Управление серверами hp proliant через открытые rest api или «ilo на стероидах»
Содержание:
Installation Instructions
Prerequisites:
Hewlett Packard Enterprise recommends the following or greater versions of iLO utilities
for best performance:
- RESTful Interface Tool (iLOREST) 3.0
- HPQLOCFG v5.2
- Lights-Out XML Scripting Sample bundle 5.20.0 or later
- HPONCFG Windows 5.3.0
- HPONCFG Linux 5.3.0 or later
- LOCFG v5.20.0 or later
- HPLOMIG 5.2.0
NOTE: Updated utilities and system libraries are required to support the iLO HighSecurity, FIPS, and CNSA security states.
To ensure the integrity of your download, HPE recommends verifying your results with
this SHA-256 Checksum value:
ae8d9f5bf322490ef21b3bd403ac99b92fc8c9fd7b302fecf4bea0e5dc4129ed | ilo5_212.fwpkg |
Reboot Requirement:Reboot is not required after installation for updates to take effect and hardware stability to be maintained.
Installation:
To update to iLO 5 version 2.10 or later, you must have a minimum iLO 5 version of 1.40
To flash this firmware package, use the following iLOrest command. See http://www.hpe.com/servers/resttool to download the latest version of the iLOrest tool.
localhost OS example:ilorest flashfwpkg <file_name.fwpkg>
remote example:ilorest flashfwpkg <file_name.fwpkg> —url <iLO5_IP_Address> -u <iLO5_username> -p <iLO5_password>
This firmware package can also be installed with the latest version of Smart Update Manager (SUM).
Supplemental updates for supported ProLiant servers and options can be done by using SUM, which is found on the Service Pack for ProLiant (SPP) ISO.
- Place the Service Pack for ProLiant on a USB key using the USB Key Creator Utility.
- Place the desired firmware packages and components to be updated in the directory «\packages» on the USB key.
Update the firmware and software in the usual manner.
Release Notes
End User License Agreements:HPE Software License Agreement v1
Upgrade Requirement:Recommended — HPE recommends users update to this version at their earliest convenience.
Important:
IPv6 network communications — Dedicated network connection only
Supported Networking Features
IPv6 Static Address Assignment
IPv6 SLAAC Address Assignment
IPv6 Static Route Assignment
IPv6 Static Default Gateway Entry
DHCPv6 Stateful Address Assignment
DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
Integrated Remote Console
OA Single Sign-On
HP-SIM Single Sign-On
Web Server
SSH Server
SNTP Client
DDNS Client
RIBCL over IPv6
SNMP
AlertMail
Remote Syslog
WinDBG Support
HPONCFG/HPLOMIG over an IPv6 connection
Scriptable Virtual Media
CLI/RIBCL Key Import over IPv6
Authentication using LDAP and Kerberos over IPv6
iLO Federation
Networking Features not supported by IPv6 in this release
IPv6 Over Shared Network Port Connections
IPMI
NETBIOS-WINS
Enterprise Secure Key Manager (ESKM) Support
Notes:
iLO 5 User Guide and Lights-Out Scripting Guide can also be found by following the links at:http://www.hpe.com/info/ilo
Select your lights-out product, then support & documents, then manuals.
Check the online help for additional information about how to use features.
Online help can be accessed from within the browser web pages by clicking the question mark in the upper right-hand corner of each page.
Enhancements
- Ability to edit Maintenance Windows in Firmware & OS Software section
- Added Password Complexity feature to Security > Access Settings
- Enable/disable for overlay video showing Server Health Summary
- Downgrade Policy — Specifies how iLO handles requests to downgrade any of the firmware types that you can update through iLO.
- Virtual NIC functionality (disabled by default)
- Enabled One-button Secure Erase via Intelligent Provisioning
- LDAP/Directory settings configurable via Redfish
- Security Dashboard — displays the status of important security features, the Overall Security Status for the system, and the current configuration for the Security State and Server Configuration Lock features.
- Support for Gemalto SafeNet and SafeNet AT key managers
- InfoSight Optimized AHS Download
- Show NVMe wear level
- Workload performance advisor: provides server tuning recommendations to improve server performance
Important
IPv6 network communications — Dedicated network connection only
Supported Networking Features
IPv6 Static Address Assignment
IPv6 SLAAC Address Assignment
IPv6 Static Route Assignment
IPv6 Static Default Gateway Entry
DHCPv6 Stateful Address Assignment
DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
Integrated Remote Console
OA Single Sign-On
HP-SIM Single Sign-On
Web Server
SSH Server
SNTP Client
DDNS Client
RIBCL over IPv6
SNMP
AlertMail
Remote Syslog
WinDBG Support
HPONCFG/HPLOMIG over an IPv6 connection
Scriptable Virtual Media
CLI/RIBCL Key Import over IPv6
Authentication using LDAP and Kerberos over IPv6
iLO Federation
Networking Features not supported by IPv6 in this release
IPv6 Over Shared Network Port Connections
IPMI
NETBIOS-WINS
Enterprise Secure Key Manager (ESKM) Support
Revision History
Version:5.2.0 (20 Dec 2019)
Fixes
Upgrade Requirement:Optional — Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.
- Improved error handling when username and password are not provided on the command line.
- Fixed the issue of misleading error message coming up when XML headers were used in the input XML file.
Version:5.1.0 (25 Sep 2017)
Enhancements
Upgrade Requirement:Optional — Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.
HPQLOCFG is now signed by Hewlett Packard Enterprise.
Version:5.0.0 (12 Jul 2017)
Enhancements
Upgrade Requirement:Optional — Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.
iLO 5 support introduced.
Version:1.5.0 (24 Oct 2016)
Fixes
Upgrade Requirement:Recommended — HPE recommends users update to this version at their earliest convenience.
For iLO 4 Firmware version 2.30 and onwards, it is a must to upgrade to HPQLOCFG v1.50.
For iLO 4 Firmware versions below 2.30, iLO 2 and iLO 3, it is recommended to upgrade to HPQLOCFG v1.50.
This version of HPQLOCFG supports iLO 4 firmware version 2.30 onwards when FIPS Mode or Enforce AES/3DES Encryption mode is enabled.
Note: If AES/FIPS is enabled in iLO, you may need to upgrade to .NET Framework v4.5 or above to communicate with iLO. Also make sure the Operating System supports TLSv1.1 and TLSv1.2. For more information please see iLO 4 Scripting and Command Line Guide.
Version:1.4.0 (15 Jun 2015)
Fixes
Upgrade Requirement:Optional — Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.
HPQLOCFG gracefully displays an error message and does not close with an exception when there are duplicate keys in the substitute variable string.
Version:1.3.0 (30 Mar 2015)
Fixes
Upgrade Requirement:Recommended — HPE recommends users update to this version at their earliest convenience.
— HPQLOCFG accepts empty(NULL) values for substitute variables when used with -t option.
— In the log file HPQLOCFG reported «Script Succeded» even when the execution of script failed.
Version:1.2.0 (9 Sep 2014)
Fixes
Upgrade Requirement:Recommended — HP recommends users update to this version at their earliest convenience.
1) When running HPQLOCFG, occasionally there used to be an ERROR «Exception has been thrown by the target of an invocation». This issue is fixed in the current version.
2) During firmware update, occasionally an error was thrown with message like ‘Error:Line #5: syntax error near «RI»‘, though the firmware was updated succesfully. This issue is fixed in the current version.
Version:1.1.0 (18 Feb 2014)
Fixes
Upgrade Requirement:Recommended — HP recommends users update to this version at their earliest convenience.
RIBCL output occasionally displays an extra INFORM tag
Enhancements
Allow up to 50 substitute variables
Version:1.0.0 (23 Jul 2013)
Enhancements
Upgrade Requirement:Recommended — HP recommends users update to this version at their earliest convenience.
DHCPV6 Enhancement and IPv6 support for iLO 4 FW v1.30 and iLO 3 FW v1.60
Release Notes
End User License Agreements:HPE Software License Agreement v1
Upgrade Requirement:Recommended — HPE recommends users update to this version at their earliest convenience.
Important:
IPv6 network communications — Dedicated network connection only
Supported Networking Features
IPv6 Static Address Assignment
IPv6 SLAAC Address Assignment
IPv6 Static Route Assignment
IPv6 Static Default Gateway Entry
DHCPv6 Stateful Address Assignment
DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
Integrated Remote Console
OA Single Sign-On
HP-SIM Single Sign-On
Web Server
SSH Server
SNTP Client
DDNS Client
RIBCL over IPv6
SNMP
AlertMail
Remote Syslog
WinDBG Support
HPONCFG/HPLOMIG over an IPv6 connection
Scriptable Virtual Media
CLI/RIBCL Key Import over IPv6
Authentication using LDAP and Kerberos over IPv6
iLO Federation
Networking Features not supported by IPv6 in this release
IPv6 Over Shared Network Port Connections
IPMI
NETBIOS-WINS
Enterprise Secure Key Manager (ESKM) Support
Notes:
iLO 5 User Guide and Lights-Out Scripting Guide can also be found by following the links at:http://www.hpe.com/info/ilo
Select your lights-out product, then support & documents, then manuals.
Check the online help for additional information about how to use features.
Online help can be accessed from within the browser web pages by clicking the question mark in the upper right-hand corner of each page.
Release Notes
End User License Agreements:HPE Software License Agreement v1Hewlett-Packard End User License Agreement
Upgrade Requirement:Recommended — HPE recommends users update to this version at their earliest convenience.
Important:
IPv6 network communications — Dedicated network connection only
Supported Networking Features
IPv6 Static Address Assignment
IPv6 SLAAC Address Assignment
IPv6 Static Route Assignment
IPv6 Static Default Gateway Entry
DHCPv6 Stateful Address Assignment
DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
Integrated Remote Console
OA Single Sign-On
HP-SIM Single Sign-On
Web Server
SSH Server
SNTP Client
DDNS Client
RIBCL over IPv6
SNMP
AlertMail
Remote Syslog
WinDBG Support
HPONCFG/HPLOMIG over an IPv6 connection
Scriptable Virtual Media
CLI/RIBCL Key Import over IPv6
Authentication using LDAP and Kerberos over IPv6
iLO Federation
Networking Features not supported by IPv6 in this release
IPv6 Over Shared Network Port Connections
IPMI
NETBIOS-WINS
Enterprise Secure Key Manager (ESKM) Support
Embedded Remote Support (ERS)
Notes:
iLO 5 User Guide and Lights-Out Scripting Guide can also be found by following the links at:http://www.hpe.com/go/ilo
Select your lights-out product, then support & documents, then manuals.
Check the online help for additional information about how to use features.
Online help can be accessed from within the browser web pages by clicking the question mark in the upper right-hand corner of each page.
Release Notes
End User License Agreements:Hewlett-Packard End User License Agreement
Upgrade Requirement:Recommended — HPE recommends users update to this version at their earliest convenience.
Notes:Documentation
Instructions for using this utility and RIBCL syntax for iLO can be found in the HP Integrated Lights-Out Management Processor Scripting and Command Line Resource Guide available at following the link at: http://www.compaq.com/products/servers/management/ilo/documentation.html
Sample XML scripts may be downloaded from www.hp.com/go/ilo. Select your Lights-Out product, click on «Download software» link, select the operating system. Download «HP Lights-Out XML Scripting Sample for Windows» or «HP Lights-Out XML PERL Scripting Sample for Linux».
Enhancements
This version adds support for the following features and enhancements:
- Added a security log that lists security events recorded by the iLO firmware.
- Enhanced Secure Start verification of CPLD on Gen10 Plus servers.
- Updated menu path and feature names for the Performance Management features. The features that were accessed through the Intelligent System Tuning menu can now be accessed through the Performance menu.
- Embedded remote support over IPv6.
- New alert for recovery events.
- SUM/SUT support on servers using the High Security, FIPS, or CNSA security states.
- Support for staging firmware to update direct-attached hard drives through the UEFI System Utilities.
- Ability to import and export drive bay mapping information.
- Daily firmware flash limit, to protect iLO, ROM, and CPLD from repeated flashing attacks.
- Performance data logging in a new Active Health System record.
- Increased the certificate size limit from 4096 to 8096.
- When iLO is set to the factory default settings, Virtual NIC is enabled by default.
- The following System Diagnostics features are supported on Gen10 Plus servers:
- Booting to safe mode—Allows you to boot the server with a safe minimum configuration.
- Booting to intelligent diagnostics mode—Allows the system to automatically diagnose a boot failure during POST.
- Restoring the default manufacturing settings—Resets all BIOS configuration settings to their default manufacturing values. This process deletes all UEFI nonvolatile variables, such as boot configuration, Secure Boot security keys (if Secure Boot is enabled), and configured date and time settings.
- Restoring the default system settings—Resets all BIOS configuration settings to their default values and restarts the server. This option preserves some UEFI settings.
- Modified text of iLO time zone selections to match system ROM time zone selections. For backward compatibility, either previous time zone selection text or the new text can be used in APIs to set the time zone.
Important
IPv6 network communications — Dedicated network connection only
Supported Networking Features
IPv6 Static Address Assignment
IPv6 SLAAC Address Assignment
IPv6 Static Route Assignment
IPv6 Static Default Gateway Entry
DHCPv6 Stateful Address Assignment
DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
Integrated Remote Console
OA Single Sign-On
HP-SIM Single Sign-On
Web Server
SSH Server
SNTP Client
DDNS Client
RIBCL over IPv6
SNMP
AlertMail
Remote Syslog
WinDBG Support
HPONCFG/HPLOMIG over an IPv6 connection
Scriptable Virtual Media
CLI/RIBCL Key Import over IPv6
Authentication using LDAP and Kerberos over IPv6
iLO Federation
Networking Features not supported by IPv6 in this release
IPv6 Over Shared Network Port Connections
IPMI
NETBIOS-WINS
Enterprise Secure Key Manager (ESKM) Support
Installation Instructions
To ensure the integrity of your download, HPE recommends verifying your results with
the following SHA-256 Checksum values:
fe4ac97a8f880742a76065a9e41bcc12d7506b26197b39dba028004163edd759 | RPMS/x86_64/firmware-ilo5-lpk-ja-ri11-2.10-1.1.x86_64.rpm |
45b6c17f2309f63e69962702f49ec622c0883661fc7ad1d00c85ce5cfaa40ef9 | RPMS/x86_64/firmware-ilo5-lpk-ja-ri11-2.10-1.1.x86_64.compsig |
Reboot Requirement:Reboot is not required after installation for updates to take effect and hardware stability to be maintained.
Installation:
Install the language pack using one of these options:
-
- Run the Component on the host to be updated. The component will update the iLO 5 language pack.
- Extract the language pack from the component. This will place the language image file, lang_ja_yyy.lpk (where yyy represents the language pack version) in the target directory. You now have these options:
-
- Login to iLO 5, navigate to the Update Firmware page, and update the firmware from there.
- Use the HP Lights-Out Configuration Utility, CPQLOCFG, and RIBCL/XML scripts to update iLO 5 across the network.
- Use the HP Online Lights-Out Configuration utility, HPONCFG, and RIBCL/XML scripts to update iLO 5 from the supported host OS.
-