Configure HP Integrated Lights Out

Notes

• The HP Integrated Lights Out 3 (iLO) software can remotely perform most functions that otherwise require a visit to the servers at the data center, computer room, or remote location.

• Since our server will be readily accessible in the computer lab, we don't need to remotely manage it, but we do want to ensure that you are aware of it and its configuration should you need to access it.

Goals

Configure the iLO password

• Password: The standard full length lab password

When an HP server is shipped there is random default password set. We'll change the administrator password to be the same as the administrator password we set for our other contexts as well. That way there will be no confusion in the future.

Require iLO password at RBSU

At the lowest level you can configure the iLO with the ROM-Based Setup Utility (RBSU). This is the interface you would get to when you press F8 at boot time. By default there is no password for this interface. We want to make sure this interface is secure.

Configure the iLO Network Information

• IP: 192.168.1.201
• Mask: 255.255.255.0
• DNS: None
• Gatewat: None

The default configuration of iLO is to use DHCP to assign itself an IP address. This is a risk in the sense that attaching the server iLO interface will advertise itself to a potentially untrusted network, and otherwise invite curious or malicious users to take a closer look.

OPTIONAL: Disable ILO altogether

iLO can be a very useful set of features for management of the server. If the configuration of this tool is too much work, then you could disable it altogether. It is on by default.

Procedures

Boot into the iLO RBSU

• When you are at the first Boot logo screen where it suggests that you can press F9 for the BIOS setup, you should press F8

Enter BIOS password if already specified

• If the BIOS password has already been set, then enter that
• Note that it is only the first 7 characters of the regular administrator password

Enter the iLO RBSU password is already specified

• If you've already been through this procedure before, then supply the ILO credentials
• The username is administrator and the password is the full length standard password

Observe the iLO RBSU

• Now you should be looking at the iLO main screen.

Disable DHCP and set Hostname

• Navigate tot he Network menu
• Set DHCP to OFF
• Set the DNS name to EJP-SERVER-iLO

Set Netowork Details

• Navigate to the Network Menu
• The Network Interface Adapter should be set to Shared Netowrk Port
  • Other server models have a dedicated interface for managment operations, but we are using the regular interfaces
• Set the IP configuration
  • IP address: 192.168.1.201
  • Subnet Mask: 255.255.255.0
  • Gateway: 0.0.0.0

Set the Administrator password

• Navigate the the User->Edit menu

• Edit the Administrator user

• Set the password to the Full-length Administrator password

Enable the RBSU password

• Navigate to the Settings menu
• Set Require iLO 3 RBSU Login to ENABLED
• All the default of ENABLED for everything else
• If you wanted to disable ILO altogether, you would do that here

Exit and reboot

• Navigate to the File->Exit Menu
• The server will reboot when you exit