups" structure in the LDAP directory service on page 73).
The management tool ldapadd can be used to import the iRMC file into
OpenLDAP.
126
iRMC
.
Click Set and enter a password.
Enter a Surname SN.
Click Apply.
iRMC
127
The following text describes how you use the Jarek Gawor
LDAP Browser\Editor to create a new iRMC user and add this user to the
OU iRMCgroups.
Proceed as follows:
Start the LDAP Browser.
Log in at the OpenLDAP directory service with valid authentication data.
Create a new user.
To do this, proceed as follows:
Select the subtree (subgroup) in which the new user is to be created. The
new user can be created anywhere in the tree.
Open the Edit menu.
Select Add Entry.
Select Person.
Edit the Distinguished Name DN.
Click Set and enter the password.
Enter a Surname SN.
Click Apply.
128
iRMC
Message logging
The LDAP daemon uses the Syslog protocol for message logging.
I The logged messages are only displayed if a log level other than 0 is set
in the file /etc/openldap/slapd.conf.
iRMC
129
Log level
Meaning
-1
Comprehensive debugging
No debugging
Connection management
16
32
64
128
256
512
1024
2048
130
iRMC
4.4.7
SSL copyright
SSL copyright
iRMC
131
SSL copyright
132
iRMC
Advanced Video Redirection (AVR) allows you to control the mouse and
keyboard of the managed server from your remote workstation and to show the
current graphical and text output from the managed server.
I The AVR Java applet allows you to use the Remote Storage feature (see
chapter Remote Storage on page 155).
iRMC
133
Prerequisites
5.1
Refresh rates
[in Hz]
Maximum
color depth
[bits]
60; 75
32
16
60; 70; 75
16
1152 x 864
60; 70; 75
40 x 25
80 x 25
80 x 43
80 x 50
Refer to the Help system for your operating system for information on the display
settings.
Keyboard settings
134
iRMC
5.2
Using AVR
To start AVR, click the Start Video Redirection button on the Advanced Video
Redirection page of the iRMC web interface (see page 288).
The Advanced Video Redirection window (AVR window) opens, showing you
the display on the managed server.
The AVR window also contains the following elements:
Menu bar: The Preferences and Extras menus allow you to configure the
AVR settings and to control the AVR (see page 147). Remote Storage is
used to call the remote storage function (see page 151).
Integrated special keys (see page 138).
The Local Monitor indicator shows whether the local monitor of the
managed server is switched on (see section Local Monitor Off function
on page 137.
Menu bar
iRMC
135
Using AVR
5.2.1
AVR can be used by two user sessions simultaneously. One user has full control
over the server (full-control mode) and the other can only passively observe
keyboard and mouse operation of the server (view only mode).
When AVR is first started, you are initially in view only mode. You will always be
asked if you want to switch to full-control mode. If you decide to switch to fullcontrol mode and another full-control mode session is already active, the
existing session is switched to view-only mode.
136
iRMC
5.2.2
Using AVR
The Local Monitor Off function of the iRMC allows you to power down the local
monitor of the managed server for the duration of your AVR session. In this way,
you ensure that the inputs you make and the actions you perform on the local
monitor on the server using AVR cannot be seen. The identification LED flashes
to indicate Local Monitor Off mode on the server.
You configure the Local Monitor Off function on the Advanced Video Redirection
page of the iRMC web interface (see page 288). After you have configured the
system appropriately, you can switch the local monitor of the server on and off
from the remote workstation as follows:
In Full Control mode in an AVR session using the Extras menu
directly on the Advanced Video Redirection page with administrator or OEM
permissions
You can also configure that the local monitor is always switched off
automatically whenever a new AVR session is started.
The current status of the local monitor is shown in the AVR window in blue
letters to the right of the integrated special keys:
Local Monitor always on
The local monitor is always switched on and cannot be switched off, as
the Enable Local Monitor Off option (see page 290) is deactivated.
Local Monitor is: on
The local monitor is on, but can be switched off.
Local Monitor is: off
The local monitor is off, but can be switched on.
iRMC
137
Using AVR
5.2.3
Keyboard redirection only works when the focus is on the AVR window.
If keyboard redirection appears not to be working, simply click on the AVR
window.
If the keyboard does not respond, check that the AVR window is not in viewonly mode. How to switch to full-control mode is described on page 149.
Special key combinations
AVR passes all normal key combinations to the server. Special keys such as
Windows keys are not sent. Some special key combinations suchas [ALT] +
[F4] cannot be sent, because they are interrupted by the clients operating
system. In such cases, you should use the integrated special keys or the virtual
keyboard.
Integrated special keys
Below the menu bar of the AVR window, you will find a bar containing the special
keys. These keys are implemented as sticky keys, i.e. they remain pressed
when you click them and only return to their normal position when you click them
again.
Using the integrated special keys, you can, for instance, use Windows keys or
special key combinations which are not sent by AVR if you press them on your
own keyboard.
[Mouse Sync]
Press this key to synchronize the mouse pointers (see also section
Synchronizing the mouse pointer on page 140).
[Ctrl]
Left CTRL key (corresponds to the [Ctrl] key on your keyboard).
[Alt]
Alt(ernate) key (corresponds to the [Alt] key on your keyboard).
138
iRMC
Using AVR
[Win]
Left and right Windows keys (correspond to the keys on your keyboard
between the left and right [Ctrl] and [Alt ] keys).
[Alt Gr]
Alt(ernate) Gr(aphic) key (corresponds to the [Alt Gr] key on your
keyboard).
[Context]
Context menu for the selected object (corresponds to the key
combination [Shift] + [F10] on your keyboard).
[Lock]
Caps lock (corresponds to the [Caps Lock] key on your keyboard).
[Ctrl-Alt-Del]
Corresponds to the key combination [Ctrl]+ [Alt] + [Del] on your
keyboard.
Virtual keyboard
The virtual keyboard (see figure 43) provides you with a functional
representation of the keyboard. All key combinations are available when you
use the virtual keyboard. This means that you can use the virtual keyboard as
a fully functional replacement for a real keyboard.
You activate the virtual keyboard in the AVR window from the Extras menu (see
page 148).
Secure keyboard
If you are connected to the iRMC web interface over an HTTPS connection,
entries at the keyboard are transferred over a secure SSL connection.
iRMC
139
Using AVR
5.2.4
The mouse pointer on the managed server is moved synchronously with the
mouse on the remote workstation. You configure the mouse redirection settings
in the AVR window in the
Preferences menu, - Mouse tab (see page 152).
5.2.4.1
When the AVR window is first opened, it is possible that the mouse pointer on
the remote workstation (local mouse pointer) is not yet synchronized with the
mouse pointer on the managed server.
To synchronize the two mouse pointers, use one of the following alternatives
(see figure 44 on page 141):
Click [Mouse Sync] in the menu bar of the AVR window.
Move the local mouse pointer to the top left corner of the AVR window. The
mouse pointer on the managed server automatically follows this movement.
The pointers are synchronized when the two mouse pointers completely
overlap.
140
iRMC
Using AVR
(3)
(1)
(2)
iRMC
141
Using AVR
5.2.4.2
On a Windows server, you can either make the settings for mouse pointer
synchronization using a batch program or using the Windows Start menu and
the context menu.
You must adjust the following settings:
Speed of the mouse pointer
Hardware acceleration
I When you adjust the settings using a batch program, the Matrox graphics
driver is installed as well as the mouse pointer speed and hardware
acceleration being adjusted.
You can make all the settings for the managed server either directly at the
managed server or from the remote workstation over AVR.
Adjusting the settings on the managed server using a batch program
Proceed as follows:
Open a DOS prompt window.
Switch to the folder in which the batch program
ServerEnginesG200e_Kronos1_SETUP.exe for the relevant Matrox VGA driver
installation (32-bit or 64-bit) is located.
Type setup.bat to start the batch program.
Reboot the managed server when the batch program has executed.
142
iRMC
Using AVR
Adjusting the settings on the managed server using the Windows Start
menu and the context menu
Proceed as follows to adjust the mouse pointer:
Choose
Start - Settings - Control Panel - Printers and Other Hardware - Mouse and the Pointer Options tab.
This opens the following window:
iRMC
143
Using AVR
144
iRMC
Using AVR
Prerequisite: The managed server is running under one of the following Linux
operating systems:
You can adjust the mouse pointer synchronization settings on the managed
server either using commands or under menu guidance.
You must adjust the following settings:
Pointer acceleration
Pointer threshold
You can make all the settings for the managed server either directly at the
managed server or from the remote workstation over AVR.
Adjusting the settings on the managed server using commands
Use the xset command to make the settings for Pointer acceleration and Pointer
threshold (recommended values: 1 in each case).
Command syntax:
xset m(ouse)][acceleration][threshold]
Proceed as follows:
Call a command line tool.
Run the command xset with the following arguments:
xset m 1 1
iRMC
145
Using AVR
I It is not necessary to set the values again after rebooting the server.
146
iRMC
5.3
The menu bar of the Advanced Video Redirection window contains the following
menus:
The Extras menu allows you to control the AVR session. You can also make
a virtual keyboard available.
You can set up and clear remote storage connections with the Remote Storage
menu.
The Languages menu allows you to set the language (German/English) used
to display the AVR menus and dialogs.
The Preferences menu allows you to configure the mouse, keyboard and
logging settings.
iRMC
147
5.3.1
Extras menu
148
iRMC
iRMC
149
Disconnect Session...
Terminate another AVR session.
150
iRMC
5.3.2
Remote Storage...
Double-click Remote Storage... to open the Storage Devices dialog box (see
page 158). This window allows you to attach or detach media on the
remote workstation as Remote Storage devices (see chapter Remote
Storage on page 155).
5.3.3
Languages menu
From the Languages menu, choose the language in which the menus and dialog
boxes of the AVR window are to be shown:
iRMC
151
5.3.4
Preferences menu
The Preferences contains tabs for configuring the mouse, keyboard and logging
together with a Misc tab for further functions:
Mouse tab
The Mouse allows you to specify the mouse mode:
Depending on the server operating system, you must make the following
settings:
Windows: Absolute Mode, Hide Mode (Relative) or Relative Mode
Linux: Hide Mode (Relative), Relative Mode
iRMC
Keyboard tab
The Keyboard tab allows you to specify the keyboard layout for the virtual
console:
Language
Select the keyboard layout for the virtual console.
iRMC
153
Misc tab
On the Misc tab, you configure whether the iRMC is to perform hardware
compression for the AVR session.
154
iRMC
Remote Storage
I The Remote Storage page of the iRMC web interface allows you to obtain
iRMC
155
6.1
Remote Storage
If you provide the source for a virtual drive on the remote workstation then the
remote storage functionality supports the following device types:
You can use the virtual drive to install an operating system on your PRIMERGY
server from the remote workstation (see chapter IPMI OEM Commands on
page 415).
This section provides information on the following topics:
Starting Remote Storage
Provision of storage media for Remote Storage
Connecting storage media as remote storage
Clearing Remote Storage connections
Removing media made available for Remote Storage
156
iRMC
Remote Storage
6.1.1
You start the Remote Storage function using the AVR Java applet (see section
Advanced Video Redirection - Start Advanced Video Redirection (AVR) on
page 288).
Start the iRMC web interface (see section Logging into the iRMC web
interface on page 178).
Open the Advanced Video Redirection page and click on the Start Video
Redirection, button to start Advanced Video Redirection (see section
Advanced Video Redirection - Start Advanced Video Redirection (AVR) on
page 288).
This opens the AVR window.
In the menu bar in the AVR window, choose:
Remote Storage - Remote Storage...
Figure 58: Advanced Video Redirection window - Remote Storage - Remote Storage...
The Storage Devices dialog box opens, containing the storage media currently
available for Remote Storage (see figure 59 on page 158).
iRMC
157
Remote Storage
If a storage medium is inserted, but its contents are not displayed, the
storage medium is reserved by the local explorer.
158
iRMC
Remote Storage
6.1.2
In the Add Storage Device dialog box, navigate to the directory of the remote
storage medium that you want to make available for remote storage from
your remote workstation.
Select the required device type under Storage Type:.
The following device types are supported:
Specify the storage medium you wish to connect as Remote Storage under
File Name:
In the case of an image file (ISO/NRG image), enter the file name.
Alternatively, click on the file name in the Explorer.
In the case of a drive, enter the name of the drive, e.g.
D for drive D (Windows)
/dev/... (Linux)
iRMC
159
Remote Storage
Figure 61: Add Storage Device dialog box: Selecting the storage medium
Figure 62: Storage Devices dialog box: The provided storage medium is displayed.
160
iRMC
Remote Storage
6.1.3
In the Storage Devices dialog box, click the storage medium that you want to
connect as Remote Storage.
Figure 63: Storage Devices dialog box: Connecting a storage medium as remote storage
iRMC
161
Remote Storage
The Storage Devices dialog box appears with the message regarding safe
removal. The storage medium is connected as Remote Storage.
Figure 64: Storage Devices dialog box: The storage medium is connected as Remote
Storage.
162
iRMC
Remote Storage
6.1.4
Open the Storage Devices dialog box (see section Starting Remote Storage
on page 157).
The list of storage media connected as Remote Storage is displayed:
Figure 65: Storage Devices dialog box: Clearing Remote Storage connections
iRMC
163
6.1.5
Remote Storage
Remove a storage medium from the list of media available for Remote Storage
as follows:
Open the Storage Devices dialog box (see section Starting Remote Storage
on page 157).
The list of storage media available for Remote Storage is displayed:
Figure 66: Storage Devices dialog box: Removing a Remote Storage medium
164
iRMC
Remote Storage
6.2
You can use a remote storage server to provide an image file (ISO/NRG image)
as remote storage for any number of PRIMERGY servers that can be
administered via iRMC. You can use this image file to boot one or more
PRIMERGY servers from the remote workstation (see chapter IPMI OEM
Commands on page 415).
iRMC
165
6.2.1
Remote Storage
I The Remote Storage server is available in 32-bit and 64-bit versions. The
32-bit and 64-bit versions of the Remote Storage server must not be
installed at the same time on 64-bit systems.
166
iRMC
Remote Storage
Figure 68: Installing the remote storage server: Specifying the installation folder
If you do not want to install the remote storage server in the default folder,
click Browse... to navigate to the directory you wish to use.
Click the Next button.
The window allowing you to select where the program shortcut appears in
the Start menu appears (see figure 69 on page 168).
iRMC
167
Remote Storage
Figure 69: Installing the remote storage server: Specifying the installation folder
If you do not want to place the program shortcut in the default folder, specify
the folder you wish to use by clicking Browse....
Click the Next button.
The Ready to Install window opens. Here you can check the settings you have
made and launch installation of the remote storage server (see figure 70 on
page 169).
168
iRMC
Remote Storage
iRMC
169
Remote Storage
Figure 71: Installing the remote storage server: Closing the installation program
I If you check the Launch Remote Storage Server option, the remote
storage servers GUI (see page 172) is started when the installation
program has been closed.
170
iRMC
Remote Storage
6.2.2
You can execute the remote storage server in the following modes as required:
as a background service
as a stand-along program
You configure the Remote Storage server execution mode via a graphical user
interface (see page 172).
Executing the remote storage server as a service
The following points should be noted
The image file can be located either on a computer in the network or on the
same host on which the remote storage server is running.
I If the image file is not on the computer on which the remote storage
server is running, you must specify the path of the image file in UNC
notation. You also need a user account with access permissions on
the image file.
When the host on which the remote storage server is located is booted, the
remote storage server starts automatically. The remote storage server is
then executed until it is explicitly terminated or the host is shut down.
When the host on which the remote storage server is located is booted, the
image file becomes available automatically.
Executing the remote storage server as a stand-alone program
The following points should be noted
The image file (ISO/NRG image) may be present locally on the remote
storage server or on an assigned network drive.
When the host on which the remote storage server is located is booted, you
must start the image file manually.
iRMC
171
6.2.3
Remote Storage
You configure, start and exit the remote storage server via a graphical user
interface (GUI).
Calling the remote storage servers graphical user interface
You call the remote storage servers graphical user interface as follows:
Choose Start - Programs - Fujitsu RemoteStorageServer - Remote Storage Server.
The remote storage servers graphical user interface appears:
Figure 72: The remote storage servers graphical user interface (here in the Idle state)
172
iRMC
Remote Storage
In the graphical user interface, you specify the image file made available as
remote storage together with other parameters:
ISO Image Path and Filename:
Enter the path and name of the image file directly in the field.
or:
Click the Browse... button and then navigate to and select the required
image file in the Choose a file dialog box which now opens and then
confirm.
iRMC
173
Remote Storage
Run as Service
Activate this option if the remote storage server is to be executed as a
service in the background (see page 171).
Select one of the two options below:
Use Local System Account
The Remote Storage server is executed as a service under the
local system account.
In this event, the image file (ISO/NRG image) must be located
on a local drive.
Log On As User
he Remote Storage server is executed under the user account
that you specify in the following input fields.
Specify the user name in the form:
For local users: .\Logon-Name
For domain users:
DOMAIN\LogOnName
or
LogOnName@DOMAIN<mailto:LogOnName@DOMAIN>
174
iRMC
Remote Storage
Status Messages:
The logged execution states of the remote storage server are displayed
here.
I If the Run as service execution mode is configured (see page 174), then
iRMC
175
Remote Storage
176
iRMC
The iRMC not only has its own operating system, but also acts as a web server,
providing its own interface.
You can choose whether to show the menus and dialog boxes of the iRMC web
interface in German or English. You can also switch between the available
interface languages within the same session.
When you enter values in the iRMC web interface, you often receive assistance
in the form of tool tips.
iRMC
177
7.1
Open a web browser on the remote workstation and enter the (configured)
DNS name (see page 245) or IP address of the iRMC.
Different login screens appear depending on whether LDAP access to a
directory service has been configured for the iRMC (LDAP enabled option,
see page 270):
LDAP access to the directory service is not configured for the iRMC
(LDAP enabled option is not activated):
Figure 74: Login screen for the iRMC web interface (LDAP access not configured)
178
iRMC
Figure 75: Login screen for the iRMC web interface (LDAP access configured)
they are transmitted. If you activate the Secure (SSL) option, all
communication between the web browser and the iRMC is carried
out over HTTPS.
new administrator account once you have logged in, and then
delete the default administrator account or at least change the
password for the account (see User <name> Configuration User configuration (details) on page 262).
iRMC
179
7.2
X
X
X
X
User
Operator
Permitted with
permission
Administrator
Permitted with
IPMI privilege
level
OEM
180
iRMC
Permitted with
permission
User
Operator
Administrator
Permitted with
IPMI privilege
level
OEM
iRMC
181
X
X
Permitted with
permission
User
Operator
Administrator
Permitted with
IPMI privilege
level
OEM
X
X
182
iRMC
7.3
Selected function
Navigation area
Working area
iRMC
183
Navigation area
The navigation area contains the menu tree structure whose nodes combine the
links to the individual iRMC functions arranged on a task basis. When you click
one of these links (in figure 76:System Overview), the link is enabled and the work
area for that function is displayed showing any output, dialog boxes, options,
links and buttons.
Below the links to the individual iRMC functions, you will find the links Logout
and Refresh:
Logout allows you to terminate the iRMC session after you have confirmed
this in a dialog box. Different login screens appear after the session has
been closed depending on whether LDAP access to a directory service has
been configured for the iRMC (LDAP enabled option, see page 270):
If LDAP access to the directory service is not configured for the iRMC
(LDAP enabled is not activated), the following login screen appears:
Click the Login button to open the login screen of the iRMC web interface
(see figure 74 on page 178). This allows you to log in again if you wish.
If LDAP access to the directory service is configured for the iRMC (LDAP
enabled is activated), the appropriate login screen appears (see figure 75
on page 179).
184
iRMC
iRMC
185
System Information
7.4
The System Information entry contains the links to the following pages:
System Overview - General information on the server on page 187
System Component Information - Information on the server components
on page 190
186
iRMC
7.4.1
System Information
iRMC
187
System Information
System Status
System Status provides you with information on the Global Error display of the
PRIMERGY Server. You can also switch the PRIMERGY identification LED on
and off.
Power LED
Power status of the server.
The following statuses are possible:
On: Power ON (green)
Off: Power OFF (orange)
Error LED
Provides information on the Global Error LED on the server:
Display
(iRMC)
Global Error
LED on the
server
off
Not lit.
On
Lit red.
Flashing
Flashing red.
Critical event.
Identify LED
Status of the identification LED.
The following statuses are possible:
On: ON (blue)
Off: OFF (gray)
Turn On/ Turn Off
Click the Turn On / Turn Off toggle button to turn the identification
LED on or off.
188
iRMC
System Information
iRMC
189
System Information
7.4.2
190
iRMC
7.5
iRMC
iRMC
191
7.5.1
The iRMC Information page provides you with the following options:
View information on the firmware and the SDRR version of the iRMC, set the
firmware selector and restart the iRMC.
View information on the active iRMC sessions.
Load license key onto the iRMC.
192
iRMC
Firmware Information
Under Firmware Information, you can view information on the firmware version
and the SDRR version of the iRMC and set the firmware selector.
Firmware Selector
You use the firmware selector to specify which firmware image is to be
activated the next time the iRMC is rebooted.
You have the following options:
Auto - EEPROM with highest FW version
The EEPROM with the most recent version is selected automatically.
EEPROM1
EEPROM 1 is selected.
EEPROM2
EEPROM 2 is selected.
Select EEPROM with oldest FW version
The firmware image with the oldest version is selected.
iRMC
193
I You require a valid license key to be able to use the iRMC functions
Advanced Video Redirection (see page 288) and Remote Storage (see
page 296).
You can purchase the license key.
Upload
When you click this button, the license key specified in the input field is
loaded onto the iRMC.
194
iRMC
Default Language
Specifies the language (German / English) that is set as default the next
time the iRMC web interface is called.
Temperature Units
Specifies the unit used for displaying temperature values at the iRMC
web interface (degrees Celsius / degrees Fahrenheit). This setting
applies for the current session and is preset the next time the iRMC web
interface is called.
Colour Schema
Specifies the color scheme for displaying the iRMC web interface. This
setting applies for the current session and is preset the next time the
iRMC web interface is called.
iRMC
195
7.5.2
The Save iRMC Firmware Settings page allows you to save the current firmware
settings and a number of other settings for the iRMC in a file.
The firmware settings selected under Save iRMC Firmware settings in
ServerView WinSCU XML format are saved in a file with the name
iRMC_settings.pre. In WinSCU (see page 331), you can use the Import...
button to load the firmware settings onto the iRMC again.
The firmware settings selected under Save iRMC Firmware settings in binary
(BMCCLONE.exe) format are saved in a file with the name iRMC_settings.bin.
V CAUTION!
Always save the setting using
Save iRMC Firmware settings in ServerView WinSCU XML format.
Save iRMC Firmware settings in binary (BMCCLONE.exe) format should only
be used if the system module of the managed server is being replaced.
I If you want to save the user settings (Include User Settings), you require
Configure User Accounts permission. In all other cases, Configure iRMC
settings permission is sufficient.
196
iRMC
Save
Click Save to save the selected settings.
Save All
Click Save All to save all the settings.
iRMC
197
7.5.3
The Certificate Upload page allows you to load a signed X.509 DSA/RSA
certificate (SSL) from a Certificate Authority (CA) and/or your private DSA/RSA
key (SSH) onto the iRMC.
198
iRMC
iRMC
199
Figure 86: Certificate Upload page - display of the currently valid SSL/SSH certificate
200
iRMC
iRMC
201
Loading the DSA/RSA certificate and private DSA/RSA key from local files
You do this using the group
SSL Certificate and DSA/RSA private key upload from file.
Figure 88: Loading the DSA/RSA certificate and private DSA/RSA key from local files
Proceed as follows:
Save the X.509 DSA/RSA (SSL) certificate and private DSA/RSA key in
corresponding local files on the managed server.
Specify the files Private Key File and Certificate File by clicking on the
associated Browse button and navigating to the file which contains the
private key or the certificate.
Click the Upload button to load the certificate and the private key onto the
iRMC.
I When you upload the certificate and private key, all the existing
Click the View Certificate button to make sure that the certificate has been
loaded successfully.
202
iRMC
Figure 89: Entering the DSA/RSA certificate / private DSARSA key directly
Proceed as follows:
Copy the X.509 DSA certificate or the private DSA key to the input area.
I You cannot simultaneously enter the certificate and key for the same
upload.
Click the Upload button to load the certificate or the private key onto the
iRMC.
Use the Remote Manager to reset the iRMC (see section Service processor
- IP parameters, identification LED and iRMC reset on page 321).
Click the View Certificate button to make sure that the certificate has been
loaded successfully.
iRMC
203
7.5.4
204
iRMC
View Certificate
You can view the currently valid DSA/RSA certificate using this button.
Default Certificate
You can use this button to restore the default certificate delivered with
the firmware after you have confirmed that you wish to do so.
Enter the requisite details under Certificate Creation.
Click Create to create the certificate.
iRMC
205
Power Management
7.6
Power Management
The Power Management entry contains the links to the power management pages
for your PRIMERGY server:
Power On/Off - power the server up/down on page 207.
Power Options - Configuring power management for the server on
page 211.
Power Supply Info - Power supply and IDPROM data for the FRU
components on page 214.
206
iRMC
7.6.1
The Power On/Off page allows you to power the managed server on and off. You
are informed of the servers current power status and are also able to configure
the behavior of the server during the next boot operation.
iRMC
207
208
iRMC
Boot Options
The Boot Options group allows you to configure the behavior of the system the
next time it is booted. You can set whether the BIOS is to interrupt the boot
process for the system if errors occur during the POST phase.
I The options set here only apply to the next boot operation. After this, the
default mechanism applies again.
Select the desired BIOS behavior from the Error Halt Settings list:
Continue
Continue the boot process if errors occur during the POST phase.
Halt on errors
Interrupt the boot process if errors occur during the POST phase.
From the Boot Device Selector list, select the storage medium you wish to boot
from.
The following options are available:
No change: The system is booted from the same storage medium as
previously.
PXE/iSCSI: The system is booted from PXE / iSCSI over the network.
Harddrive: The system is booted from hard disk.
CDROM/DVD: The system is booted from CD /DVD.
Floppy: The system is booted from floppy disk.
Click the Apply button to activate your settings.
iRMC
209
Power On
Switches the server on.
Immediate Power Off
Powers the server down, regardless of the status of the operating
system.
Immediate Reset
Completely restarts the server (cold start), regardless of the status of the
operating system.
Power Cycle
Powers the server down completely and then powers it up again after a
configured period. You can configure this time in the Power Cycle Delay
field of the ASR&R Options group (see page 231).
Graceful Power Off (Shutdown)
Graceful shutdown and power off.
This option is only available if ServerView agents are installed and
signed onto the iRMC as Connected.
Graceful Reset (Reboot)
Graceful shutdown and reboot.
This option is only available if ServerView agents are installed and
signed onto the iRMC as Connected.
Click the Apply button to start the required action.
210
iRMC
7.6.2
The Power Options page allows you to define the servers behavior after a power
outage and specify the servers power on/off times.
iRMC
211
Power Restore Policy - Specify behavior of the server after a power outage
The Power Restore Policy group allows you to specify the servers power
management behavior after a power outage.
212
iRMC
Power On/Off Time - Specify power on/off times for the server
The input fields of the Power On/Off Time group allow you to specify the times at
which the server is powered up/down for the individual days of the week or for
specified times during the day.
iRMC
213
7.6.3
The Power Supply Info page provides you with information on the power supply
specifications and the IDPROM data of the FRUs of the server.
214
iRMC
7.7
Sensors
The Sensors entry provides you with pages which allow you to test the sensors
of the managed server:
Fans - Check fans on page 216.
Temperature - Check temperature sensors on page 218.
Voltages - Check voltage sensors on page 220.
Power Supply - Check power supply on page 221.
Component Status - Check status of the server components on page 222.
To facilitate checking the status, the sensor status is not only shown in the form
of the current value, but also using a color code and a status icon:
Black /
Orange /
Red /
iRMC
215
Sensors - Fans
7.7.1
216
iRMC
Sensors - Fans
System Fans - Specify server behavior in the event that a fan fails
The System Fans group provides you with information on the status of the fans.
You can use the options or buttons to select individual fans or all the fans and
specify whether the server should be shut down after a specified number of
seconds if this fan fails.
Select all
Selects all fans.
Deselect all
All selections are cancelled.
Select the fans for which you wish to define the behavior in the event of a
fault.
Define the behavior in the event of a fault using the list at the bottom of the
work area:
Choose continue if the server is not to be shut down if the selected fans
fail.
Choose shutdown-and-power-off if the server is to be shut down and
powered down if the selected fans fail. If you choose this option, you must
also specify the time in seconds between failure of the fan and shutdown
of the server (Shutdown Delay) in the field to the right of the list.
Click the Apply to the selected Fans button to activate your settings for the
selected fans.
iRMC
217
Sensors - Temperature
7.7.2
You can use the options or buttons to select individual temperature sensors or
all the temperature sensors and specify whether the server is to be shut down
if the critical temperature is reached at the selected sensors.
Select all
Selects all temperature sensors.
Deselect all
All selections are cancelled.
Select the sensors for which you wish to define the behavior in the event that
the critical temperature is reached.
218
iRMC
Sensors - Temperature
Define the behavior in the event that the critical temperature is reached
using the list at the bottom of the work area:
Choose continue if the server is not to be shut down if the critical
temperature is reached at the selected sensors.
Choose shutdown-and-power-off if the server is to be shut down and
powered down if the critical temperature is reached at the selected
sensors.
Click the Apply to the selected Sensors button to activate your settings for the
selected temperature sensors.
iRMC
219
Sensors - Voltages
7.7.3
The Voltages page provides information on the status of the voltage sensors
assigned to the server components.
220
iRMC
7.7.4
The Power Supply page provides information on the power supplied from the
power supply units and the power consumed by the system components.
iRMC
221
7.7.5
The Component Status page provides information on the status of the server
components.
222
iRMC
7.8
The System Event Log entry contains the links to the pages for viewing and
configuring the server event log (system event log, SEL):
System Event Log Content - Show information on the SEL and SEL entries
on page 224.
System Event Log Configuration - Configure the SEL on page 227.
Colored icons are assigned to the various event/error categories to improve
clarity:
Critical
Major
Minor
Informational
iRMC
223
7.8.1
System Event Log Content Show information on the SEL and SEL entries
The System Event Log Content page provides information on the SEL and displays
the SEL entries.
224
iRMC
Figure 105: System Event Log Content page, System Event Log Information
iRMC
225
You can modify the filter criteria for the duration of the current session in
the System Event Log Content group. However, the settings you make here
are only valid until the next logout. After that, the default settings apply
again.
Figure 106: System Event Log Content page, System Event Log Content
226
iRMC
7.8.2
iRMC
227
Ring SEL
The SEL is organized as a ring buffer.
IPMI SEL
The SEL is organized as a linear buffer.
I When the linear SEL has been completely filled, it is not possible
to add any further entries.
228
iRMC
7.9
The Server Management Information page allows you to configure the following
settings on the server:
ASR&R (automatic server reconfiguration and restart) settings for the server
(see page 231)
Watchdog settings (see page 233)
Integration of HP System Insight Manager (HP SIM) (see page 234)
I The settings made on this page become active the next time the
managed server is started.
iRMC
229
230
iRMC
iRMC
231
boots after the firmware has been updated. A BIOS recovery flash
is then performed automatically the next time the system is booted
from the DOS floppy (or a DOS floppy image).
After a BIOS recovery flash has been performed successfully,
reset the BIOS Recovery Flash bit to disabled.
232
iRMC
The software watchdog monitors the activities of system using the ServerView
agents. The software watchdog is activated when the ServerView agents and
the operating system have been completely initialized.
The ServerView agents contact the iRMC at defined intervals. If no more
messages are received from a ServerView agent, it is assumed that the system
is no longer functioning correctly.
You can specify an action to be performed if this happens.
The boot watchdog monitors the phase between startup of the system and the
time at which the ServerView agents become available.
If the ServerView agents do not establish a connection to the iRMC of the server
within a specified time, it is assumed that the boot process has not been
successful.
You can specify an action to be performed if this happens.
Proceed as follows:
Check or uncheck the option(s) under Enabled for the Software Watchdog
and/or Boot Watchdog.
If you have activated either of these options, you can configure the following
settings after Software Watchdog and/or Boot Watchdog:
Continue
No action is performed when the watchdog has expired, i.e. the
server continues to run. An entry is made in the event log.
Reset
The server management software triggers a system reset.
iRMC
233
Power Cycle
The server is powered down and immediately powered up again.
As appropriate, enter the time (in minutes) after which this action is to be
performed following after timeout delay.
I The boot watchdog must wait until the system has been started. You
therefore have to specify a sufficient period for after timeout delay (1 100).
Proceed as follows:
Enable or disable the HP SIM Integration Disabled option to disable or enable
HP SIM integration.
Click the Apply button to apply the selected setting.
234
iRMC
7.10
Network Settings
The Network Settings entry brings together the links to the pages you use to
configure the LAN parameters of the iRMC:
Network Interface - Configure Ethernet settings on the iRMC on page 236.
Ports and Network Services - Configuring ports and network services on
page 239.
DHCP Configuration - Configuring the host name for the iRMC on
page 243.
DNS Configuration - Enable DNS for the iRMC on page 245.
iRMC
235
V CAUTION!
Contact the network administrator responsible for the system before you
change the Ethernet settings.
If you make illegal Ethernet settings for the iRMC, you will only be able to
access the iRMC using special configuration software, the serial
interface or via the BIOS.
I Only users with the Configure iRMC Settings permission are allowed to edit
Ethernet settings (see chapter User management for the iRMC on
page 57).
236
iRMC
MAC Address
The iRMCs MAC address is displayed here.
LAN Speed
LAN speed. The following options are available:
Auto Negotiation
100 MBit/s Full Duplex
100 MBit/s Half Duplex
10 MBit/s Full Duplex
10 MBit/s Half Duplex
iRMC
237
IP Address
The IP address of the iRMC in the LAN. This address is different from the
IP address of the managed server.
I If you are working with a static address (DHCP enable option not
activated) then you can enter this here. Otherwise (if the DHCP
enable option is activated), the iRMC only uses the field to display
the address.
Subnet Mask
Subnet mask of the iRMC in the LAN.
gateway
IP address of the default gateway in the LAN.
DHCP Enabled
If you activate this option, the iRMC gets its LAN settings from a DHCP
server on the network.
238
iRMC
7.10.2 Ports and Network Services Configuring ports and network services
The Ports and Network Services page allows you to view and modify the
configuration settings for ports and network services.
I Configuration is not supported for ports where the input fields are
deactivated in the iRMC web interface.
iRMC
239
HTTP Port
HTTP port of the iRMC
Default port number: 80
Configurable: yes
Enabled by default: yes
Communication direction: inbound and outbound
HTTPS Port
HTTPS (HTTP Secure) port of the iRMC
Default port number: 443
Configurable: yes
Enabled by default: yes
Communication direction: inbound and outbound
Force HTTPS
If you enable the Force HTTPS option, users can only establish a secure
connection to the iRMC on the HTTPS port specified in the entry field.
If you disable the Force HTTPS option, users can establish a non-secure
connection to the iRMC on the HTTP port specified in the entry field.
240
iRMC
I If you enter a value for the refresh interval which is less than the
Session Timeout (see page 240), your session will not automatically
be closed when the time specified in Session Timeout has elapsed
in the event of inactivity.
iRMC
241
VNC ports
Standard Port
VNC port of the iRMC for secure and non-secure Advanced Video
Redirection (AVR)
Port number: 80
Configurable: yes
Enabled by default: yes
Communication direction: inbound
Secure Port (SSL)
VNC port of the iRMC for the SSL-secured transfer of mouse and
keyboard input for AVR.
Port number: 443
Configurable: yes
Enabled by default: yes
Communication direction: inbound
Remote Storage Ports
Standard Port
Standard remote storage port of the iRMC
Default port number: 5901
Configurable: yes
Enabled by default: yes
Communication direction: outbound to the remote workstation
Click the Apply button to store the configured settings.
242
iRMC
7.10.3 DHCP Configuration Configuring the host name for the iRMC
The DHCP Configuration page allows you to configure a host name for the iRMC
and thus use dynamic DNS. Dynamic DNS allows DHCP servers to
autonomously pass on the IP address and system name of a network
component to DNS servers to facilitate identification.
iRMC
243
244
iRMC
DNS Enabled
Enables/disables DNS for the iRMC.
Obtain DNS configuration from DHCP
If you activate this option, the IP addresses of the DNS servers are
obtained automatically from the DHCP server.
In this event, up to five DNS servers are supported.
If you do not enabled this setting, you can enter up to five DNS server
addresses manually under DNS-Server 1 - DNS-Server 5.
iRMC
245
DNS Domain
If the option Obtain DNS configuration from DHCP is disabled, specify the
name of the default domain for requests to the DNS server(s).
DNS Server 1 .. 5
If the Obtain DNS configuration from DHCP option is disabled, you can
enter the names of up to five DNS servers here.
Click the Apply button to store the configured settings.
246
iRMC
7.11
Alerting
The Alerting entry contains the links to the pages you use to configure alerting
for the iRMC:
SNMP Trap Alerting - Configure SNMP trap alerting on page 248.
Serial / Modem Alerting - Configure alerting via modem on page 250.
Email Alerting - Configure email alerting on page 252.
iRMC
247
SNMP Community
Name of the SNMP community.
Click the Apply button to accept the community name.
248
iRMC
iRMC
249
250
iRMC
Signal Pager
Numeric Pager
Alpha pager
SMS
DoCoMo
iRMC
251
I Email alerting is currently not supported for global iRMC user IDs (see
chapter User management for the iRMC on page 57).
252
iRMC
iRMC
253
254
iRMC
SMTP Server
IP address of the primary mail server
I You can activate the Domain Name Service (DNS) for the iRMC
(see DNS Configuration - Enable DNS for the iRMC on
page 245). You can then use a symbolic name instead of the IP
address.
SMTP Port
SMTP port of the mail server
Auth Type
Authentication type for connecting the iRMC to the mail server:
None
No authentication for the connection.
SMTP AUTH (RFC 2554)
Authentication according to RFC 2554: SMTP Service Extension for
Authentication
Auth User Name
User name for authentication on the mail server
Auth Password
Password for authentication on the mail server
Confirm Password
Confirm the password entered.
Click the Apply button to activate your settings.
iRMC
255
SMTP Server
IP address of the secondary mail server
You can activate the Domain Name Service (DNS) for the iRMC
(see DNS Configuration - Enable DNS for the iRMC on
page 245). You can then use a symbolic name instead of the IP
address.
SMTP Port
SMTP port of the mail server
Click the Apply button to activate your settings.
256
iRMC
Standard
Fixed Subject
ITS-Format
Fujitsu REMCS Format
Subject
Fixed subject for the alert mails.
Only active for the Fixed Subject mail format (see page 266).
Message
Type of message (email).
Only active for the Fixed Subject mail format (see page 266).
iRMC
257
Admin Name
Name of the administrator responsible (optional).
Only active for the ITS mail format (see page 266).
Admin Phone
Phone number of the administrator responsible (optional).
Only active for the ITS mail format (see page 266).
REMCS Id
This ID is an additional server ID, similar to the serial number.
Only active for the mail format Fujitsu REMCS-Format.
Server URL
A URL under which the server is accessible under certain conditions. You
have to enter the URL manually.
Only active for the Standard mail format.
258
iRMC
7.12
User Management
The User Management entry contains the links to the pages for local user
management as well as for the configuration of the directory service for global
user management (LDAP configuration):
iRMC User - local user management on the iRMC on page 259
Directory Service Configuration (LDAP) - Configuring the directory service
at the iRMC on page 269
I User ID 1 (null user) is reserved for the IPMI standard and is therefore
unavailable for user management on the iRMC.
iRMC
259
Delete
The table of configured users includes a Delete button after each user
entry. Click this button to delete the associated user after confirming this
choice.
New User
When you click this button, the
New User Configuration page opens (see page 261). You can configure a
new user here.
260
iRMC
iRMC
261
262
iRMC
Figure 126: User Management - User <name> Configuration page, User Information
User Enabled
Disable this option to lock the user.
Name
Enter the name of the user.
Password
Enter the user password.
Confirm Password
Confirm the password by entering it again here.
Description
Enter a general description of the configured user here.
iRMC
263
User Shell
Select the desired user shell here.
The following options are available:
SMASH CLP
See section Start a Command Line shell... - Start a SMASH CLP
shell on page 323.
CLI Shell
See section Command Line Protocol (CLP) on page 324.
Remote Manager
See chapter iRMC via Telnet/SSH (Remote Manager) on page 303.
IPMI Basic Mode
IPMI Terminal Mode
None
264
iRMC
Figure 127: User Management - User <name> Configuration page, Privilege / Permissions
User
Operator
Administrator
OEM
iRMC
265
Figure 128: User Management - User <name> Configuration page, Email Configuration
Email Enabled
Specify whether the user is to be informed about system statuses by
email.
266
iRMC
Mail Format
Depending on the selected email format, you can make a number of
settings in the Email Alerting - Mail Format dependent Configuration group
(see page 257).
The following email formats are available:
Standard
Fixed Subject
ITS-Format
Fujitsu REMCS Format
iRMC
267
All
The iRMC notifies users of every event in this group which causes
an entry to be made in the system event log.
268
iRMC
7.12.2 Directory Service Configuration (LDAP) Configuring the directory service at the iRMC
In order to perform global user management via a directory service (see
page 66), you must configure the iRMC appropriately in the Directory Service
Configuration page.
I Currently, support for iRMC LDAP access is provided for the following
directory services: Microsoft Active Directory, Novell eDirectory and
Open LDAP.
iRMC
269
V CAUTION!
If the option Disable Local Login is activated and the connection to
the directory service fails then it is no longer possible to log in at
the iRMC.
Always use SSL Login
iRMC
iRMC
271
Figure 130: Global Directory Service Configuration: Specifications for Microsoft Active
Directory
I The entries shown as examples in figure 130 refer to the examples and
figures shown in section iRMC user management via Microsoft
Active Directory on page 77.
272
iRMC
Proceed as follows:
Complete your specifications in the Global Directory Service Configuration
group.
LDAP Server 1
IP address or DNS name of the LDAP directory server that is to be
used.
LDAP Server 2
IP address or DNS name of the LDAP directory server which is
maintained as the backup server and used as the directory server if
LDAP Server 1 fails.
Domain name
Complete DNS path name of the directory server.
Base DN
Base DN is automatically derived from Domain Name.
Department name
Department name. The directory service needs the department
name in order to determine the user permissions. A user may have
different permissions for the department X server than for the
department Y server (see also figure 17 on page 70).
In the Global Directory Service Configuration group, click the Apply button to
activate the settings you have made under
Global Directory Service Configuation.
This completes configuration of the directory service and activates it.
iRMC
273
Figure 131: Global Directory Service Configuration: Specifications for Novell eDirectory / Open
LDAP
I The entries shown as examples in figure 131 refer to the examples and
274
iRMC
Proceed as follows:
Complete your specifications in the Global Directory Service Configuration
group.
LDAP Server 1
IP address or DNS name of the LDAP directory server that is to be
used.
LDAP Server 2
IP address or DNS name of the LDAP directory server which is
maintained as the backup server and used as the directory server if
LDAP Server 1 fails.
Dept. name
Department name. The directory service needs the department
name in order to determine the user permissions. A user may have
different permissions for the department X server than for the
department Y server (see also figure 17 on page 70).
Base DN
The Base DN is the fully distinguished name of the eDirectory or Open
LDAP server and represents the tree or subtree that contains the OU
(Organizational Unit) iRMCgroups. This DN forms the starting point for
LDAP searches.
Group DN Context
Pathname of the OU iRMCgroups as a subtree of Base DN.
User Search DN
Pathname of the OU Users as a subtree of Base DN.
On the Directory Service Configuration page, click the Apply button to activate
the settings you have made under Global Directory Service Configuration.
Make the following entries in the Global Service Access Configuration group:
LDAP Auth Password
Password the principal user uses to authenticate themselves on the
LDAP server.
Confirm Password
Repeat the password you entered under LDAP Auth Password.
Principal User DN
Fully distinguished name of the generic iRMC user ID (principal user)
under which the iRMC queries the permissions of the iRMC users
from the LDAP server.
iRMC
275
V CAUTION!
Only activate this option if you are familiar with the LDAP
syntax. If you inadvertently specify and activate an invalid
search filter, users can only log in to the iRMC under a global
login after the Enhanced User Login option has been
deactivated.
Click the Apply button to complete the directory service configuration and
activate the settings.
276
iRMC
7.13
Console Redirection
7.13.1 BIOS Text Console Configure and start text console redirection
The BIOS Text Console page allows you to configure and start text console
redirection.
I Text console redirection can also be configured in the BIOS (see section
Configuring text console redirection via LAN using the BIOS Setup
program on page 42).
iRMC
277
278
iRMC
Figure 134: BIOS Text Console - BIOS Console Redirection Options page
iRMC
279
280
iRMC
7.13.1.2 Text Console Redirection (via Serial over LAN) Start text console redirection
Text Console Redirection (via Serial Over LAN) allows you to start text console
redirection.
I Text console redirection via Serial over LAN (SOL) assumes that the
operating system and/or the BIOS use serial port 1 (COM1) for text
console redirection.
Figure 135: Start text console redirection via Serial over LAN (SOL).
Click the Start Console Redirection button to start text console redirection
function.
The Java applet for text console redirection is started (see figure 136 on
page 282):
iRMC
281
Figure 136: Window for power management and text console redirection (before login)
Figure 137: Power management and text console redirection - Login window
282
iRMC
Enter your user name and password and click Login to confirm.
The window for power management and text console redirection is then
displayed:
Console area
Login bar
Figure 138: Window for power management and text console redirection
iRMC
283
284
iRMC
A
AAA
Explanation
Power On
Power Off
Reset
Power Cycle
Powers the server down completely and then powers it up again after
approximately 5 seconds.
Shutdown
iRMC
285
I Condition:
The BIOS setting for console redirection mode must be set to Enhanced
(see the section BIOS Text Console - Configure and start text console
redirection on page 277).
If the managed server starts the PRIMERGY ServerView Suite/diagnosis
software, you can operate PRIMERGY ServerView Suite/Diagnose/Diagnose
remote using console redirection.
For further information on PRIMERGY ServerView Suite/Diagnose, refer to the
RemoteView 5.0 manual.
Windows Server 2003
Windows Server 2003 handles console redirection automatically after the
POST phase. No further settings are necessary. While the operating system is
booting, the Windows Server 2003 SAC console is transferred:
286
iRMC
Linux
You must configure a Linux operating system in such a way that it handles
console redirection after the POST phase. Once it has been configured, you
have complete remote access.
Settings required
The settings may differ between program versions.
SuSe and RedHat
Add the following line to the end of the file /etc/inittab:
xx:12345:respawn:/sbin/agetty <baud-rate> ttyS0
RedHat
Insert the following kernel boot parameter in the file /etc/grub.conf:
console=ttyS0,<baud-rate> console=tty0
SuSE
Insert the following kernel boot parameter in the file /boot/grub/menu.lst :
console=ttyS0,<baud-rate> console=tty0
iRMC
287
I In order to use the iRMC function Advanced Video Redirection, you require
a license key (see Load license key onto the iRMC. on page 192).
The AVR functionality is made available with a Java applet.
288
iRMC
iRMC
289
You can also configure that the local monitor is switched off
automatically for the duration of an AVR session when an AVR
session is started (see the Automatic Local Monitor Off when AVR is
started option on page 291).
290
iRMC
I This option only takes effect if Enable Local Monitor has been
activated.
If you activate this option, the local monitor is automatically switched off
for the duration of the session when an AVR session is started. After the
AVR session is closed, the local monitor is automatically switched on
again if no concurrent session with Local Monitor Off is active.
iRMC
291
Click Start Video Redirection or Start Video Redirection (Java Web Start) to start
a (second) AVR session.
The Java applet for Advanced Video Redirection is started.
The Java applet shows the AVR window in view-only mode, and you are asked
whether you want to take full control of the managed server using AVR or
whether you wish to remain in the view-only mode.
292
iRMC
Click OK to take over full control of the managed server. In this case, the
window for active use of AVR is opened (see figure 146).
Users should agree among themselves what modes they are to use
in their sessions.
The menus of the AVR window and the integrated special keys are described in
chapter Advanced Video Redirection on page 133.
iRMC
293
The two active AVR sessions are shown as follows on the Advanced Video
Redirection page:
Figure 147: Advanced Video Redirection page when two AVR sessions are active
Disconnect
If you click Disconnect, a confirmation dialog box appears in which you
can close the AVR session to the left of the button.
I You can only close AVR sessions of other users with the
Disconnect button. To close your own session, choose Exit from the
Extras menu in the AVR window (see page 148).
294
iRMC
iRMC
295
Remote Storage
7.14
Remote Storage
The Remote Storage feature provides the managed server with a virtual drive
which is physically located elsewhere in the network. The source for the virtual
drive can be a physical drive (floppy disk drive CD-ROM/DVD-ROM) or an ISO
image (image file).
I In order to use the iRMC function Remote Storage, you require a license
key (see page 194).
296
iRMC
Remote Storage
Disconnect
Click the Disconnect button to terminate the connection to the remote
storage server.
iRMC
297
7.15
298
iRMC
I If the screen displays for SSH and Telnet connections differ only with
In the navigation bar, click on the link iRMC SSH Access (SSH) or iRMC Telnet
Access (Telnet).
The Java applet for the SSH or Telnet connection is started and the following
window is displayed (in this case using the example of an SSH connection):
iRMC
299
I If the host key of the managed server is not yet registered at the
remote workstation, the SSH client issues a security alert with
suggestions on how to proceed.
Enter your user name and password and confirm your entries by
clicking Login.
The main menu of the Remote Manager is then displayed (see figure
153 on page 302).
300
iRMC
Enter your user name and password and confirm your entries by
pressing [Enter].
The main menu of the Remote Manager is then displayed (see
figure 153).
iRMC
301
302
iRMC
A Telnet-based interface is available for the iRMC. This is known as the Remote
Manager. You can call the Remote Manager over the following interfaces:
iRMC web interface (see page 298)
any Telnet/SSH client
ServerView Remote Management Frontend
The iRMC supports secure connections over SSH (Secure Shell). The Remote
Manager interface is identical for Telnet and SSH connections. In principle, any
Telnet/SSH client that interprets VT100 sequences can be used to access the
iRMC. It is nevertheless recommended that the iRMC web interface or the
ServerView Remote Management Frontend (referred to below simply as the
Remote Management Frontend) be used.
iRMC
303
8.1
You will find detailed information on establishing a connection to the iRMC using
the Remote Management Frontend and on the work environment of the Remote
Management Frontend in the ServerView Remote Management Frontend
manual.
304
iRMC
8.2
... operating
Remote Manager
This section describes operation of the iRMC from the Remote Manager and the
various functions in detail. The end of the section also provides a brief overview
of SMASH CLP.
8.2.1
Select the required menu item by entering the number or letter which
precedes the menu item, e.g. c for Change password.
Functions that the user is not permitted to use are indicated by a dash (-)
and functions that are not available are indicated by an asterisk (*).
Press [0] or the key combination [Ctrl] [D] to close the Remote Manager. An
appropriate event will be written to the event log.
iRMC
305
Overview of menus
8.2.2
Overview of menus
The Remote Manager menu for the iRMC has the following structure:
System Information
Chassis Information
Mainboard Information
OS and SNMP Information
Power Management
Immediate Power Off
Immediate Reset
Power Cycle
Power on
Graceful Power Off (Shutdown)
Graceful Reset (Reboot)
Enclosure Information
System Event-Log
View System Event-Log (text, newest first)
View System Event-Log (text, oldest first)
Dump System Event-Log (raw, newest first)
Dump System Event-Log (raw, oldest first)
View System Eventlog Information
Clear System Event-Log
Temperature
Voltages/Current
Fans
Power Supplies
Door Lock
CPU Sensors
306
iRMC
Overview of menus
Service Processor
Configure IP Parameters
List IP Parameters
Toggle Identify LED
Reset iRMC (Warm reset)
Reset iRMC (Cold reset)
Change password
iRMC
307
Logging in
8.2.3
Logging in
As soon as a connection to the iRMC has been established, the login window
of the Remote Manager (Telnet/SSH window) is displayed at the terminal client
at the remote workstation.
Depending on whether ServerView agents have already been started at some
point on the system, the login window is shown with or without system
information.
I When logging in over an SSH connection: If the host key of the managed
server is not yet registered at the remote workstation, the SSH client
issues a security alert with suggestions on how to proceed.
308
iRMC
Logging in
iRMC
309
Main menu
8.2.4
310
iRMC
Main menu
The main menu of the Remote Manager provides the following functions:
System Information...
Power Management...
Enclosure Information...
Service Processor...
Change password
iRMC
311
Required permissions
8.2.5
table 9 provides an overview of the user permissions which are required in order
to use the individual Remote Manager functions.
Power Management...
Enclosure Information
X
X
Service Processor...
Service Processor... - Toggle Identify LED
User
Operator
System Information...
Required
permission
Administrator
Permitted with
IPMI privilege
level
OEM
X
X
X
X
Change Password
Console Redirection (EMS/SAC)
312
iRMC
8.2.6
The Change password menu item allows a user with the privilege Configure User
Accounts (see page 60) to change their own password or the passwords of other
users.
iRMC
313
System Information
8.2.7
The following menu appears if you choose System Information... from the main
menu:
Mainboard Information
OS and SNMP
Information
314
iRMC
8.2.8
Power Management
Power Management
The following menu appears if you choose Power Management... from the main
menu:
iRMC
315
Power Management
Immediate Reset
Power Cycle
Power On
316
iRMC
8.2.9
Enclosure Information
The following menu appears if you choose Enclosure Information... from the main
menu:
iRMC
317
Enclosure Information
Temperature
Voltages/Current
Fans
Power Supplies
Door Lock
CPU Sensors
Component Status
318
iRMC
Enclosure Information
System Eventlog
The following menu appears if you select System Eventlog from the Enclosure
Information... submenu:
iRMC
319
Enclosure Information
Dump System Eventlog The contents of the Event log are dumped in
(raw, newest first)
chronological order (the most recent entry first).
Dump System Eventlog The contents of the Event log are dumped in reverse
(raw, oldest first)
chronological order (the oldest entry first).
View System Eventlog
Information
320
iRMC
Service Processor
iRMC
321
List IP Parameters
Reset iRMC
(warm reset)
Reset iRMC
(cold reset)
I It is recommended that you restart the server after Reset iRMC (Cold
Reset) or Reset iRMC(Warm Reset) (see page 210).
I Text-based console redirection only works over the LAN with Serial 1.
If console redirection is also to be used while the operating system is
running, the Serial 1 Multiplexer must be set to System.
322
iRMC
Choose (1) Start a SMASH CLP shell... to start the SMASH CLP shell.
iRMC
323
<verb>
Verbs specify the command or action to be executed. The list of verbs
describes the following activities, for instance:
Establish (set) and retrieve (show) data,
Change the status of a target (reset, start, stop),
Manage the current session (cd, version, exit),
Return information on commands (help).
In iRMC systems, the verb oemfujitsu also allows the use of special OEM
commands.
324
iRMC
<options>
Command options modify the action or the behavior of a verb. Options
can immediately follow the verb in a command line and must always be
introduced by a dash ("-").
Options allow you to, for instance,
define the output format,
permit recursive execution of a command,
display the version of a command or
request help.
<target>
<target> specifies the address or the path of the object to be manipulated
by the command, i.e. the target of the command. This can be a single
managed element such as a hard disk, a network adapter (Network
Interface Card, NIC), or the management program (Management
Assistance Program, MAP) itself. Targets can, however, also be services
such as a transport service.
Several managed elements which can be managed by the management
program can be subsumed under a single <target>, for instance the
entire system.
Only one <target> may be specified for each command.
<properties>
<properties> describe the properties of the target of the command which
are required to execute the command. Thus, <properties> identify the
properties of the targets class that are to be retrieved or modified by the
command.
iRMC
325
/./root
system 1
map 1
log 1
record 1
firmware
record n
user 1
accounts
nic 1
oemsensors
oemsefru
user 16
326
iRMC
iRMC
327
I Requirements:
The current ServerView agents must be installed on the managed server.
The Server Configuration Manager functions can be accessed in the following
ways:
Locally at the managed server by means of the ServerView Installation
Manager (referred to below simply as the Installation Manager).
Locally on managed Windows-based servers using the Windows Start
menu.
iRMC
329
9.1
This section describes how to call the Server Configuration Manager from the
ServerView Installation Manager, the Windows Start menu and the ServerView
Operations Manager.
9.1.1
You can also call the Server Configuration Manager from the Installation
Manager. Configuration via the Installation Manager is of significance when
installing the server. The Installation Manager makes the Server Configuration
Manager available both during preparation for installation and as a separate
maintenance program. The Installation Manager is described in the manual
ServerView Installation Manager.
330
iRMC
9.1.2
iRMC
331
Applying settings
To apply the settings made in the individual tabs, proceed as follows for each
tab:
Click the Apply button.
Click the Save Page button.
The iRMC automatically reboots to activate the changed settings.
332
iRMC
9.1.3
The Server Configuration Manager dialog boxes for configuring the iRMC are
also available from the graphical user interface of the Operations Manager. This
allows you to configure the iRMC of the managed server from the remote
workstation via a Web interface.
Proceed as follows:
Start the Operations Manager (refer to the manual PRIMERGY ServerView
Suite Operations Manager).
The start window of the Operations Manager opens:
iRMC
333
334
iRMC
Figure 167: Operations Manager: Server Configuration window - Server list (1) tab
In the hierarchy tree of the Server list tab, select the server to be configured.
This opens the following window (see figure 168 on page 336):
iRMC
335
Figure 168: Operations Manager: Server Configuration window - Server list (2) tab
In the right-hand side of the window, specify the details on the selected
server and confirm your entries by clicking GO.....
The following window appears, showing the Restart Options page (see figure
169 on page 337):
336
iRMC
In the navigation area, click the required functions. The associated dialog
page then appears in the right-hand side of the window.
I This manual only describes those dialog pages which are relevant for
configuring the iRMC and for user management on the iRMC.
Configure the settings you require and save them with Save Page or with Save
all.
I Activate the configured settings for each server either separately for
each dialog page with Save Page or after you have completed the
entire configuration with Save all.
Choose Reload Page or Reload all to reset the settings to the original
values.
I After you have completed configuring a server, you can select further
servers for configuration in the Server list tab.
iRMC
337
9.2
The ASR&R Fan Settings dialog page shows comprehensive information on the
fans of the managed server. For each fan, you can also specify whether the
server is to be shut down if that fan fails.
Choose ASR&R Fan Settings.
338
iRMC
The server is shut down if the relevant fan is still faulty after the
specified time has elapsed.
iRMC
339
9.3
340
iRMC
iRMC
341
9.4
The iRMC LAN Interface dialog page is used to configure the LAN settings
(Ethernet settings) for the iRMC.
V CAUTION!
Contact the network administrator responsible for the system before you
change the LAN settings.
If you make illegal LAN settings for the iRMC you will only be able to
access the iRMC again using special configuration software, the serial
interface or via the BIOS.
Choose iRMC LAN Interface.
342
iRMC
IP Address
The address of the iRMC in the LAN. This address is different from
the IP address of the managed server.
Subnet Mask
Subnet mask of the iRMC in the LAN.
Default Gateway
IP address of the default gateway in the LAN.
iRMC
343
LAN Speed
LAN speed. The following options are available:
Auto Negotiation
100 MBit/s Full Duplex
100 MBit/s Half Duplex
10 MBit/s Full Duplex
10 MBit/s Half Duplex
344
iRMC
9.5
The iRMC Networking Ports dialog page allows you to view and modify the
configuration settings for ports and network services.
V CAUTION!
Configuration is not supported for ports where the input fields are
deactivated in the iRMC web interface (see page 239). It is only possible
to verify whether the ports can be configured using the iRMC Web
interface. The preset values must not be changed using the Server
Configuration Manager during initial configuration.
Select the iRMC Networking Ports dialog page.
iRMC
345
HTTPS Port
HTTPS port of the iRMC (secure connection)
Force HTTPS
If you disable the Force HTTPS option, users can only establish a nonsecure connection to the iRMC on the HTTP port specified in the
entry field.
If you enable the Force HTTPS option, users can establish a secure
connection to the iRMC on the HTTPS port specified in the entry field.
I You can also configure web access in the iRMC web interface.
If the SSL certificate has expired, a message to this effect is
issued in the web browser.
SSH Port
SSH port of the iRMC
Video Ports - Standard Port
Video port of the iRMC, hard-configured (port number: 5903).
Video Ports - Secure Port
Secure video port of the iRMC, hard-configured (port number: 5913).
VNC Ports - Standard Port
VNC port of the iRMC
VNC Ports - Secure Port
Secure VNC port of the iRMC
Remote Storage Ports - Standard Port
Remote storage port of the iRMC
Telnet enabled
If you enable the Telnet Enabled option, users can establish a
connection to the iRMC on the Telnet port specified in the entry field.
Drop Time (sec)
Period of inactivity (in seconds) after which a Telnet connection is
automatically cleared.
Telnet Port
Telnet port of the iRMC. This input field is only displayed if Telnet
enabled is activated.
346
iRMC
9.6
iRMC DNS Registration Configuring the host name for the iRMC
The iRMC DNS Registration dialog page allows you to configure a host name for
the iRMC and thus use dynamic DNS. Dynamic DNS allows DHCP servers to
autonomously pass on the IP address and system name of a network
component to DNS servers to facilitate identification.
Choose iRMC DNS Registration.
iRMC
347
348
iRMC
9.7
The iRMC DNS Server dialog page allows you to activate the Domain Name
Service (DNS) for the iRMC. This allows you to use symbolic DNS names
instead of IP addresses for configuring the iRMC.
Choose iRMC DNS Server.
iRMC
349
DNS Domain
If the option Obtain DNS configuration from DHCP is disabled, specify
the name of the default domain for requests to the DNS server(s).
DNS Server 1 .. 5
If the Obtain DNS configuration from DHCP option is disabled, you can
enter the names of up to five DNS servers here.
350
iRMC
9.8
The iRMC EMail Alerting dialog page allows you to configure how the iRMC
forwards emails.
Choose iRMC EMail Alerting.
iRMC
351
I You can activate the Domain Name Service (DNS) for the
iRMC (see iRMC DNS Server - Activating DNS for the iRMC
on page 349). You can then use a symbolic name instead of
the IP address.
SMTP Port
SMTP port of the primary mail server
Authentication Type
Authentication type for connecting the iRMC to the primary mail
server:
None
No authentication for the connection.
SMTP AUTH (RFC 2554)
Authentication according to RFC 2554: SMTP Service Extension
for Authentication
Authentication User Name
User name for authentication on the primary mail server
Password
Enter the password for authentication on the primary mail server.
Confirm Password
Enter the password again here.
352
iRMC
I You can activate the Domain Name Service (DNS) for the
iRMC (see iRMC DNS Server - Activating DNS for the iRMC
on page 349). You can then use a symbolic name instead of
the IP address.
SMTP Port
SMTP port of the secondary mail server
Authentication Type
Authentication type for connecting the iRMC to the secondary mail
server:
None
No authentication for the connection.
SMTP AUTH (RFC 2554)
Authentication according to RFC 2554: SMTP Service Extension
for Authentication
Authentication User Name
User name for authentication on the secondary mail server
Password
Enter the password for authentication on the secondary mail server.
Confirm Password
Enter the password again here.
iRMC
353
9.9
The iRMC Mail Format Settings dialog page allows you to configure the mailformat-dependent settings. You specify the mail format for each user using the
iRMC User Management dialog page in the Edit existing user window (see
page 358).
The following email formats are supported:
Standard
Fixed Subject
ITS-Format
Fujitsu REMCS Format
354
iRMC
Configure the following settings. (Some entry fields are disabled depending
on the mail format):
From
Sender identification iRMC.
Active for all mail formats.
interpreted as a valid email address. Otherwise, admin@<ipaddress> is used as the valid email address.
Subject
Fixed subject for the alert mails.
Only active for the Fixed Subject mail format (see page 360).
Message
Type of message (email).
Only active for the Fixed Subject mail format (see page 360).
Administrator Name
Name of the administrator responsible (optional).
Only active for the ITS mail format (see page 360).
Administrator Phone
Phone number of the administrator responsible (optional).
Only active for the ITS mail format (see page 360).
REMCS Id
This ID is an additional server ID, similar to the serial number.
Only active for the mail format Fujitsu REMCS-Format (see
page 360).
Server URL
A URL under which the server is accessible under certain conditions.
You have to enter the URL manually.
Only active for the Standard mail format (see page 360).
iRMC
355
9.10
The iRMC SNMP Alerting dialog page allows you to view and configure the
settings for SNMP trap alerting.
356
iRMC
9.11
The iRMC User Management dialog page allows you to configure the local user
management settings for the iRMC.
The dialog page contains a table showing all the configured users: Each line
contains the data for one configured user.
To delete a user, first select the user (by selecting the corresponding
line), then click the Delete... button and confirm that you want to delete the
user.
iRMC
357
Double-click on a line for which the user ID is not yet assigned to any user
(empty line) or select such a line and click the Modify ... button to open an
empty Edit existing user window (containing default settings), in which you
can configure a new user (see figure 180).
Double-click on a line for a specific user or select a user and click the
Modify ... button to open the Edit existing user window, in which you can
view and/or modify the settings for this user (see figure 180).
Account enabled
Disable this option to lock the user.
358
iRMC
Account Data
This is where you configure the access data for the user.
User Name
Enter the name of the user.
User Description
Additional information on the user.
Password
Enter the user password.
Confirm Password
Confirm the password by entering it again here.
User Privileges
This is where you configure the channel-specific user privileges as well
as other permissions.
LAN
Assign a privilege group for a LAN channel to the user here.
The following options are available:
User
Operator
Administrator
OEM
iRMC
359
User Shell
Select the user shell here.
Shell
Select the desired user shell here.
The following options are available:
SMASH CLP
See section Start a Command Line shell... - Start a SMASH
CLP shell on page 323.
Remote Manager
See chapter iRMC via Telnet/SSH (Remote Manager) on
page 303.
IPMI Basic Mode
IPMI Terminal Mode
None
EMail Paging Settings
This is where you configure the settings governing the email format and
the global email settings.
Format
Depending on the selected email format, you can make a number
of settings in the iRMC Email Format Settings dialog page (see
page 354).
The following email formats are available:
Standard
Fixed Subject
ITS-Format
Fujitsu REMCS Format
Enabled
Specify whether the user is to be informed about system statuses
by email.
Address
Email address of recipient.
360
iRMC
Preferred Server
Select the preferred mail server.
You can choose one of the following options:
Automatic
If the email cannot be sent successfully immediately, for
instance because the preferred mail server is not available, the
email is sent to the second mail server.
Primary
Only the SMTP server which has been configured as the
primary SMTP server (see page 352) is used as the preferred
mail server.
Secondary
Only the SMTP server which has been configured as the
secondary SMTP server (see page 353) is used as the
preferred mail server.
CRITICAL
The iRMC notifies users by email if an entry in the system event
log is reported as CRITICAL.
ALL
The iRMC notifies users of every event in this group which causes
an entry to be made in the system event log.
Confirm your settings by clicking OK.
iRMC
361
9.12
The iRMC Directory Service dialog page allows you to configure the iRMC for
global user management via a directory service (see page 66).
I Currently, support for iRMC LDAP access is provided for the following
directory services: Microsoft Active Directory, Novell eDirectory and
OpenLDAP.
362
iRMC
iRMC
363
V CAUTION!
If the option Disable Local Login is activated and the connection
to the directory service fails then it is no longer possible to log
in at the iRMC.
Choose the required directory service from Directory Server Type.
Different input fields are provided, depending on the directory service you
select:
For Active Directory, refer to Configuring iRMC for Microsoft Active
Directory on page 365.
For Novell and OpenLDAP, refer to Configuring iRMC for Novell
eDirectory / OpenLDAP on page 367.
364
iRMC
I The entries shown as examples in figure 182 refer to the examples and
figures shown in section iRMC user management via Microsoft
Active Directory on page 77.
Figure 182: iRMC Directory Service (Microsoft Active Directory) dialog page
iRMC
365
Base DN
Base DN is automatically derived from Domain Name.
LDAP Auth. User Name, LDAP Auth Password
These settings are not relevant at present.
The settings that you make here are required for alerting in
connection with global user identifications. However, alerting is
currently only supported for local user identifications.
366
iRMC
iRMC
367
Base DN
The Base DN is the full distinguished name of the eDirectory or
OpenLDAP server and represents the tree or subtree that contains
the OU (Organizational Unit) iRMCgroups. This DN forms the starting
point for LDAP searches.
Group DN Context
Pathname of the OU iRMCgroups as a subtree of Base DN.
User Search Context
Pathname of the OU Users as a subtree of Base DN.
LDAP Auth. User Name
Generic iRMC user ID (principal user) under which the iRMC queries
the permissions of the iRMC users from the LDAP server.
LDAP Auth. Password
Password the principal user uses to authenticate themselves on the
LDAP server and confirmation of the password.
368
iRMC
Principal User DN
Fully distinguished name of the generic iRMC user ID (principal user)
under which the iRMC queries the permissions of the iRMC users
from the LDAP server.
Append Base DN To Principal User DN
If you activate this option, you do not need to specify the Base DN
under Principal User DN. The base DN specified under Base DN is
used.
Enhanced User Login
Enhanced flexibility on user login.
If you select Enhanced User Login, the User Login Search Filter input
field is also activated. By default, this contains the standard login
search filter.
At login, the placeholder %s is replaced by the associated global
login. You can modify the filter by specifying another attribute in place
of cn=. All global logins are then permitted to log into the iRMC
which meet the criteria of this search filter.
V CAUTION!
Only activate this option if you are familiar with the LDAP
syntax. If you inadvertently specify and activate an invalid
search filter, users can only log in to the iRMC under a global
login after the Enhanced User Login option has been
deactivated.
iRMC
369
9.13
You can perform the following tasks on the iRMC Advanced Features dialog page:
store the IP address or DNS name of a remote storage server on the iRMC,
enter a license key for the use of the Advanced Video Redirection and
Remote Storage functionality,
deactivate or activate HP SIM integration.
Choose iRMC Advanced Features.
370
iRMC
iRMC
371
10
Firmware update
This chapter provides you with information about the following topics:
iRMC firmware (overview)
Online firmware update
Offline firmware update
Emergency flash
flash tools
You can obtain the up-to-date version of the PRIMERGY ServerView Suite
DVD 1 at two-monthly intervals.
iRMC
373
10.1
Firmware update
Runtime firmware
374
iRMC
Firmware update
Runtime firmware
The runtime firmware is the executable part of the iRMC's firmware
SDRR (Sensor Data Record Repository)
The SDRR contains the Sensor Data Records (SDR) in which sensor
information for the managed server is stored. The SDRR also acts as an
interface via which you can access the SDRs.
Bootloader
The bootloader checks the firmware of the currently active EEPROM. If a
firmware error is detected, the bootloader sets the firmware selector to the
other EEPROM.
You can perform an update for each of these areas.
Firmware selector
The firmware selector specifies the EEPROM whose firmware is to be executed.
Every time the iRMC is reset and restarted, the firmware selector is evaluated
and processing branches to the corresponding firmware.
The firmware selector can have the following values:
0
EEPROM 1
EEPROM 2
EEPROM whose firmware has not been updated for the longest
You can also use the flash tool to query and set the firmware selector
explicitly (see page 387).
iRMC
375
Firmware update
376
iRMC
Firmware update
10.2
I You do not require the USB Memory Stick if you update the iRMC
Proceed as follows:
Download the firmware Firmware Update for USB Stick from the Download
section of the Fujitsu Technology Solutions web server to a directory on your
computer.
or
Insert the current PRIMERGY ServerView Suite DVD 1 in the DVD drive of your
computer.
The following files or following ZIP archive can be found in your download
directory or on DVD 1.
FTS_<nnnnnnn>.exe
FTS_<nnnnnnn>.zip
The ZIP archive contains the following files:
USBImage.exe
iRMC_<Firmware-Version>.IMA
Connect the USB memory stick to your computer.
Start the file FTS_<nnnnnnn>.exe or the file USBImage.exe.
One of the following windows is opened depending on the file you call:
Figure 186: Copying the image file to the USB memory stick (FTS_<nnnnnnn>.exe)
iRMC
377
Firmware update
Figure 187: Copying the image file to the USB memory stick (USBImage.exe)
I If you have called USBImag.exe, then under Image File:, you must
explicitly specify the file iRMC_<Firmware-Version>.IMA.
V CAUTION!
This action overwrites the content of the USB memory stick.
When the copy operation is complete, the flash tools and image files are present
on the USB memory stick (see figure 188 on page 379).
378
iRMC
Firmware update
Figure 188: Image files and flash tool on the USB memory stick.
iRMC
379
Online update
10.3
Firmware update
Online update
When you perform an online update, you update the iRMC's firmware while the
operating system (Windows or Linux) of the managed server is still running.
online firmware update for the bootloader in the iRMC's EEPROM 1 (Low
EEPROM).
380
iRMC
Firmware update
Online update
WinFLBMC
RedhatFLBMC
Suse Linux:
SuseFLBMC
You call the flash tools in the Windows command line (WinFLBMC) or at the
Linux CLI (RedhatFLBMC, SuseFLBMC).
The syntax and operands for the flash tools are described in section Flash
tools on page 387.
Prerequisites
The flash tools and the files for the firmware update must be present in the
file system of the managed server.
Under Windows and Linux: The ServerView agents must be started on the
managed server.
iRMC
381
Online update
Firmware update
Proceed as follows:
Start the update of the firmware and the SDR data by calling the flash tool
with the corresponding update files.
E.g., in the Windows command line you enter:
WinFLBMC dcod<firmware-version>.bin <nnnnnnn>.sdr /p
During the firmware update, the console informs you about the progress of
the update operation. If an error occurs, the update operation is aborted and
a corresponding return code is reported (see page 389).
Restart the managed server. This automatically activates the EEPROM with
the updated firmware.
382
iRMC
Firmware update
10.4
Offline update
Offline update
In the case of an offline update, you update the iRMC firmware from within a
DOS environment. In this case, you can not only update the firmware of the
inactive EEPROM but also that of the currently active EEPROM.
I During the offline update, the active firmware is closed and then
automatically restarted.
I During an offline update, you can also update the firmware for the
bootloader of the iRMC's Low EEPROM.
iRMC
383
Offline update
Firmware update
I For an offline update via the FlashDisk menu, you require a bootable
USB memory stick (see section Setting up the USB memory stick on
page 377).
Proceed as follows:
Connect the USB memory stick to the managed server.
Boot from the USB memory stick.
After completion of the boot operation, the data in the USB memory stick is
automatically copied to a RAM disk. The autoexec.bat file is then started
automatically.
The FlashDisk menu opens:
Normal
A normal flash is performed.
In a normal flash, a check is performed to determine whether the areas
of the active EEPROM are up to date. If an area is not up to date then the
corresponding area on the inactive EEPROM is updated if it is not
already up to date.
384
iRMC
Firmware update
Offline update
Recovery
A recovery flash is performed.
In the case of a recovery flash, the flash is performed for all three
EEPROM areas without any version check. The firmware update is
performed for EEPROM 1. A firmware downgrade is only possible via
recovery flash.
Readme
The Readme file is opened.
Reboot
An iRMC warm start is performed.
English / German
Specify keyboard layout. German is set by default.
Start the required update variant by clicking on the corresponding button.
During the firmware update, the console informs you about the progress of
the update operation. If an error occurs, the update operation is aborted. A
corresponding return code is reported (see page 389).
Once the update operation has been completed, click on Exit, to close the
FlashDisk menu.
Remove the USB memory stick from the managed server.
Restart the managed server (e.g. with [Ctrl]+[Alt]+[Del]).
I An offline update using the operating system flash tool flbmc is only
performed as a recovery flash, i.e. no version check is performed.
I When you run an offline update with the flash tool flbmc, you can also
optionally perform a recovery flash for EEPROM2.
iRMC
385
Emergency flash
10.5
Firmware update
Emergency flash
If the iRMC firmware can no longer be executed, e.g. because the SDRs are not
compatible with the system, then you can use the emergency mode to start the
firmware running again. In emergency mode, the system automatically
branches to the bootloader and is the ready for the firmware update.
To switch the managed server to emergency mode and then update the iRMC's
firmware, proceed as follows:
Disconnect the power supply connector.
Insert the connector in the socket again with the Identify key held down.
The managed server is now in emergency mode.
Boot the server to DOS and use the recovery flash procedure to update the
iRMC's firmware (see section Offline update on page 383).
I If the firmware is not active then the boot operation may take up to 2
minutes to start. You can ignore the error message iRMC Controller
Error which the BIOS outputs during this period.
386
iRMC
Firmware update
10.6
Flash tools
Flash tools
only in the name of the tool and the environment in which they are called.
The following description therefore also applies to the tools WinFLBMC,
RedhatFLBMC and SuseFLBMC. Instead of flbmc, you simply enter
WinFLBMC, RedhatFLBMC or SuseFLBMC as appropriate.
Syntax
flbmc {/v|/o [/4]|/s[<value>]}
flbmc {<file1> [<file2>] [<file3>]
[/n /l[<logfile>] /d /e /4 /p]}
flbmc {/h|/?}
Options
/v
/o
/o /4
/s
/s <value>
Sets the value of the firmware selector. You use this option to define the
EEPROM from which the firmware is started after a firmware reset.
iRMC
Sets the selector to the EEPROM with the most recent firmware.
Sets the selector to the EEPROM with the firmware which has not
been updated for longest.
387
Flash tools
Firmware update
Updates EEPROM 2 .
The command works as follows with respect to the switch /4:
If you specify /4 in conjunction with the dcod file for EEPROM 1, a
check is performed to see whether an identical firmware version
exists for EEPROM 2. If this is the case, the firmware for EEPROM 2
is updated, otherwise the command is terminated with an error
message and the return value 5.
If you dont specify /4 in conjunction with the dcod file for EEPROM 2,
a check is performed to see whether an identical firmware version
exists for EEPROM 1. If this is the case, the firmware for EEPROM 1
is updated, otherwise the command is terminated with an error
message and the return value 5.
/l [<logfile>]
Outputs error messages to the specified log file. If no logfile is specified,
the output is directed to the flbmc.log file.
/n
/p
388
iRMC
Firmware update
/d
/e
Flash tools
/h and /?
Outputs help information.
Return values
0
10 No buffer allocated.
12 Network node busy.
13 Timeout erasing EEPROM.
14 Timeout flashing EEPROM.
15 Error erasing EEPROM.
16 Error flashing EEPROM.
iRMC
389
11
This chapter describes how you use the ServerView Installation Manager
(abbreviated to Installation Manager below) and the iRMC features "Remote
Storage" and "Advanced Video Redirection (AVR)" to install the operating
system on the administered server from the remote workstation.
The chapter discusses the following specific topics:
General procedure for the remote installation of an operating system using
remote storage media.
Booting the administered server from the remote workstation using
PRIMERGY ServerView DVD 1 (Windows and Linux).
Installing Windows from the remote workstation after configuration on the
administered server.
Installing Linux from the remote workstation after configuration on the
administered server.
The description focuses primarily on the handling of the remote storage media.
It is assumed that readers are familiar with the Installation Manager functionality
(see the manual PRIMERGY ServerView Suite - ServerView Installation
Manager).
iRMC
391
General procedure
11.1
For the Installation Manager, the remote installation of the operating system via
iRMC represents a local configuration and installation of the operating system
on the administered server which you perform from the remote workstation via
the AVR window using remote storage media.
The following steps are required in order to perform an installation via the
Installation Manager:
1. Connect the storage medium (DVD 1 or Installation Manager boot image)
from which you want to boot as remote storage.
2. Boot and configure the managed server via DVD 1 or the Installation
Manager boot image.
3. Use the Installation Manager at the remote workstation to install the
operating system on the administered server.
4. Optimize mouse pointer synchronization in the AVR window (only necessary
under Linux).
Installing Windows without the Installation Manager using the Windows
installation CD/DVDs
You can perform a remote installation of Windows via Remote Storage either
using the Installation Manager or exclusively using the Windows installation
CD/DVDs. The two procedures correspond in terms of the handling of the
remote storage media.
However, you are advised to install Windows via the Installation Manager for the
following reasons:
The Installation Manager itself identifies the required drivers and copies
these to the system.
All the Installation Manager functions are available to you during installation.
This means that you can, for example, configure the entire system including
the server management settings.
Installations without the Installation Manager have to be controlled via the
keyboard since the mouse cursor cannot be synchronized during the
installation process. In contrast, if you install using the Installation Manager
then all configuration and installation steps can be performed using the
mouse.
392
iRMC
General procedure
If you install without the Installation Manager then all the settings required
for mouse cursor synchronization must subsequently be performed
manually.
Installation using the Installation Manager does not take significantly longer
than installation using the operating system CD/DVDs.
Installing Linux without the Installation Manager using the Linux
installation CDs
If you know which drivers are required by the system then you can start the
Linux installation by booting from the Linux installation CD/DVD.
If the installation requires you to integrate drivers from the floppy disk then,
before starting the installation, you must set up a remote storage connection to
the following storage media:
to the storage medium (CD-ROM/DVD-ROM or ISO image) from which you
want to boot and
iRMC
393
11.2
I The Remote Storage page of the iRMC web interface allows you to obtain
394
iRMC
I Booting from USB memory stick is supported only if the USB memory
stick is emulated as floppy disk.
iRMC
395
Prepare the storage media for remote storage (see page 159):
If installation is performed via the Installation Manager:
PRIMERGY ServerView Suite DVD 1 or an Installation Manager boot
image and optionally a formatted USB memory stick as a status backup
medium.
If installation is performed from the vendors installation CD/DVD:
Windows or Linux installation CD/DVD and optional drivers.
The prepared storage media are displayed in the Storage Devices dialog box.
Figure 190: Storage Devices dialog box: PRIMERGY ServerView Suite DVD 1
Click Connect to connect the DVD ROM drive (DVD 1) or the Installation
Manager boot image as remote storage.
396
iRMC
Connect the ISO image (image file) provided by the remote storage server
as remote storage
You can use an image file provided via the remote storage server for booting
from an Installation Manager boot image.
iRMC
397
11.3
398
iRMC
I If the system does not boot from the remote storage medium
It takes about 5 minutes to boot from PRIMERGY ServerView Suite DVD 1 via
a remote storage medium. The following window is displayed during the boot
process:
Figure 192: The managed server is booted from PRIMERGY ServerView Suite DVD 1.
iRMC
399
Choose Installation Manager mode and specify the medium to be used for
status backup.
Once the boot process has completed, the startup window of the Installation
Manager is displayed in which you can select a medium for the status backup
area (status backup medium) (see figure 193 on page 401).
I Before you start to install the operating system, you should synchronize
the local mouse cursor and the cursor of the managed server in the AVR
window at the remote workstation (see figure 193 on page 401). For
more detailed information on synchronizing the mouse cursor in the AVR
window, see section Synchronizing the mouse pointer on page 140.
400
iRMC
(3)
(1)
(2)
(2)
(3)
I Please note that if you do not select any status backup option all the
configuration data is lost when you reboot.
iRMC
401
402
iRMC
iRMC
403
Once you have completed configuration with the Installation Manager, the
Installation Info dialog page for the Windows installation (see page 405) or for
the Linux installation (see page 409) is displayed. This allows you to start the
installation process.
404
iRMC
11.4
Windows
Once you have completed configuration, you should install the operating system
on the managed server.
iRMC
405
Windows
If you have configured the local CD ROM/DVD ROM drive of the managed
server as the installation source, proceed as follows at the remote workstation:
Clear your currently active remote storage connections. For more detailed
information on clearing remote storage connections, see page 163.
Remove PRIMERGY ServerView Suite DVD 1 from the
DVD ROM drive at the remote workstation.
Insert the Windows installation CD/DVD in this DVD ROM drive.
I Before rebooting the system, you must in particular shut down all
current remote storage connections.
Before rebooting the system, shut down the current remote storage
connections.
To do this, proceed as follows:
Start Remote Storage (see page 157).
The Storage Devices dialog box is displayed with the currently connected
storage devices and a Safe Remove indication (see figure 196 on
page 407).
406
iRMC
Windows
Figure 196: Storage Devices dialog box: Clearing Remote Storage connections
iRMC
407
Windows
408
iRMC
Linux
I The mouse can be used but not synchronized during Linux installation.
I Whenever you change a remote storage medium, you must remove the
remote storage connection for the currently connected medium and then
connect the new medium as remote storage.
After configuration has been completed, the Installation Manager displays the
following dialog page:
If you have configured the local CD ROM/DVD ROM drive of the managed
server as the installation source, proceed as follows at the remote workstation:
iRMC
409
Linux
Clear your currently active remote storage connections. For more detailed
information on clearing remote storage connections, see page 163.
Remove PRIMERGY ServerView Suite DVD 1 from the
DVD ROM drive at the remote workstation.
Insert the Linux installation CD/DVD in this DVD ROM drive.
I Before rebooting the system, you must in particular shut down all
current remote storage connections.
Before rebooting the system, shut down the current remote storage
connections.
To do this, proceed as follows:
Start Remote Storage (see page 157).
The Storage Devices dialog box is displayed with the currently connected
storage devices and a Safe Remove indication (see figure 196 on
page 407).
410
iRMC
Linux
Figure 199: Storage Devices dialog box: Clearing Remote Storage connections
iRMC
411
Linux
Figure 200: The managed server is booted from the Linux installation CD.
412
iRMC
Linux
required settings at the managed server once the operating system has
been installed. For information on how to do this, see section Managed
Linux server: Adjusting the settings for synchronization of the mouse
pointers on page 145.
iRMC
413
12
12.1
Overview
Firmware-specific commands
2004 Set Firmware Selector
2005 Get Firmware Selector
C019 Get Remote Storage Connection
C01A Set Video Display on/off
iRMC
415
Overview
BIOS-specific command
F109 Get BIOS POST State
F115 Get CPU Info
iRMC-specific commands
F510 Get System Status
F512 Get EEPROM Version Info
F543 Get SEL entry long text
F545 Get SEL entry text
F5B0 Set Identify LED
F5B1 Get Identify LED
F5B3 Get Error LED
F5DF Set Nonvolatile Cfg Memory to Default Values
F5E0 Set Configuration Space to Default Values
F5F8 Delete User ID
416
iRMC
12.2
Description format
iRMC
417
1:3
Response Data
0x00
418
NetFnlLUN: OEM/Group
01
80 28 00
15
Command Specifier
BC
01
Completion Code
2:4
Power on
Source
B8
80 28 00
01
Data Length
Description
Software or command
0x01
0x02
0x03
0x04
0x05
0x08
0x09
0x0C
0x15
0x16
0x1A
0x1D
0x1E
iRMC
1:3
4
Response Data
NetFnlLUN: OEM/Group
01
80 28 00
16
Command Specifier
BC
01
Completion Code
2:4
Power off
Source
B8
80 28 00
01
Data Length
Description
0x00
0x01
0x02
AC power fail
0x03
0x04
Fan failure
0x05
Critical temperature
0x08
0x0C
0x1D
iRMC
419
B8
NetFn|LUN: OEM/Group
01
1:3
4
5
6:7
Response Data
1C
Command Specifier
00
Object ID
00 00 Value ID
01
BC
01
Completion Code
2:4
420
80 28 00
Data Length
80 28 00
iRMC
B8
NetFn|LUN: OEM/Group
01
1:3
4
Response Data
1D
Command Specifier
BC
01
Completion Code
2:4
iRMC
80 28 00
80 28 00
421
1:3
NetFnlLUN: OEM/Group
01
80 28 00
20
Command Specifier
00
Object ID
6:7
8
9:12
Response Data
B8
00 00 Value ID
04
Data Length
01
Completion Code
2:4
80 28 00
422
iRMC
Service is running under the OS. To execute the commands, the iRMC
communicates with Agent which finally performs the action.
1:3
Response Data
B8
NetFnlLUN: OEM/Group
02
80 28 00
05
BC
02
Completion Code
2:4
Command Specifier
80 28 00
1:3
Response Data
NetFnlLUN: OEM/Group
02
80 28 00
06
Command Specifier
BC
02
Completion Code
2:4
iRMC
B8
80 28 00
423
B8
NetFnlLUN: OEM/Group
02
1:3
Response Data
80 28 00
08
Command Specifier
BC
02
Completion Code
2:4
80 28 00
01
Connect Status:
00 = Connection lost, agent not connected.
01 = Connection re-established, agent connected.
Data Length
1:3
Response Data
NetFnlLUN: OEM/Group
02
80 28 00
09
BC
Command Specifier
02
Completion Code
2:4
424
B8
80 28 00
iRMC
1:3
10
80 28 00
02
Command Specifier
Attribute:
0 = Write String left aligned.
1 = Write String centered.
10:10+n
BC
10
Completion Code
2:4
iRMC
NetFnlLUN: OEM/Group
6:7
Response Data
B8
80 28 00
425
Firmware-specific commands
Response Data
426
20
NetFnlLUN: Firmware
CMD : Command Group Firmware
04
Selector:
0 = Auto (Select firmware image with highest firmware
version.)
1 = low firmware image
2 = high firmware image
3 = Auto oldest version (Select firmware image with oldest
firmware version.)
4 = MRP (Select most recently programmed firmware.)
5 = LRP (Select least recently programmed firmware.)
24
04
Completion Code
iRMC
Firmware-specific commands
Response Data
iRMC
20
NetFnlLUN: Firmware
05
24
05
Completion Code
427
Firmware-specific commands
Response Data
428
C0
NetFnlLUN: OEM
CMD : Command Group Firmware
19
01
00
00
C4
19
Completion Code
01
00: No
01: Yes, connected
00
00
iRMC
Firmware-specific commands
If Request Data 1 is set to 2, the command returns information on the status and
type of any Remote Storage connection(s).
Request Data
Response Data
C0
NetFnlLUN: OEM
CMD : Command Group Firmware
19
02
00
00 = Connection 0
01 = Connection 2
C4
19
Completion Code
02
00
00
00 = Invalid / unknown
01 = idle
02 = Connection Attempt pending
03 = Connected
04 = Connection Attempts retries exhausted / failed
05 = Connection lost
06 = Disconnect pending
00 = Invalid / unknown
01 = Storage Server / IPMI
02 = Applet
03 = None / Not connected
Response Data
iRMC
C0
NetFnlLUN: OEM
Cmd : Command Group Fan Test
1A
C4
1A
Completion Code
429
BIOS-specific commands
B8
NetFnlLUN: OEM/Group
F1
1:3
Response Data
09
Command Specifier
BC
F1
Completion Code
2:4
5
430
80 28 00
80 28 00
[7:1] - reserved
[0] - BIOS POST State : 0 = BIOS is not in POST
1 = BIOS is in POST
iRMC
BIOS-specific commands
1:3
4
Response Data
NetFnlLUN: OEM/Group
F1
80 28 00
15
Command Specifier
BC
F1
Completion Code:
01 = Unpopulated CPU Socket
2:4
5:6
7
8
80 28 00
9:10
11:12
13
T-Control Offset
14
T-Diode Offset
15
iRMC
B8
16:17
18:19
20:21
431
iRMC-specific commands
1:3
4
5:8
Response Data
B8
NetFnlLUN: OEM/Group
F5
80 28 00
10
Command Specifier
Timestamp
BC
F5
Completion Code
2:4
80 28 00
POST Code
432
iRMC
iRMC-specific commands
Signaling
Bit 7 - Localize LED
Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 - Global Error LED
Bit 0 - Global Error LED
Notifications
Bit 7 - SEL Modified (New SEL Entry)
Bit 6 - SEL Modified (SEL Cleared)
Bit 5 -
SDR Modified
iRMC
433
iRMC-specific commands
1:3
Response Data
NetFnlLUN: OEM/Group
F5
80 28 00
12
BC
Command Specifier
F5
Completion Code
2:4
80 28 00
Status
Major FW Revision
Binary coded
Minor FW Revision
BCD coded
8:10
434
B8
Aux. FW Revision
11
Major FW Revision
12
BCD coded
13
BCD coded
14
15
SDRR-ID
16
SDRR-ID
17
Binary coded
18
BCD coded
19:20
iRMC
iRMC-specific commands
B8
NetFn|LUN: OEM/Group
F5
1:3
4
5:6
Response Data
80 28 00
43
Command Specifier
Record ID
Offset
MaxResponseDataSize
BC
F5
Completion Code:
2:4
80 28 00
5:6
Next Record ID
7:8
Actual Record ID
Record type
10:13
Timestamp
14
Severity:
Bit 7:
Bit 6-4:
Bit 3-0:
15
iRMC
Data length
0 = No CSS component
1 = CSS component
000 = INFORMATIONAL
001 = MINOR
010 = MAJOR
011 = CRITICAL
1xx = Unknown
reserved, read as 0000
16:n
n+1
String Terminator
requested part
(n = 16 + MaxResponseDataSize - 1)
trailing '\0' character
435
iRMC-specific commands
B8
NetFnlLUN: OEM/Group
F5
1:3
4
5:6
Response Data
80 28 00
45
Command Specifier
BC
F5
Completion Code
2:4
80 28 00
5:6
Next Record ID
7:8
Actual Record ID
Record type
10:13
Timestamp
14
Severity:
Bit 7:
Bit 6-4:
Bit 3-0:
15
16:35
436
0 = No CSS component
1 = CSS component
000 = INFORMATIONAL
001 = MINOR
010 = MAJOR
011 = CRITICAL
1xx = Unknown
reserved, read as 0000
Data length
Converted SEL data
iRMC
iRMC-specific commands
I You can also switch the Identify LED on and off using the Identify switch
on the server.
Request Data
B8
NetFnlLUN: OEM/Group
F5
1:3
Response Data
80 28 00
B0
Identify LED:
0: Identify LED off
1: Identify LED on
BC
F5
Completion Code
2:4
Command Specifier
80 28 00
1:3
Response Data
NetFnlLUN: OEM/Group
F5
80 28 00
B1
BC
F5
Completion Code
2:4
5
iRMC
B8
Command Specifier
80 28 00
437
iRMC-specific commands
1:3
Response Data
NetFnlLUN: OEM/Group
F5
80 28 00
B3
BC
F5
1
2:4
5
438
B8
Command Specifier
Completion Code
80 28 00
iRMC
iRMC-specific commands
B8
NetFnlLUN: OEM/Group
F5
1:3
4
5:8
Response Data
80 28 00
DF
Command Specifier
BC
F5
Completion Code
2:4
80 28 00
1:3
4
5:8
Response Data
NetFnlLUN: OEM/Group
F5
80 28 00
E0
Command Specifier
BC
F5
Completion Code
2:4
iRMC
B8
80 28 00
439
iRMC-specific commands
F5 F8 - Delete User ID
The system supports up to 16 users. This command allows individual iRMC
users to be deleted.
V IMPORTANT!
The system can no longer be managed if all iRMC users are deleted.
Request Data
1:3
4
5:8
Response Data
NetFnlLUN: OEM/Group
F5
80 28 00
F8
Command Specifier
User ID (1-16)
BC
F5
Completion Code
2:4
440
B8
80 28 00
iRMC
Related publications
The documentation for the PRIMERGY manuals can be found on the
PRIMERGY ServerView Suite DVD 2 supplied with each server system.
The documentation can also be downloaded free of charge from the Internet.
You will find the online documentation on the Internet at
http://manuals.ts.fujitsu.com under the link Industry standard servers.
[1]
ServerView Suite
Basic Concepts
[2]
PRIMERGY Glossary
[3]
PRIMERGY Abbriviations
[4]
[5]
[6]
[7]
[8]
iRMC
441
Related publications
[9]
[10]
[11]
[12]
[13]
[14]
[15]
[16]
[17]
442
iRMC
Related publications
[18]
[19]
[20]
[21]
[22]
[23]
[24]
[25]
[26]
[27]
iRMC
443
Related publications
[28]
[29]
[30]
[31]
[32]
[33]
[34]
[35]
[36]
[37]
[38]
444
iRMC
Related publications
[39]
[40]
[41]
[42]
[43]
[44]
[45]
[46]
[47]
[48]
[49]
BIOS-Setup
Description
iRMC
445
Related publications
[50]
[51]
FibreCAT CX
Monitoring FibreCAT SX systems with ServerView Operations
Manager
Welcome Guide
[52]
FibreCAT SX
Monitoring FibreCAT SX systems with ServerView Operations
Manager
Welcome Guide
[53]
StorMan
Provisioning and managing virtualized storage resources
Administrator and User Guide
[54]
[55]
VMware
VMware ESX Server
Installation Guide
[56]
VMware
VMware ESX Server
Administration Guide
446
iRMC
Index
A
Active Directory 15, 57, 66, 365
configuration using the iRMC web
interface 272
configuration using the Server
Configuration Manager 365
iRMC groups and user
permissions 88
advanced features 370
Advanced Video Redirection
see also AVR
Advanced Video Redirection
(AVR) 288
alarm, see also alerting 351
alerting
configuring 53, 55, 247, 356
ASR&R Fan Settings 338
ASR&R options
configuring 231
ASR&R Temperature Settings 340
assign
iRMC users to a group 88, 117
remote storage server to
iRMC 297, 370
assign iRMC users to OU
iRMCgroups
in Active Directory 88
assign iRMC users to the OU
iRMCgroups
in eDirectory 117
in OpenLDAP 128
AVR 133
checking requirements 134
integrated special keys 138
local monitor off 137
menus 147
parallel sessions 136
redirecting the keyboard 136
redirecting the mouse 140
secure keyboard 139
special key combinations 138
iRMC
starting 288
using 135
virtual keyboard 139, 148
AVR window
Extras menu 147, 148
Languages menu 151
Preferences menu 152
Remote Storage menu 151
B
BIOS text console 277
BIOS text console redirection
configuring 42, 43, 277
boot
iRMC 193
boot options
configuring 209
boot watchdog 233
C
CA (Certification Authority) 83
call
remote storage server GUI 172
CD ROM 159
certificate
self-signed 204
Certification Authority (CA) 83
certification authority, see CA 83
channel-specific
permission group 60
privileges 60
check
power supply 221
see also Enclosure
Information 318
sensors 215
server component 222
temperature sensor 218
voltage sensor 220
check temperature 318
447
Index
CLP 324
user data 326
CLP, see also SMASH CLP
color code (sensor) 215
Command Line Protocol (CLP) 324
command line shell (Remote
Manager) 323
communication interfaces (iRMC) 18
component status 222
components (server)
monitoring 222
configuration tools, LAN interface 38
configuration using the Server
Configuration Manager 329
Active Directory 365
ASR&R Fan Settings 338
ASR&R Temperature
Settings 340
calling from the Installation
Manager 330
calling from the Operations
Manager 333
calling from the Windows Start
menu 331
eDirectory 367
iRMC advanced features 370
iRMC directory service 362
iRMC DNS registration 347
iRMC DNS server 349
iRMC email alerting 351
iRMC LAN interface 342
iRMC mail format settings 354
iRMC networking ports 345
iRMC SNMP alerting 356
OpenLDAP 367
starting system
configuration 330
user ID (iRMC user
manangement) 357
configure 351
alerting 53, 55, 247, 356
ASR&R options 231
boot options 209
console redirection 43, 277
448
iRMC
Index
watchdog settings 233
configure users
locally 259, 357
connection
to Remote Storage,
terminating 163
connection to remote storage server
clearing 297
establishing 297
console redirection
configuring 277
starting (Remote Manager) 322
while the operating system is
running 46, 286
ConsoleOne
installing 101
starting 102
copyright (SSL) 131
create NDS tree (eDirectory) 103
D
default DHCP name (iRMC) 32
device type (remote storage) 159
DHCP configuration 243
Directory Service 66
directory service 15, 57, 66, 269,
362
directory service see also Active
Directory, eDirectory,
OpenLDAP 15, 57, 66
directory service see also Directory
Service
display
current DSA certificate 200
DSA/RSA certificate 200
DNS configuration 245
DNS for iRMC
configuring 245, 349
DNS registration 347
DNS server 349
documentation 12
domain controller certificate 85, 87
DSA certificate
default certificate 198
iRMC
201
E
eDirectory 15, 57, 66, 367
administration tips 121
assigning iRMC users to the
OU iRMCgroups 117
configuration using the Server
Configuration Manager 367
configuring 103
configuring for LDAP 104
creating Principal User for
iRMC 113
importing the LDIF file 111
iRMC groups and user
permissions 113
LDAP authentication
process 109
software components and system
requirements 95
testing access via LDAP
browser 108
eDirectory Server
installing 97
EEPROM, iRMC 374
email alerting 351
configuring 252, 351
email configuration 266
emergency mode 386
449
Index
enclosure information
(Remote Manager) 317
enter
DSA certificate 203
DSA/RSA key 203
Enterprise CA 83
error icon 223
Ethernet 236
Ethernet settings (iRMC)
configure 342
configuring 236
execution mode
remote storage server 171
exit
remote storage server 176
functions, iRMC
F
factory defaults, iRMC 32, 96
fan
testing 216
fan test 216
fans
monitoring 216
firmware selector, iRMC 375
firmware update 373
offline update 383
online update 380
operands 387
firmware, iRMC 374
flash tool
offline update (firmware) 385
online update (firmware) 381
flash tools
flbmc 385
RedhatFLBMC 381
SuseFLBMC 381
syntax and operands 387
WinFLBMC 381
flash, see also firmware update
FlashDisk menu
offline update (firmware) 384
flbmc
offline update (firmware) 385
floppy disk drive 159
H
host name (iRMC) 347
configure 347
configuring 243
see also iRMC name
HP SIM integration
configuring 234, 371
450
13
G
generate
self-signed certificate 204
global email paging
configuration 254
global error LED 188
global iRMC
user management 66
global iRMC user management
via Active Directory 77
via eDirectory 95
via OpenLDAP 124
global user ID 57
I
ICMB 21
identification LED 188, 321
image file (ISO image) 159, 165
iManager
installing 99
login 100
install
ConsoleOne 101
iManager 99
Linux 409
OpenLDAP 124
operating system 391
remote storage server 166
see also remote installation of the
operating system
Windows 405
iRMC
Index
installing
eDirectory administration
utilities 97
eDirectory Server 97
integrated special keys (AVR) 138
Intelligent Platform Management
Interface, see IPMI
interfaces (iRMC) 18
IPMB 21
IPMI
background 19
channel concept 26
definition 19
implementation 21
IPMI-over-LAN interface 24
references 27
Serial Over LAN (SOL) 25
standards 21
user IDs 27
IPMI OEM commands 415
0115 - Get Power On Source 418
0116 - Get Power Off Source 419
011C - Set Power Off Inhibit 420
0120 - Set Next Power On
Time 422
0205 - System OS Shutdown
Request 423
0206 - System OS Shutdown
Request and Reset 423
0208 - Agent Connect Status 424
0209 Shutdown Request
Cancelled 424
1002 - Write to System
Display 425
2004 - Set Firmware
Selector 426
2005 - Get Firmware
Selector 427
C019 - Get Remote Storage
Connection or Status 428
C01A - Set Video Display
On/Off 429
description format 417
iRMC
451
Index
logging into the web interface 33,
178
offline update (firmware) 383
online update (firmware) 380
permissions 61
power supply 214
remote installation of the operating
system 391
remote storage 155, 165, 296
remote storage server 165
restarting 193
testing the LAN interface 41
user interface 183
user management 57
user permissions 60
RMC
remote storage 151
iRMC advanced features 370
iRMC directory service 362
configuring Active Directory 365
configuring eDirectory 367
configuring OpenLDAP 367
iRMC DNS registration 347
iRMC DNS server 349
iRMC email alerting 351
iRMC firmware settings 196
iRMC information 192
querying 192
iRMC LAN interface 342
iRMC mail format settings 354
iRMC options, miscellaneous 195
iRMC SNMP alerting 356
iRMC SSH access 298
iRMC Telnet access 298
iRMC user
creating in OpenLDAP 128
iRMC user group
assigning 88, 117
iRMC user management 357
global via Active Directory 77
global via eDirectory 95
global via OpenLDAP 124
integrating in OpenLDAP 126
452
iRMC users
assigning 88, 117
iRMC web interface 177
Advanced Video Redirection
(AVR) 288
alerting 247
alerting - email alerting 252
alerting - serial/modem
alerting 250
alerting - SNMP trap alerting 248
BIOS text console 277
certificate upload 198
color scheme 195
configuring iRMC 52
DHCP configuration 243
directory service
configuration 269
DNS configuration 245
general settings 195
iRMC 191
iRMC information 192
iRMC SSH access 298
iRMC Telnet access 298
iRMC Telnet/SSH access 298
local monitor 289
network interface 236
network settings 235
permissions 180
ports and network services 239
power management 206
power on/off 207
power options 211
power supply 214
power supply info 214
remote storage 296
saving firmware settings 196
saving iRMC firmware
settings 196
sensors 215
sensors - component status 222
sensors - fans 216, 220
sensors - power supply 221
sensors - temperature 218
iRMC
Index
server management
information 229
structure of the user
interface 183
system component
information 187, 190
system event log 223
system event log
configuration 227
system event log content 224
system information 186
temperature display 195
user management 62, 259
user management (local) 259
user management new user configuration 261
user management - user name
configuration 261, 262
iRMCgroups 73
assigning iRMC users
(eDirectory) 117
ISO image (image file) 159, 165
K
key combinations,
special (AVR) 138
keyboard
redirect (AVR) 136
virtual (AVR) 139, 148
L
LAN interface 342
LAN interface (iRMC) 37
configuring 36, 39, 52, 54, 235
testing 41
LAN parameters (iRMC)
configuring 235, 342
LDAP access (iRMC)
configuring 83
LDAP authentication process
(eDirectory) 109
LDAP configuration 269, 362
Active Directory 272
eDirectory 274
iRMC
OpenLDAP 274
LDAP directory service
see also directory service
LDAP, see also directory service
LDIF file 73
importing into Active Directory 77
importing into directory
service 76
importing into eDirectory 111
importing into OpenLDAP 126
ldifde 78
license key 133, 155, 193, 194, 195,
370
deleting 194
loading onto the iRMC 194
Linux, remote installation 409
local monitor
powering on and off 137, 289
local monitor display 289
local monitor off 137, 289
local user ID 57
local user management (iRMC) 62,
259, 357
log in
to iRMC (requirements) 31
to Remote Manager 308
to the iRMC web interface 33,
178
M
mail format settings 354
mail see also email
mail-format-dependent
configuration 257
main menu (Remote Manager) 310
managed server, see server
management information 229
management information, see server
management information
Microsoft Active Directory see also
Active Directory 15, 57, 66
Microsoft Active Directory,
see Active Directory
Miscellaneous iRMC Options 195
453
Index
monitor
fans 216
power supply 221
temperature 218
voltage 220
monitor, local 137, 289
monitor, see check
mouse pointer
synchronizing 140
mouse redirection (AVR) 140
N
network interface 236
network settings 235
networking ports 345
new user configuration 261
notational conventions 29
Novell ConsoleOne
see also ConsoleOne
Novell eDirectory directory
see also eDirectory
Novell eDirectory see also eDirectory
Novell eDirectory Server
see also eDirectory Server
Novell eDirectory, see eDirectory
Novell iManager see also iManager
O
offline update (firmware) 383
online update (firmware) 380
Open LDAP Browser/Editor 79
OpenLDAP 15, 57, 66, 367
administration tips 129
assigning iRMC users to the
OU iRMCgroups 128
configuration using the Server
Configuration Manager 367
configuring 125
create Principal User 127
creating an iRMC user 128
creating SSL certificates 124
importing the LDIF file 126
installing 124
454
iRMC
Index
power status summary 208
power supply
monitoring 221
power supply info 214
preconfigured user ID 61
primary SMTP server
configuration 255
Principal User
creating in eDirectory 113
creating in OpenLDAP 127
private DSA/RSA key,
see DSA/RSA key
privilege
privileges / permissions 265
privileges, channel-specific 60
Q
query
information on server 187
information on server
components 190
iRMC information 192
server management
information 229
system information 186
query information
information on server 187
iRMC firmware 193
on iRMC 192
power supply 221
server components 190
system event log 227
voltage sensors 220
query system information 314
R
RedhatFLBMC
online update (firmware) 381
redirect
keyboard (AVR) 136
redirect mouse (AVR) 140
remote installation of the operating
system 391
general procedure 392
iRMC
Linux 409
remote storage connection 394
requirements 391
Windows 405
Remote Manager 298, 303, 305
changing the password 313
enclosure information 317
logging in 308
main menu 310
operating 305
overview of menus 305
permissions 312
power management 315
service processor 321
starting console redirection 322
starting the command line
shell 323
system event log 319
system information 314
Remote Manager (Serial) 51
Remote Storage
terminating a connection 163
remote storage 151, 155, 165, 296
connecting storage media 161
device type 159
providing storage media 159
removing the storage
medium 164
starting 157
remote storage server 165
assigning 370
calling the GUI 172
configuring 173
executing as a service 171
executing as stand-alone 171
execution mode 171
exiting 176
installing 166
starting 175
RemoteView documentation 12
requirements
AVR 134
remote installation of the operating
system 391
455
Index
restart options 210
RSA certificate, see DSA/RSA certificate
S
secondary SMTP server
configuration 256
secure keyboard (AVR) 139
security group 70
security group see also permission
group
self-signed
certificate 204
sensor
checking 215
color code 215
status icon 215
sensors 215
serial/modem alerting 250
configuring 250
serial/modem interface (iRMC) 48
configuring 49
Remote Manager (Serial) 51
server
ASR&R options 231
booting and configuring with
ServerStart 398
checking components 222
checking sensors 215
configuring settings 229
configuring the event log 227
HP SIM integration options 234,
371
power management 211
power management after power
outage 212
power options 211
power supply info 214
powering on and off 210
remote installation (Linux) 409
remote installation
(Windows) 405
remote installation of the operating
system 391
456
iRMC
Index
remote storage server 175
remote storage server GUI 172
status
components 222
status icon
system component status 190
status icon (sensor) 215
storage media
connecting as remote
storage 161
providing for remote storage 159
SuseFLBMC
online update (firmware) 381
synchronize
mouse pointer 140
syntax 324
system component status
status icon 190
system event log 223, 319
configuring 227
error icon 223
view 226
system event log configuration 227
system event log content 224, 226
error icon 223
system fans 217
system information 186, 187, 190
querying 186
system information (Remote
Manager) 314
T
target group 12
Telnet 298, 303, 305
temperature
monitoring 218
temperature sensor
checking 218
Temperature Settings (ASR&R)
340
test
fan 216
LAN interface 41
iRMC
338,
457
Index
locally using the Server
Configuration Manager 357
locally via the Server Configuration
Manager 64
preferred shell 72
user ID 57
using Active Directory 66, 68
via directory service 68
user permissions 60
cross-server 69
global 68, 69
in Active Directory 88
in eDirectory 113
in OpenLDAP 126
users
configuring 259, 357
configuring (new) 358
W
watchdog settings
configuring 233
web interface, see iRMC web interface
Windows, remote installation 405
WinFLBMB
online update (firmware) 381
X
X.509 certificate, see DSA/RSA certificate
V
ventilator, see also fan
view
system event log (server) 226
virtual keyboard (AVR) 139, 148
voltage 220
voltage sensor
checking 220
458
iRMC