Hypertec ORION HF310-G4 Owner's Manual

Add to my manuals
156 Pages

advertisement

Hypertec ORION HF310-G4 Owner's Manual | Manualzz

ORION HF310-G4

User Manual

1

About this User Manual

This user manual provides the information on Installation and maintenance of the Orion HF310-G4.

Caution : Experienced technicians should perform the Installation and maintenance.

Document title: ORION HF310-G4

Document number: Revision 3

Document update date: February 2021

The following Notes, Cautions and Warnings might appear in this user manual.

Note

: Explains an important point or tip to help you to better use of the product.

Caution : Indicates the potential damage to hardware or loss of data, security problems, or performance issues and tells you to avoid the problem.

Warning : Indicates that an action or step can result in physical harm, property or hardware damage.

To avoid damaging your server, perform the following steps before you begin working inside the server.

1.

Ensure that you follow the Safety Instruction.

2.

Ensure that your work surface is flat and clean to prevent the server cover from being scratched.

3.

Turn off your server.

4.

Disconnect all network cables from the server.

CAUTION: To disconnect a network cable, first unplug the cable from your server and then unplug the cable from the network device. After you finish working inside the server, replace all covers, panels, and screws before connecting to the power source.

Safety instructions

Use the following safety guidelines to protect your server from potential damage and to ensure your personal safety. Unless otherwise noted, each procedure included in this document assumes that the following conditions exist:

You have read the safety information that shipped with your server.

A component can be replaced or, if purchased separately, installed by performing the removal procedure in the reverse order.

Copyright @ 2021 Ciara, All rights reserved.

2

Table of Contents

Contents

About this User Manual ............................................................................................................................................................................................................................................................. 2

Table of Contents ....................................................................................................................................................................................................................................................................... 3

1. ORION HF310-G4 Specifications ........................................................................................................................................................................................................................................ 5

2. Chassis Overview ............................................................................................................................................................................................................................................................... 6

3. Front Panel Components ................................................................................................................................................................................................................................................... 7

4. Back Panel Components .................................................................................................................................................................................................................................................... 8

5. Accessory Boxes & Rails ..................................................................................................................................................................................................................................................... 9

6. Labelling ........................................................................................................................................................................................................................................................................... 10

6.1 Power supplies cage ....................................................................................................................................................................................................................................................... 10

6.2 Serial Number and Model Number Labels on Mylar ..................................................................................................................................................................................................... 10

6.3 HDD trays ....................................................................................................................................................................................................................................................................... 10

6.4 Support and Certification Labels .................................................................................................................................................................................................................................... 10

7. Chassis Layout .................................................................................................................................................................................................................................................................. 12

8. Motherboard Layout ........................................................................................................................................................................................................................................................ 13

9. Detailed Motherboard Layout ......................................................................................................................................................................................................................................... 14

Detailed Jumpers Layout ...................................................................................................................................................................................................................................................... 15

LED, Jumpers & Buttons and Connectors Functionality ...................................................................................................................................................................................................... 17

7.1 LED Functionality........................................................................................................................................................................................................................................................ 17

7.2 Jumpers & Buttons Functionality ............................................................................................................................................................................................................................... 17

7.3 Connector Functionality ............................................................................................................................................................................................................................................. 18

Skylake-X Block Diagram ...................................................................................................................................................................................................................................................... 19

10. Removing the Chassis Cover ........................................................................................................................................................................................................................................ 20

12. Installing the Chassis Cover .......................................................................................................................................................................................................................................... 21

13. How to clear the CMOS with jumper and battery. ...................................................................................................................................................................................................... 22

This section provides information on how to clear the CMOS by jumper and battery. ...................................................................................................................................................... 22

Clear CMOS by Jumper ........................................................................................................................................................................................................................................................ 22

Clear CMOS by Battery ......................................................................................................................................................................................................................................................... 22

14. How to replace the CMOS battery: .............................................................................................................................................................................................................................. 23

15. Replacing PCIE 1 Card .................................................................................................................................................................................................................................................. 24

16. Replacing PCIE 2 Card .................................................................................................................................................................................................................................................. 26

17. Removing and Installing Memory Modules ................................................................................................................................................................................................................. 28

Removing Memory Module ................................................................................................................................................................................................................................................. 28

Installing Memory Module ................................................................................................................................................................................................................................................... 28

18. Replacing Fixed SSD ..................................................................................................................................................................................................................................................... 30

19. Replacing GPU .............................................................................................................................................................................................................................................................. 32

20. Rack Mounting ............................................................................................................................................................................................................................................................. 36

21. Plugging the Power Cords ............................................................................................................................................................................................................................................ 38

22. Turning on the System ................................................................................................................................................................................................................................................. 39

23. QCodes: ........................................................................................................................................................................................................................................................................ 40

24. RC_Debug code: ........................................................................................................................................................................................................................................................... 43

25. Accessing BIOS: ............................................................................................................................................................................................................................................................ 45

26. Configuring BMC IP-Address Settings for remote management ................................................................................................................................................................................. 47

27. Configuring Management Console Network ............................................................................................................................................................................................................... 51

28. Using the Web User Interface ...................................................................................................................................................................................................................................... 52

28.1 Required Browser Settings ....................................................................................................................................................................................................................................... 52

29. Accessing the Management Console ........................................................................................................................................................................................................................... 53

30. Viewing and Configuring the Management Console ................................................................................................................................................................................................... 54

30.1. Quick Button and Logged-in User ............................................................................................................................................................................................................................... 54

30.2. Help ............................................................................................................................................................................................................................................................................. 54

30.3. Menu Bar ..................................................................................................................................................................................................................................................................... 54

30.4. Dashboard ................................................................................................................................................................................................................................................................... 55

30.5. Sensor .......................................................................................................................................................................................................................................................................... 56

3

30.5.1. Sensor Detail ..................................................................................................................................................................................................................................................... 56

30.5.2. Sensor Events .................................................................................................................................................................................................................................................... 57

30.6. System Inventory ................................................................................................................................................................................................................................................. 57

30.6.1. CPU Inventory ...................................................................................................................................................................................................................................................... 58

30.6.2. DIMM Inventory ................................................................................................................................................................................................................................................. 58

30.6.3. PCI Inventory ........................................................................................................................................................................................................................................................ 60

30.6.4. HDD Inventory ................................................................................................................................................................................................................................................... 60

30.6.5. NIC Inventory ....................................................................................................................................................................................................................................................... 60

30.7. FRU Information ......................................................................................................................................................................................................................................................... 62

30.8. Logs & Reports ............................................................................................................................................................................................................................................................ 64

30.8.1. IPMI Event Log ................................................................................................................................................................................................................................................... 64

30.8.2. Video Log ........................................................................................................................................................................................................................................................... 64

30.9. Settings ....................................................................................................................................................................................................................................................................... 66

30.9.1. Date & Time ........................................................................................................................................................................................................................................................ 66

30.9.2. External User Services ....................................................................................................................................................................................................................................... 67

30.9.3. Active Directory Settings ...................................................................................................................................................................................................................................... 70

30.9.4. KVM Mouse Settings ........................................................................................................................................................................................................................................... 74

30.9.5. Log Settings .......................................................................................................................................................................................................................................................... 74

30.9.6. Media Redirection Settings ............................................................................................................................................................................................................................... 76

30.9.7. Network Settings ............................................................................................................................................................................................................................................... 80

30.9.8. PAM Order Settings ........................................................................................................................................................................................................................................... 84

30.9.9. Platform Event Filter ............................................................................................................................................................................................................................................ 85

30.9.9. Services .............................................................................................................................................................................................................................................................. 92

30.9.10. SMTP Settings ................................................................................................................................................................................................................................................... 95

30.9.11. SSL Settings ........................................................................................................................................................................................................................................................ 97

30.9.12. System Firewall ............................................................................................................................................................................................................................................... 100

30.9.13 User Management ........................................................................................................................................................................................................................................... 107

30.9.14. Video Recording .............................................................................................................................................................................................................................................. 111

30.9.15. Fan Policy ........................................................................................................................................................................................................................................................ 117

30.9.16. Power Consumption ....................................................................................................................................................................................................................................... 119

30.10. Remote Control ....................................................................................................................................................................................................................................................... 120

30.11. Images Redirection .............................................................................................................................................................................................................................................. 124

30.11.1. Remote Media ........................................................................................................................................................................................................................................... 124

30.12. Power Control .................................................................................................................................................................................................................................................... 126

30.13. Maintenance ......................................................................................................................................................................................................................................................... 127

30.13.1. Backup Configuration ...................................................................................................................................................................................................................................... 128

30.13.2. Firmware Image Location ................................................................................................................................................................................................................................ 129

30.13.3. Firmware Update ............................................................................................................................................................................................................................................. 130

30.13.4. HPM Firmware Update .................................................................................................................................................................................................................................... 134

30.13.5. Firmware Information ..................................................................................................................................................................................................................................... 136

30.13.6. Preserve Configuration ........................................................................................................................................................................................................................................ 0

30.13.7. Restore Configuration ......................................................................................................................................................................................................................................... 3

30.13.8. Restore Factory Defaults ..................................................................................................................................................................................................................................... 3

30.13.9. System Administrator .......................................................................................................................................................................................................................................... 5

30.14. Sign Out .................................................................................................................................................................................................................................................................. 6

31. Updating Bios and ME .................................................................................................................................................................................................................................................... 7

32. Profile Loading in BIOS ................................................................................................................................................................................................................................................. 13

33. Importing profile from Vmedia: ................................................................................................................................................................................................................................... 16

34. Drivers/Tools ................................................................................................................................................................................................................................................................ 18

34.1 Verifying CPU Frequency for Linux ............................................................................................................................................................................................................................ 18

34.2 Verifying CPU Frequency for Windows ..................................................................................................................................................................................................................... 19

4

1.

ORION HF310-G4 Specifications

The ORION HF310-G4 is a single socket, 1U rackmount form factor server and supports the following specification.

Form Factor

Chipset

Processor

Cooling System

Memory

Network Controller

Storage Controller

Drive Bays

Expansion Slots

Validated Network

Adapters

Validated FPGA

Adapters

1U

Intel® X299

Intel® Core™ i9 -7980XE - 18 Cores Overclocked Up to 4.8GHz, 24.75MB Cache, LGA2066

Intel® Core™ i9 -10980XE - 18 Cores Overclocked Up to 5.0GHz*, 24.75 MB Cache, LGA2066

High Performance Liquid Cooled System, Closed Loop and Maintenance Free i9-7980XE - Up to 128GB (8 x 16GB) DDR4-3200MHz non-ECC, Quad Channel Low Latency CAS Memory i9-10980XE - Up to 128GB (8 x 16GB) DDR4-3600MHz non-ECC or Up to 256GB (8 x 32GB) DDR4-3200MHz non-ECC, Quad Channel Low Latency CAS

Memory

(2) Intel® i350 1GbE RJ45 Port + (1) Dedicated Management 1GbE RJ45 Port

Onboard Intel® X299 Express Chipset SATA 6Gbps Controller

Support RAID 0, 1, 5 and 10 Intel® Rapid Storage Technology (Optional Hardware RAID)

(2) 2.5” SATA 6Gbps hot -swap drives HDD/SSD

(2) 2.5” SATA 6Gbps or U.2 NVMe internal fixed drives HDD/SSD

(2) M.2 PCIe 3.0 x4 NGFF-2242/2280/22110 (42mm, 80mm or 110mm)

(1) PCIe 3.0 x16 (FHFLDW) or (2) PCIe 3.0 x8 (HHHL)

(1) PCIe 3.0 x16 Full Height Half Length (FHHL)

(1) PCIe 3.0 x8 OCP 1.0

SolarFlare / Xilinx: Flaeron Series & X2 Series

Mellanox: ConnectX-3, 4, 5 & 6 Series

ExaBlaze: ExaNIC X10, X25 & X40 Series

Xilinx: Vintex & Kintex Series

Nallatech: 385A Series

ExaBlaze: ExaNIC V5P & V9P Series

Intel®: Arria 10 Series

I/O Ports

Chassis Features

(1) VGA, (2) USB 3.0, (2) 1GbE RJ45 LAN, (1) 1GbE RJ45 Management LAN

System Management AST2500 Advanced Graphics & Remote Management Processor, IPMI 2.0 and Redfish 1.6 Compliant,

Web-based user interface for remote management & iKVM, Remote, unblocked, BIOS-level access & control

Toolless mounting motherboard and toolless rail kit, QCode for easy troubleshooting,

Exclusive leak detection technology

Power Supply

Environment

1000W Redundant (1+1) High Efficiency 80 PLUS® Platinum Certified

Operating: 10ºC to 25ºC (50ºF to 77ºF) @ 8% to 90% (non-condensing)

Non-operating: -20ºC to 70ºC (-4ºF to 158ºF) @ 5% to 95% (non-condensing)

Dimensions (DxWxH) 30.0 in x 17.5 in x 1.75 in (762 mm x 444 mm x 44 mm)

Estimated Weight 40 lbs (18 kg)

Warranty

OS Support

Notes

CIARA’s limited hardware warranty includes a one year, parts and labour with return to CIARA USA or

Canada. Customers may purchase an extended warranty of up to 3 years on parts and labour with different support levels. Please contact CIARA at 1-877-242-7272 for complete warranty details including limitations and transferability.

Microsoft® Windows® Server 2016 R2, Microsoft® Windows® Server 2019, Linux® RHEL 7.5 (minimum

KERNEL: 3.10.0862.el7), CentOS™ 7.5 (minimum KERNEL: 3.10.0

-862.el7), Debian 9.5 (minimum KERNEL:

4.15), Ubuntu 18.04 (minimum KERNEL: 4.15), support for other versions available upon request.

*Maximum clock speed may vary depending on applications and workloads.

5

2.

Chassis Overview

The following illustrations are the Orion HF310-G4 chassis Front, Back and Side views.

6

3.

Front Panel Components

8

7

1

6

5

2

4

ITEM

1

2

6

7

8

3

4

5

3

DESCRIPTION

Q code

VGA

2X Drive Bays

2x USB 2.0

HDD LED

Power Button

Reset

Power LED

7

4.

Back Panel Components

8

1 2

6

7

8

3

4

5

ITEM DESCRIPTION

1

2

2x USB 3.0

OCP x8

VGA

2 x 1G LAN

Management LAN (BMC)

Low profile PCIe slot (Possible with our request)

PCIe x 16 (FH/FL/DW)

PCie x 16

3 4 5 6

7

8

5.

Accessory Boxes & Rails

The Orion HF310-G4 server includes (2) accessory boxes:

Accessory Box #1 with GPU Cables and Brackets Accessory Box #2 with (2) Power Cables

The rails and both accessory boxes are placed as shown below in the box with the server.

9

6.

Labelling

This section provides information on the different labels found on the server.

6.1 Power supplies cage

6.2 Serial Number and Model Number Labels on Mylar

6.3 HDD trays

6.4 Support and Certification Labels

10

11

7.

Chassis Layout

The following illusration shows inside of the ORION HF310-G4 system.

PSU Liquid Cooling System PDB

REAR

FRONT

12

8.

Motherboard Layout

Feature

Form factor

Processor Support

Chipset

Memory

LAN

VGA / VRAM

BMC

Expansion Slot

Storage

Rear IO Connector

Specification

17.5”x6.65”(444.5mm x 169mm)

Intel Core-X 2066 Socket R4

X299

8 x DIMM slots support (2 DIMM/channel)

Up to 128GB (8 x 16GB) DDR4 3200 MHz non-ECC Up to

64GB (8 x 8GB) DDR4 3600 MHz non-ECC

Dual GbE LAN Intel I350

1 x Management LAN 10/100/1G

Integrated in BMC with DDR4 128MB VRAM

1920x1200@60Hz 32bpp

ASPEED AST2500

2x PCIe 3 x16 (@Gen3 PCIe_1, PCIe_2) from CPU

1x PCIe 3 x8 (@Gen3 OCP Mezz) from CPU

2x PCIe 3 x4(@Gen3 M.2 slot)from PCH

4 x SATA III

1 x VGA, 2x USB3.0

2 x 1G LAN,1 x MLAN

Internal Connector Front panel connector

13

9.

Detailed Motherboard Layout

1.

COM 1

2.

OCP PCIE 3.0 X8

3.

BMC LED

4.

PCIE_2 PCIE 3.0 X16

5.

TPM (TRUSTED PLATFORM MODULE)

6.

IPMB (INTELLIGENT PLATFORM MANAGEMENT BUS)

7.

CLEAR CMOS

8.

FIVR FAULT LED

9.

CPU THERMALTRIP LED

10.

PROCESSOR HOT LED

11.

DEBUG LED

12.

4X SATA III (SFF-8654)

13.

CPU ERROR LED

14.

BACKPLANE PANEL HEADER

15.

FRONT PANEL HEADER

16.

RESET BUTTON

17.

POWER BUTTON

18.

SYSTEM FAN HEADER

19.

PMBUS HEADER

20.

CPU FAN HEADER

21.

M.2 PORT 1 LED ACTIVITY

22.

M.2 PORT 1

23.

U.2 PORTS

24.

M.2 PORT 2 LED ACTIVITY

25.

M.2 PORT 2

11 10 9 8 7 6 5 2 3 4 1

26.

BIOS RECOVERY

27.

BOOT SAVE MODE

28.

CASE OPEN

29.

ME RECOVERY

30.

BIOS PASSWORD CLEAR

31.

OVERCLOCKING OVER VOLTAGE ENABLE

32.

ME UPDATE

33.

NCSI SWITCH

34.

SW RAID KEY

35.

GBT DEBUG

36.

CPU CATERROR LED

37.

PCIE_1 PCIE 3.0 X16

38.

MEMORY ERROR LED

39.

Q CODE HEADER

40.

VGA PORT

41.

JTAG BMC HEADER

14

Detailed Jumpers Layout

All the jumpers (except the “Clear CMOS” Jumoper) are located next to the PCIe 3.0 x16 Slot 1. The following illustration shows the jumpers.

15

The “Clear CMOS” Jumper is located near the PCIe 3.0 x16 Slot 2 illustrated below.

16

LED, Jumpers & Buttons and Connectors Functionality

See the page 14, the “ Detailed Motherboard Layout ” for the item numbers.

9.1. LED Functionality

Item

3

LED

BMC LED

8

9

10

14

22

25

36

38

FIVR Fault LED

CPU Thermaltrip LED

Processor Hot LED

CPU Error LED

M.2 Port 1 LED

M.2 Port 2 LED

CPU CAT Error LED

Memory Error LED

Status

Flashing Green = Activated

Solid Green = Normal

No Light = Power board Error

Off = Normal

Solid Red = Error

Off = Normal

Solid Red = Error

Off = Normal

Solid Red = Error

Off = No activity

Flashing Green = Activity

Off = No activity

Flashing Green = Activity

Off = Normal

Solid Red = Error

Off = Normal

Solid Red = Error

9.2. Jumpers & Buttons Functionality

Item

7

Jumper / Button

Clear CMOS

16

17

Reset Button

Power Button

BIOS Recovery

Boot Save Mode

Case Open

ME Recovery

Description

Clear CMOS Jumper

See Page 16 - (How to clear the CMOS with battery and jumper)

System board reset

System board power

If Bios flash fails or system cannot boot up, this feature could flash BIOS using Bios setup menu.

= Normal Mode (Default)

= Recovery Mode

Allow the CPU to wake up safely by disabling all the clock gating and is a debug signal.

= Normal Mode (Default)

= Disabled All clocks

Allows the Case Open sensors information to enable.

= Disabled Mode (Default)

= Enabled the Case Open Sensors

ME entering recovery mode

= Normal Mode (Default)

= Recovery Mode

17

BIOS Password Clear

Overclocking Over Voltage Enable

ME Update

NCSI Switch

9.3. Connector Functionality

Item

1

Connector

COM 1

6

12

14

15

19

2

4

5

22

23

25

37

39

40

OCP PCIe 3.0 x8

PCIE_2 PCIe 3.0 x16

TPM

IPMB

4x SATA III (SFF-8654)

Backplane Panel Header

Front Panel Header

PMBUS Header

M.2 Port 1

U.2 Port

M.2 Port 2

PCIE_1 PCIe 3.0 x16

Q Code Header

VGA Port

Clear BIOS Password.

= Normal Mode

= Clear BIOS Password

Overclocking voltage jumper.

= Over voltage enabled (Default Mode)

= Clear BIOS Password

ME update flash security.

= Enable ME Flash security

= Disabled ME flash security

Onboard LAN or OCP cards switch.

= Onboard LAN (i350) NCSI (default)

= OCP LAN card NCSI

Description

COM1 connector

Network or RAID OCP card connector

Network or Mega RAID card connector

Trusted Platform Module

Intelligent Platform Management Bus

SATA connector

Backplane Panel connector

Front Panel connector

Power Management Bus

M.2 connector

U.2 Connector

M.2 connector

Network Card

Q Code Connector

VGA Connector

18

Skylake-X Block Diagram

2 x U.2

(Slimline

(Slimline 4i)

(110mm)

19

10.

Removing the Chassis Cover

This section provides information on how to remove the chassis cover from the system.

Step 1: Turn the Knob anti-clockwise by using Philips screwdriver type 2.

Step 2: Press the button and slide the cover towards the back of the system to release the cover.

20

12.

Installing the Chassis Cover

This section provides information on how to install the Chassis cover in the system.

Step 1: Slide the cover towards the front of the system to close the cover.

Step 2: Turn the Knob clockwise by using Philips screwdriver type 2.

21

13.

How to clear the CMOS with jumper and battery.

This section provides information on how to clear the CMOS by jumper and battery.

Clear CMOS by Jumper a.

Power system off b.

Unplug power from system c.

Move jumper from PIN 1-2 to 2-3 d.

Wait 5-10 seconds e.

Move jumper back from PIN 2-3 to PIN 1-2 f.

Plug power back in g.

Turn system ON h.

Allow system to go through a complete power cycle in order to initialize all components i.

NOTE: ALL BIOS settings will be erased after clearing CMOS (Customer will need to re-upload)

Clear CMOS by Battery a.

Power system off b.

Unplug power from system c.

Remove CMOS battery connector from motherboard d.

Wait 5-10 seconds e.

Plug CMOS battery connector back onto motherboard f.

Plug power back in g.

Turn system ON h.

Allow system to go through a complete power cycle in order to initialize all components

22

14.

How to replace the CMOS battery:

This section provides information on how to replace the CMOS battery in the system. a.

Power system off b.

Unplug power from system c.

Remove CMOS battery connector from motherboard (Battery is held onto motherboard by sticky tape) d.

Gently pull battery off motherboard and replace with new battery (new battery should have come with connector already attached to battery) e.

Plug power back in f.

Turn system ON g.

Allow system to go through a complete power cycle in order to initialize all components

23

15.

Replacing PCIE 1 Card

This section provides information on how to replace the PCIE 1 card.

Step 1: Unfasten the screws below using Philips screwdriver type 2.

Step 2: Remove this plate as illustrated below .

24

Step 3: Remove card from the riser and replace the card.

Step 4: Hold and press plate and card bracket together. Then, fasten with the screws.

1

2

25

16.

Replacing PCIE 2 Card

This section provides information on how to replace the PCIE 2 card.

Step 1: Unfasten the two screws using Philips screwdriver type 2.

Step 2: Remove the riser card from the motherboard.

26

Step 3: Unfasten the screw that secures the card to the bracket, and slide the card out of the riser.

2

1

27

17.

Removing and Installing Memory Modules

This section provides information on how to remove and install the Memory Modules.

128 GB : 8x16GB memories in all slots

64 GB : 8x8GB memories in all slots

32 GB : 4x8GB memories in blue slots

Caution: Handle each memory module only by the meomry cards edges, ensuring not touching the middle of memory module or mettalic contacts.

Removing Memory Module

Step 1: Identify the memory module socket.

Step 2: Press the Memory Module Ejectors (2) on both ends of the memory module socket as show below.

Step 3: Lift the memory module (1) from the memory socket.

1.

Memory Module

2.

Memory Module Ejector

1

3

2

3

Installing Memory Module

28

Step 1: Identify the memory module socket.

Step 2: Make sure that the Memory Module Ejectors on both ends are released.

Step 3: Vertically press the memory module with your thumbs until the memory sits firmly in the memory socket.

29

18.

Replacing Fixed SSD

This section provides information on how to replace the fixed 2.5-inch SSD in the Orion HF310-G4 system.

Step 1: Remove the SATA and power cables.

Then, turn thumbscrews anticlockwise to unscrew with Philips screwdriver type 2.

Step 2: Unscrew these screws as illustrated below.

Note: To access the lower hard drive, the top hard drive needs to be removed first.

1

2

30

Step 3: Replace the hard drive(s).

31

19.

Replacing GPU

This section provides information on how to replace the GPU in the Orion HF310-G4 system, in the PCIE 1 expansion slot.

Step 1: Remove the power cables, and then unscrew the four screws as illustrated below.

Step 2: Remove the plate.

32

1.

Step 3: Carefully lift the riser card bracket by tilting it, and slide the riser card bracket out of the rear panel. Please ensure that the cables connected to the motherboard are not disconnected.

1

3

Step 4: Once the GPU cable connectors are out, proceed to slowly slide out the GPU.

2

1

2

33

Step 5: Remove the original card bracket on the new GPU and replace with the custom bracket supplied in the accessory box.

Step 6 : Slide the new GPU into the riser card. Set the GPU front end carefully inside the chassis ensuring that the GPU connectors are cleared of interference.

1

2

Step 7: Align the riser card and PCIe1 slot and slide it in.

34

Step 8: Screw the top screws and push the plate and screw in the side screws.

35

20.

Rack Mounting

This section provides information on how to mount a system into the rack with the rack rails.

Step 1. Install rails into the rack

Push until Click

Step 2. Pull the middle fully extended member in lock position; ensure that the ball bearing retainer is located at the front of the middle member. Horizontally install chassis half way into slide member.

Pull Lever and Push

Rail until

Click

36

Step 3. When it hits a stop, please pull/push the blue release tab on the inner member.

37

21.

Plugging the Power Cords

The following illustration shows how to connect the power cords to the back of the system.

38

22.

Turning on the System

The following illustration indicates where the power button is located on the front of the server.

39

23.

QCodes:

AMI_Debug code:

{ PEI_CORE_STARTED, 0x10 },

{ PEI_CAR_CPU_INIT, 0x11 },

{ PEI_CAR_NB_INIT, 0x15 },

{ PEI_CAR_SB_INIT, 0x19 },

{ PEI_MEMORY_SPD_READ, 0x2B },

{ PEI_MEMORY_PRESENCE_DETECT, 0x2C },

{ PEI_MEMORY_TIMING, 0x2D},

{ PEI_MEMORY_CONFIGURING, 0x2E },

{ PEI_MEMORY_INIT, 0x2F },

{ PEI_MEMORY_INSTALLED, 0x31 },

{ PEI_CPU_INIT, 0x32 },

{ PEI_CPU_CACHE_INIT, 0x33 },

{ PEI_CPU_AP_INIT, 0x34 },

{ PEI_CPU_BSP_SELECT, 0x35 },

{ PEI_CPU_SMM_INIT, 0x36 },

{ PEI_MEM_NB_INIT, 0x37 },

{ PEI_MEM_SB_INIT, 0x3B },

{ PEI_DXE_IPL_STARTED, 0x4F },

{ PEI_RECOVERY_AUTO, 0xF0 },

{ PEI_RECOVERY_USER, 0xF1 },

{ PEI_RECOVERY_STARTED, 0xF2 },

{ PEI_RECOVERY_CAPSULE_FOUND, 0xF3 },

{ PEI_RECOVERY_CAPSULE_LOADED, 0xF4 },

{ PEI_MEMORY_INVALID_TYPE, 0x50 },

{ PEI_MEMORY_INVALID_SPEED, 0x50 },

{ PEI_MEMORY_SPD_FAIL, 0x51 },

{ PEI_MEMORY_INVALID_SIZE, 0x52 },

{ PEI_MEMORY_MISMATCH, 0x52 },

{ PEI_MEMORY_NOT_DETECTED, 0x53 },

{ PEI_MEMORY_NONE_USEFUL, 0x53 },

{ PEI_MEMORY_ERROR, 0x54 },

{ PEI_MEMORY_NOT_INSTALLED, 0x55 },

{ PEI_CPU_INVALID_TYPE, 0x56 },

{ PEI_CPU_INVALID_SPEED, 0x56 },

{ PEI_CPU_MISMATCH, 0x57 },

{ PEI_CPU_SELF_TEST_FAILED, 0x58 },

{ PEI_CPU_CACHE_ERROR, 0x58 },

{ PEI_CPU_MICROCODE_UPDATE_FAILED, 0x59 },

40

{ PEI_CPU_NO_MICROCODE, 0x59 },

{ PEI_CPU_INTERNAL_ERROR, 0x5A },

{ PEI_CPU_ERROR, 0x5A },

{ PEI_RESET_NOT_AVAILABLE,0x5B },

{ PEI_RECOVERY_PPI_NOT_FOUND, 0xF8 },

{ PEI_RECOVERY_NO_CAPSULE, 0xF9 },

{ PEI_RECOVERY_INVALID_CAPSULE, 0xFA },

{ DXE_CORE_STARTED, 0x60 },

{ DXE_NVRAM_INIT, 0x61 },

{ DXE_SBRUN_INIT, 0x62 },

{ DXE_CPU_INIT, 0x63 },

{ DXE_NB_HB_INIT, 0x68 },

{ DXE_NB_INIT, 0x69 },

{ DXE_NB_SMM_INIT, 0x6A },

{ DXE_SB_INIT, 0x70 },

{ DXE_SB_SMM_INIT, 0x71 },

{ DXE_SB_DEVICES_INIT, 0x72 },

{ DXE_ACPI_INIT, 0x78 },

{ DXE_CSM_INIT, 0x79 },

{ DXE_BDS_STARTED, 0x90 },

{ DXE_BDS_CONNECT_DRIVERS, 0x91 },

{ DXE_PCI_BUS_BEGIN, 0x92 },

{ DXE_PCI_BUS_HPC_INIT, 0x93 },

{ DXE_PCI_BUS_ENUM, 0x94 },

{ DXE_PCI_BUS_REQUEST_RESOURCES, 0x95 },

{ DXE_PCI_BUS_ASSIGN_RESOURCES, 0x96 },

{ DXE_CON_OUT_CONNECT, 0x97 },

{ DXE_CON_IN_CONNECT, 0x98 },

{ DXE_SIO_INIT, 0x99 },

{ DXE_USB_BEGIN, 0x9A },

{ DXE_USB_RESET, 0x9B },

{ DXE_USB_DETECT, 0x9C },

{ DXE_USB_ENABLE, 0x9D },

{ DXE_IDE_BEGIN, 0xA0 },

{ DXE_IDE_RESET, 0xA1 },

{ DXE_IDE_DETECT, 0xA2 },

{ DXE_IDE_ENABLE, 0xA3 },

{ DXE_SCSI_BEGIN, 0xA4 },

{ DXE_SCSI_RESET, 0xA5 },

{ DXE_SCSI_DETECT, 0xA6 },

{ DXE_SCSI_ENABLE, 0xA7 },

{ DXE_SETUP_VERIFYING_PASSWORD, 0xA8 },

{ DXE_SETUP_START, 0xA9 },

41

{ DXE_SETUP_INPUT_WAIT, 0xAB },

{ DXE_READY_TO_BOOT, 0xAD },

{ DXE_LEGACY_BOOT, 0xAE },

{ DXE_EXIT_BOOT_SERVICES, 0xAF },

{ RT_SET_VIRTUAL_ADDRESS_MAP_BEGIN, 0xB0 },

{ RT_SET_VIRTUAL_ADDRESS_MAP_END, 0xB1 },

{ DXE_LEGACY_OPROM_INIT, 0xB2 },

{ DXE_RESET_SYSTEM, 0xB3 },

{ DXE_USB_HOTPLUG, 0xB4 },

{ DXE_PCI_BUS_HOTPLUG, 0xB5 },

{ DXE_NVRAM_CLEANUP, 0xB6 },

{ DXE_CONFIGURATION_RESET, 0xB7 },

{ DXE_CPU_ERROR, 0xD0 },

{ DXE_NB_ERROR, 0xD1 },

{ DXE_SB_ERROR, 0xD2 },

{ DXE_ARCH_PROTOCOL_NOT_AVAILABLE, 0xD3 },

{ DXE_PCI_BUS_OUT_OF_RESOURCES, 0xD4 },

{ DXE_LEGACY_OPROM_NO_SPACE, 0xD5 },

{ DXE_NO_CON_OUT, 0xD6 },

{ DXE_NO_CON_IN, 0xD7 },

{ DXE_INVALID_PASSWORD, 0xD8 },

{ DXE_BOOT_OPTION_LOAD_ERROR, 0xD9 },

{ DXE_BOOT_OPTION_FAILED, 0xDA },

{ DXE_FLASH_UPDATE_FAILED, 0xDB },

{ DXE_RESET_NOT_AVAILABLE, 0xDC },

42

24.

RC_Debug code:

Major Checkpoint progress indicators written to debug port

#define STS_DIMM_DETECT 0xB0

#define STS_CLOCK_INIT 0xB1

#define STS_SPD_DATA 0xB2

#define STS_GLOBAL_EARLY 0xB3

#define STS_RANK_DETECT 0xB4

#define STS_CHANNEL_EARLY 0xB5

#define STS_DDRIO_INIT 0xB6

#define STS_CHANNEL_TRAINING 0xB7

#define STS_INIT_THROTTLING 0xB8

#define STS_MEMBIST 0xB9

#define STS_MEMINIT 0xBA

#define STS_DDR_MEMMAP 0xBB

#define STS_RAS_CONFIG 0xBC

#define STS_GET_MARGINS 0xBD

#define SSA_API_INIT 0xBE

#define STS_MRC_DONE 0xBF

#define STS_JEDEC_INIT 0xC0

==================================================================================================

================================== IIO POST code - Major Definitions ========================

==================================================================================================

**/

#define STS_IIO_EARLY_INIT_ENTRY 0xE0 // IIO early init entry

#define STS_EARLY_PRELINK_TRAINING 0xE1 // Early Pre-link training setting

#define STS_GEN3_EQ_PROGRAMMING 0xE2 // IIO Gen3 EQ programming

#define STS_LINK_TRAINING 0xE3 // IIO Link training

#define STS_GEN3_OVERRIDE 0xE4 // IIO Gen3 override

#define STS_IIO_EARLY_INIT_EXIT 0xE5 // IIO early init exit

#define STS_IIO_LATE_INIT_ENTRY 0xE6 // IIO late init entry

#define STS_IIO_PCIE_PORT_INIT 0xE7 // PCIE port init

#define STS_IIO_IOAPIC_INIT 0xE8 // IOAPIC init

#define STS_IIO_VTD_INIT 0xE9 // VTD init

#define STS_IIO_IOAT_INIT 0xEA // IOAT init

#define STS_IIO_DFX_INIT 0xEB // IIO DFX init

#define STS_IIO_NTB_INIT 0xEC // NTB init

#define STS_IIO_SECURITY_INIT 0xED // Security init

#define STS_IIO_LATE_INIT_EXIT 0xEE // IIO late init exit

#define STS_IIO_ON_READY_TO_BOOT 0xEF // IIO On ready to boot

/* CPUPM POST code - Major */

#define STS_PPM_STRUCT_INIT 0xD0 // CPU PM Structure Init

43

#define STS_PPM_CSR_PROGRAMMING 0xD1 // CPU PM CSR programming

#define STS_PPM_MSR_PROGRAMMING 0xD2 // CPU PM MSR programming

#define STS_PPM_PSTATE_TRANSITION 0xD3 // CPU PM PSTATE transition

#define STS_PPM_EXIT 0xD4 // CPU PM driver exit

#define STS_PPM_ON_READY_TO_BOOT 0xD5 // CPU PM On ready to boot event

44

25.

Accessing BIOS:

This section provides information on how to access to the system’s BIOS.

Step 1. Turn on the system and press the DEL button on the keyboard immediately after you see the following windows to enter in to the Bios.

Step 2. When prompted for the password, and press Enter 1 time to bypass this prompt.

Step 3. In the Warning window, Press OK

45

Step 4. Select the SETUP and press Enter.

Step 4. In the main Menu in the BIOS. You can use either the keyboard arrow keys or mouse cursor to navigate.

46

26.

Configuring BMC IP-Address Settings for remote management

This section provides information on how to configure BMC IP-address settings for remote management.

Step 1: Go in to the BIOS, In the Setup menu, under the Server Mgmt menu select BMC network configuration and note down the Station IP address .

Step 2: Launch the web browser, Type the IP address of the BMC, and enter the username as admin and password as password . Then click on Sign me in .

47

Step 3: When main menu of BMC appears then click on the Settings

Step 4: Select the Network Settings

48

Step 5: Select the Network IP Settings

Step 6: Uncheck the Enable IPv4 DHCP , then enter the IPv4 Address , IPv4 Subnet and IPv4 Gateway and then click on Save .

49

Step 7: Click on OK and close the browser tab or browser. Launch the browser or new tab with the new BMC IP Address to verify if the changes has been successful.

50

27.

Configuring Management Console Network

In order to configure the Management Console, Turn ON the system and note down the BMC IP as seen below.

51

28.

Using the Web User Interface

The BMC firmware features an embedded web server, enabling users to connect to the BMC using a web browser. The web server should support four concurrent connections.

The Web user interface (GUI) is use to configure, monitor and administer the Orion HF310-G4 systems. This Web-based GUI supported on the following web browsers.

Microsoft Windows:

Internet Explorer 8 ~ 11

Google Chrome Google chrome Version 29.0.1547.66m or later

Mozilla® Firefox® 2.0 or later

Linux:

Mozilla Firefox 2.0 or later

28.1 Required Browser Settings

Allow file download from this site : For Internet Explorer, Choose Tools -> Internet Options

-> Security Tab , based on device setup, select among Internet, Local intranet, trusted sites and restricted sites. Click Custom level .... In the Security Settings -

Zone dialog opened, under settings, find Downloads option, Enable File download option. Click OK to the entire dialog boxes.

For all Other Browsers, accept file download when prompted.

Enable JavaScript for this site : The icon indicates whether the JavaScript setting is enabled in browser.

52

29.

Accessing the Management Console

1.

Open a web browser and type in your identified BMC IP.

2.

A dialog box prompts you to enter Username and Password.

3.

Enter the following values:

Username: admin

Password: admin

OR

Username: admin

Password: password

Note : When you log in using the root user name and password, you have full administrative powers. The recommendation is that once you log in, you change the root password.

53

30.

Viewing and Configuring the Management Console

After you successfully log into your Management Console, the Remote Management Console GUI appears.

30.1. Quick Button and Logged-in User

The user information and quick buttons are located at the top right of the Web GUI. A screenshot of the logged-in user information is shown below.

User Information

The logged-in user information shows the logged-in user, his/her privilege and the four quick buttons allowing you to perform the following functions:

Logged-in user and its privilege level

This option shows the logged-in user name and privilege. There are five kinds of privileges.

User : Only valid commands are allowed.

Operator : All BMC commands are allowed except for the configuration commands that can change the behavior of the out-of-hand interfaces.

Administrator : All BMC commands are allowed.

No Access : Login access denied.

OEM : All OEM commands are allowed.

Notification : Click the icon to view the notification messages.

Refresh : Click the icon to reload the current page.

Sync : Click the icon to synchronize with Latest Sensor and Event Log updates.

Sign-out : Click the icon to log out of the Web GUI.

Warning : Click to view the warning messages.

30.2. Help

Help - The Help icon is Located at the top right of the each page in Web GUI. Click this help icon to view more detailed field descriptions.

30.3. Menu Bar

The menu bar displays the following:

54

Enter Ciara Management Console

30.4. Dashboard

The Dashboard page gives the overall information about the status of a device.

To open the Dashboard page, click Dashboard from the menu bar. It displays the following:

Dashboard

A brief description of the Dashboard page is given below.

BMC Up Time

It indicates the Power On time.

Pending Deassertions

It lists the all pending events incurred by various sensors and occupied/available space in logs can be viewed. To know about the pending events details, click the More info link. This navigates to the Event Log page.

Access Logs

A graphical representation of all events incurred by various sensors and occupied/available space in logs can be viewed, if you click on the More info link, you can view the Audit Log page.

Today & 30 Days (Event Logs)

This page displays the list of event logs occurred by the different sensors on this device. Click Details link on Today and 30 days to view the event logs for Today and 30 days respectively.

Sensor Monitoring

It lists all the critical sensors on the device. If you click on any list sensor, you can view the Sensor detail page with the Sensor information and Sensor Events details.

55

30.5. Sensor

The Sensor Readings page displays all the sensor related information.

To open the Sensor Readings page, click Sensor from the menu. Click on any sensor to show more information about that particular sensor, including thresholds and a graphical representation of all associated events.

A sample screenshot of Sensor Readings page is shown below.

The Sensor Readings page contains the following information:

In this Sensor Reading page, Live readings for all the available sensors with details like Sensor

Name, Status, Current Reading and Behavior will be appeared, else you can choose the sensor type that you want to display from the list. Some examples for sensors are Temperature Sensors, Fan Sensors, Watchdog Sensors and Voltage Sensors etc.

Note

: Four DIMM Temp sensors are deployed for monitoring the DIMM temperature on the system. Users must take notice that the live reading of each

DIMM Temp sensor indicates the temperature of a DIMM group, not the temperature of a specific DIMM.

30.5.1. Sensor Detail

Select a particular Sensor from the Critical Sensor or Normal Sensor lists. The Sensor Information as Live Widget and Thresholds for the selected sensor will be displayed as shown below.

Note : For Illustrative Purpose, a sample screenshot of Sensor detail page with Change Thresholds option is shown and explained below.

Note: Widgets are little gadgets, which provide real time information about a particular sensor. User can track a sensor's behavior over a specific amount of time at specific intervals. The result will be displayed as a line graph in the widget. The session will not expire, until the widgets gets a live data of the last widget that is kept opened.

For the selected sensor, this widget gives a dynamic representation of the readings for the sensor.

56

There are six types of thresholds:

Lower Non-Recoverable (LNR)

Lower Critical (LC)

Lower Non-Critical (LNC)

Upper Non-Recoverable (UNR)

Upper Critical (UC)

Upper Non-Critical (UNC)

The threshold states could be Lower Non-critical - going low, Lower Non-critical - going high, Lower Critical - going low, Lower Critical - going high, Lower Non-recoverable - going low, Lower Non-recoverable - going high, Upper Non-critical - going low, Upper Non-critical - going high, Upper Critical - going low, Upper Critical - going high, Upper Nonrecoverable - going low, Upper Non-recoverable - going high.

A graphical view of these events (Number of Entries vs. Thresholds) can be viewed as shown in the Sensor Readings page screenshot.

30.5.2. Sensor Events

The Sensor Events page displays information about events that have triggered the system ’ s sensor. A sample screenshot of Sensor Events page is shown below.

30.6. System Inventory

The System Inventory page displays the following information:

• CPU Inventory

• DIMM Inventory

• PCI Inventory

• HDD Inventory

• NIC Inventory

A screenshot displaying the menu items under System Inventory is shown below.

A detailed description of System Inventory is given below.

57

30.6.1. CPU Inventory

This page displays all detected CPUs on this device. Select one CPU to see the details of that entry or click on Expand All to view all entries in details. Click Download SMBIOS file to download the SMBIOS file.

30.6.2. DIMM Inventory

This page displays all detected DIMMs on this device. It allows you to see memory attributes individual memory details or all entries in detail by clicking on Expand All . Click

Download SMBIOS file to download the SMBIOS file.

58

59

30.6.3. PCI Inventory

This page displays all detected PCI cards on this device. It allows you to see on-board PCI cards, add-on PCI cards or all entries in detail by clicking on Expand All . Click Download

SMBIOS file to download the SMBIOS file.

30.6.4. HDD Inventory

This page displays all detected HDDs on this device. It allows you to see on-board HDDs, add- on HDDs or all entries in detail by clicking on Expand All . Click Download SMBIOS file to download the SMBIOS file.

30.6.5. NIC Inventory

This page displays all detected NICs on this device. It allows you to on-board NICs, add-on NICs or all entries in detail by clicking on Expand All . Click Download SMBIOS file to download the SMBIOS file.

60

61

30.7. FRU Information

FRU Information page displays the BMC ’ s FRU device information. FRU page shows information like Basic Information, Chassis Information, Board Information and Product

Information of the FRU device.

To open the FRU Information page, click FRU Information from the menu bar. Select a FRU Device ID from the FRU Information section to view the details of the selected device. A screenshot of FRU Information page is shown below.

The following fields are displayed here for the selected device:

Available FRU Devices

• FRU device ID - Select the device ID from the drop down list

• FRU Device Name - The device name of the selected FRU device.

Chassis Information

• Chassis Information Area Format Version

• Chassis Type

• Chassis Part Number

• Chassis Serial Number

• Chassis Extra

Board Information

• Board Information Area Format Version

• Language

• Manufacture Date Time

• Board Manufacturer

• Board Product Name

• Board Serial Number

• Board Part Number

• FRU File ID

• Board Extra

Product Information

• Board Information Area Format Version

• Language

• Manufacture Date Time

• Board Manufacturer

• Board Product Name

• Board Serial Number

• Board Part Number

62

• FRU File ID

Board Extra

63

30.8. Logs & Reports

The Logs & Reports page displays the following information:

• IPMI Event Log

• Video Log

A screenshot displaying the menu items under Logs & Reports is shown below.

A detailed description of Logs & Reports is given below.

30.8.1. IPMI Event Log

This page displays the list of event logs occurred by the different sensors on this device. Double click on a record to see the details of that entry. You can use the sensor type or sensor name filter options to view those specific events or you can also sort the list of entries by clicking on any of the column headers.

To open the Event Log page, click Logs & Reports > IPMI Event Log from the menu bar. A sample screenshot of Event Log page is shown below.

The Event Log page consists of the following fields:

Filter By Date : Filtering can be done by selecting Start Date and End Date .

Filter By Type : The category could be either All Events, System Event Records, OEM Event Records, BIOS Generated Events, SMI Handler Events, System Management Software

Events, System Software - OEM Events, Remote Console software Events, Terminal Mode Remote Console software Events.

Note: Once the Filter By Date and Filter type are selected, the list of events will be displayed with the Event ID, Time Stamp, Sensor Type, Sensor Name and Description.

Event Log Statistics : Displays the statistical graph for the selected date.

Clear Event Logs : To delete all the event logs.

Download Event Logs : To download the event logs.

Procedure

1. From the Filter By Date field, select the time period by Start Date and End Date using Calendar for the event categories.

2. From the Filter By Type field, select the Type of the event and Sensor name to view the events for the date. The events will be displayed based on the selected time period.

3. To clear all events from the list, click Clear All Event Logs .

4. To download the event logs, click Download Event Logs .

30.8.2. Video Log

To open the Video Log page, click Logs & Reports > Video Log from the menu bar. A sample screenshot of Video Log page is shown below.

64

Note: Video Trigger Settings should be enabled, to display the Video Log page. Video Trigger Settings can be configured under Settings -> Video Recording ->Auto Video Settings

-> Video Trigger Settings .

A sample screenshot of Video Log page is shown below.

Note: Video will be allowed to play/download only if file size is lesser than 40MB. Browsers have various memory restrictions, due to this browser cannot store and process data greater than 40MB (approximately). If file size is greater than 40MB, user will be notified with a message to use Java player Application.

65

30.9. Settings

This group of pages allows you to access various configuration settings. A screenshot of Configuration Group menu is shown below

.

A detailed description of the Settings menu is given below.

30.9.1. Date & Time

This field is used to set the date and time on the BMC. A Sample screenshot of Date & Time is shown below.

The Date & Time section consists of the following fields:

Configure Date & Time : Displays Time zone list containing the UTC offset along with the locations and Navigational line to select the location which can be used to display the exact local time.

Primary NTP Server : To configure a primary NTP server to use when automatically setting the date and time.

Secondary NTP Server : To configure a secondary NTP server to use when automatically setting the date and time.

Automatic Date & Time : To automatically synchronize Date and Time with the NTP Server.

Save : To save the configured settings.

Procedure

1. Select the Time zone location from the map.

2. In the Primary NTP Server / Secondary NTP Server field, specify the NTP server for the device.

Note: Secondary NTP server is optional field. If the Primary NTP server is not working fine, then the Secondary NTP Server will be used.

3. Enable Automatic Date & Time option.

4. Click Save button to save the settings.

66

30.9.2. External User Services

LDAP/E-Directory Settings

The Lightweight Directory Access Protocol (LDAP)/E-Directory Settings is an application protocol for querying and modifying data of directory services implemented in Internet

Protocol (IP) networks.

In Web GUI, LDAP is an Internet protocol that BMC can use to authenticate users. If you have an LDAP server configured on your network, you can use it as an easy way to add, manage and authenticate BMC users. This is done by passing login requests to your LDAP Server. This means that there is no need to define an additional authentication mechanism, when using the BMC. Since your existing LDAP Server keeps an authentication centralized, you will always know who is accessing the network resources and can easily define the user or group- based policies to control access.

To open External User Services page, click Settings > External User Services from the menu bar. A sample screenshot of External User Services page is shown below.

To open LDAP/E-DIRECTORY Settings page, click Settings > External User Services > LDAP/E-Directory Settings from the menu bar.

A sample screenshot of External User Services page is shown below.

The fields of LDAP/E-Directory Settings page are explained below.

General Settings : To configure LDAP/E-Directory Settings. Options are Enable LDAP/E-Directory Authentication, IP Address, Port and Search base.

Role Groups : To add a new role group to the device. Alternatively, double click on a free slot to add a role group.

Procedure

1. In the LDAP/E-Directory Settings page, click General Settings. A sample screenshot of General LDAP Settings is given below:

67

2. Click Enable LDAP/E-Directory Authentication , to enable LDAP/E-Directory Settings.

Note: Configure proper port number, when SSL is enabled.

3. Select the Common Name Type as IP Address.

4. Enter the IP address of LDAP server in the Server Address field.

Note: IP Address made of 4 numbers separated by dots as in ‘xxx.xxx.xxx.xxx’. Each Number ranges from 0 to 255.

First Number must not be 0. Supports IPv4 Address format and IPv6 Address format. Configure FQDN address, when using StartTLS with FQDN.

5. Specify the LDAP Port in the Port field.

Note : Default Port is 389. For SSL connections, default port is 636. The Port value ranges from 1 to 65535.

6. Specify the Bind DN that is used during bind operation, which authenticates the client to the server. Bind DN is a string of 4 to 64 alpha-numeric characters.

Note: It must start with an alphabetical character. Special Symbols like dot(.), comma(,), hyphen(-), underscore(_), equal-to(=) are allowed. Example: cn=manager, ou=login, dc=domain, dc=com

7. Enter the password in the Password field.

Note: Password must be at least 1 character long. Blank space is not allowed This field will not allow more than 48 characters.

8. Enter the Search Base . The Search base allows the LDAP server to find which part of the external directory tree to be searched. The search base may be something equivalent to the organization, group of external directory.

Note: Search base is a string of 4 to 63 alpha-numeric characters. It must start with an alphabetical character. Special Symbols like dot(.), comma(,), hyphen(-), underscore(_), equal-to(=) are allowed. Example: ou-login, dc-domain, dc-com

9. Select Attribute of User Login to find the LDAP/E-Directory server which attribute should be used to identify the user.

Note: It only supports cn or uid.

10. Select CA Certificate File from the Browse field to identify the certificate of the trusted CA certs.

11. Select the CA Certificate File to find the client certificate filename.

12. Select Private Key to find the client private key filename.

Note: All the 3 files are required, when StartTLS is enabled.

13. Click Save to save the settings.

To add a new Role Group

1. In the LDAP/E-Directory Settings page, click Role Groups and select a blank row.

68

2. Click Add Role Group or alternatively double click on the blank row to open the Add Role group page as shown in the screenshot below.

3. In the Group Name field, enter the name that identifies the role group.

Note: Role Group Name is a string of255 alpha-numeric characters. Special symbols hyphen and underscore are allowed.

4. In the Group Domain field. Enter the Role Group Domain where the role group is located.

Note: Domain Name is a string of 4 to 64 alpha-numeric characters. It must start with an alphabetical character. Special Symbols like dot(.), comma(,), hyphen(-), underscore(_), equal-to(=) are allowed. Example: cn=manager, ou=login, dc=domain, dc=com

5. In the Group Privilege field, enter the level of privilege (User, Administrator, Operator, None) to assign to this role group.

6. Select one or both of the required options

• KVM Access

• VMedia Access

7. Click Save to save the new role group and return to the Role Group List.

69

30.9.3. Active Directory Settings

An active directory is a directory structure used on Microsoft Windows based computers and servers to store information and data about networks and domains. An active directory (sometimes referred to as AD) does a variety of functions including the ability to provide information on objects. It also helps to organize these objects for easy retrieval and access, allows access by end users and administrators and allows the administrator to set security up for the directory. Active Directory allows you to configure the

Active Directory Server Settings. The displayed table shows any configured Role Groups and the available slots. You can modify, add or delete role groups from here. Group domain can be the AD domain or a trusted domain. Group Name should correspond to the name of an actual AD group.

Note: To view the page, you must be at least a User and to modify or add a group, you must be an Administrator.

To open Active Directory Settings page, click Settings > External User Settings > Active Directory from the menu bar. A sample screenshot of Active Directory Settings page is shown below.

The fields of Active Directory page are explained below.

General Settings : This option is used to configure Active Directory General Settings. Options are Enable Active Directory Authentication, Secret User Name, Secret Password, User

Domain name, and up to three Domain Controller Server Addresses.

Role Groups : To add a new role group to the device. Alternatively, double click on a free slot to add a role group.

Procedure

Entering the details in General Active Directory Settings page:

1. Click on General Settings to open the General Active Directory Settings page.

2. In the Active Directory Settings page, check or uncheck the Enable Active directory Authentication check box to enable or disable Active Directory Authentication respectively.

Note : If you have enabled. Active Directory Authentication, enter the required information to access the Active Directory server.

3. Specify the Secret user name and password in the Secret User Name and Secret Password fields respectively.

Note : Secret username/password for AD is not mandatory. When secret username & password is empty, Authentication fails will be always treated as Invalid Password error.

For Invalid Password error PAM will not try other Authentication Methods. So it is recommended to keep AD in the last location in PAM order.

70

User Name is a string of 1 to 64 alpha-numeric characters. It must start with an alphabetical character. It is case-sensitive. Special characters like comma, period, colon, semicolon, slash, backslash, square brackets, Blank space is not allowed, angle brackets, pipe, equal, plus, asterisk, question mark, ampersand, double quotes, space are not allowed. Password must be at least 6 character long and will not allow more than 127 characters.

4. Specify the Domain Name for the user in the User Domain Name field. E.g. MyDomain.com

5. Configure IP addresses in Domain Controller Server Address1, Domain Controller Server Address2 and Domain Controller Server Address3

Note : IP address of Active Directory server: At least one Domain Controller Server Address must be configured. IP Address made of 4 numbers separated by dots as in

“xxx.xxx.xxx.xxx”.

Each number ranges from 0 to 255. First number must not be 0. Domain Controller Server Addresses will supports IPv4 Address format and IPv6 Address format.

6. Click Save to save the entered settings and return to Active Directory Settings page.

Role Groups

To open Role Group page, click Settings > External User Settings > Active Directory > Role Groups from the menu bar. A sample screenshot of Role Groups page is shown below.

The fields of Role Group page are explained below.

Role Group Name : The name that identifies the role group in the Active Directory.

Note : Role Group Name is a string of 64 alpha-numeric characters. Special symbols hyphen and underscore are allowed.

Group Name : This name identifies the role group in Active Directory.

Note : Role Group Name is a string of 64 alpha-numeric characters. Special symbols hyphen and underscore are allowed.

Group Domain : The domain where the role group is located.

Note : Domain Name is a string of 255 alpha-numeric characters. Special symbols hyphen, underscore and dot are allowed.

Group Privilege : The level of privilege to assign to this role group.

KVM Access : To provide access to KVM for AD authenticated role group user.

VMedia Access : To provide access to VMedia for AD authenticated role group user.

To add a new Role Group

1. In the Active Directory Settings page, select a Role Group and click Add Role Group or Alternatively double click on the blank row to open the Add Role group page as shown in the screenshot below.

71

2. In the Group Name field, enter the name that identifies the role group in the Active

Directory.

Note : Role Group Name is a string of 64 alpha-numeric characters. Special symbols hyphen and underscore are allowed.

3. In the Group Domain field, enter the domain where the role group is located.

Note : Domain Name is a string of 255 alpha-numeric characters. - Special symbols hyphen, underscore and dot are allowed.

4. In the Group Privilege field, enter the level of privilege to assign to this role group.

5. Select the required options

• KVM Access

• VMedia Access

6. Click Save to add the new role group and return to the Role Group List.

To Delete a Role Group

1. In the Role Groups Page, select the row that you wish to delete

2. Click Delete Role Group.

72

RADIUS Settings

RADIUS is a modular, high performance and feature-rich RADIUS suite including server, clients, development libraries and numerous additional RADIUS related utilities. In Web GUI, this page is used to set the RADIUS Authentication.

To open RADIUS Settings page, click Settings > External User Settings > RADIUS Settings from the menu bar. A sample screenshot of RADIUS Settings page is shown below.

The fields of General RADIUS Settings page are explained below.

Enable RADIUS Authentication : Option to enable/disable RADIUS authentication. Server Address: The IP address of RADIUS server.

Note : IP Address (Both IPv4 and IPv6 format). FQDN (Fully Qualified Domain Name) format.

Port : The RADIUS Port number.

Note : Default Port is 1812.

Port value ranges from 1 to 65535.

Secret : The Authentication Secret for RADIUS server.

Note : This field will not allow more than 31 characters.

Secret must be at least 4 characters long. Blank space is not allowed.

Enable KVM Access : This field provides access to KVM for RADIUS authenticated users. Enable VMedia Access : This field provides access to VMedia for RADIUS authenticated users.

Save : To save the configured settings.

Procedure

1. Enable the RADIUS Authentication check box to authenticate the RADIUS.

2. Click Advanced RADIUS Settings. This opens the Radius Authorization window as shown below.

73

Note : For Authorization Purpose, configure the Radius user with Vendor Specific Attribute in Server side.

Example: 1 testadmin Auth-Type: =PAP, CleartextPassword:=”admin” Auth-Type: =PAP, VendorSpecific= ”H=4 ”

Example: 2 test operator Auth-Type: = PAP, CleartextPassword:= “operator” Auth-Type: =PAP, VendorSpecific= ”H=3 ” If you change the Vendor-Specific value in server then you should change the same values in this page.

3. Click Save to save the changes made.

30.9.4. KVM Mouse Settings

In BMC Web GUI, Redirection Console handles mouse emulation from local window to remote screen in either of three methods. User has to be an Administrator to configure this option. To view the Supported Operating Systems for Mouse Mode, click Mouse Mode.

To open KVM Mouse setting page, click Settings >KVM Mouse Setting from the menu bar. A sample screenshot of KVM Mouse Settings page is shown below.

The fields of KVM Mouse Settings page are explained below.

Relative Positioning (Linux) : Relative mode sends the calculated relative mouse position displacement to the server.

Absolute Positioning (Windows) : The absolute position of the local mouse is sent to the server. Other Mode (SLES-11 OS Installation): To have the calculated displacement from the local mouse in the center position sent to the server.

Save : To save the current changes.

Procedure

1. Choose either of the following as your requirement:

• Set mode to Absolute

Note : Applicable for all Windows versions, versions above RHEL6, and versions above FC14

• Set mode to Relative

Note : Applicable for all Linux versions, versions less than RHEL6, and versions less than FC14

• Mode to Other Mode

Note : Recommended for SLES-11 OS Installation

2. Click Save button to save the changes made.

30.9.5. Log Settings

In BMC Web GUI, System and Audit log page displays a list of system logs and audit logs occurred in this device.

To open Log Settings page, click Settings > Log Settings from the menu bar. A sample screenshot of Log Settings page is shown below.

74

The fields of Log Settings page are explained below.

SEL Settings Policy

To open SEL Settings Policy page, click Settings > Log Settings > SEL Settings Policy from the menu bar. A sample screenshot of SEL Settings Policy page is shown below.

Advanced Log Settings

To open Advanced Log Settings page, click Settings > Log Settings > Advanced Log Settings from the menu bar. A sample screenshot of Advanced Log Settings Policy page is shown below.

This page is used to configure the log policy for the event log. The fields are as follows.

Enable System Log : This field is to enable or disable the System Logs.

Location : Specifies the Location for system logs, whether it should be preserved in a Local Log or on a Remote Log .

Note : Local file resides at /var/log/

File Size : This field is to specify the size of the file in bytes if the selected log type is local.

75

Note : Size ranges from 3 to 65535. Log files are rotated when they grow bigger than size bytes mentioned, with regards for the last rotation time interval (1 minute).

Rotate Count : To back up the log information in back up files.

Note : Values supported are 0 and 1.When log information exceeds the file size, the old log information is automatically moved to back up files based on the rotate count value. If rotate count is zero, then old log information gets cleared permanently. File Size and Rotate Count options will be available only when Local Log is enabled.

Remote Log Server : This field is to specify the Remote server address to log the system events.

Note : Server address will support the following: IPv4 address format.

FQDN (Fully qualified domain name) format.

Remote Server Port : This field is to specify the Remote Server port address to log the system events.

Note : Remote Log Server and Remote Server Port options will be available only when Remote Log is enabled.

Enable Audit Log : To enable or disable the audit log.

Save : To save the current changes.

Procedure

1. In the System Log field, enable or disable the option.

2. Select the Log type: Local Log or Remote Log.

3. If Local log is selected, enter the file size in the File Size field and rotate count in the

Rotate Count field.

Note : If Remote log is selected, the fields file size and rotate count need not be mentioned.

4. If remote log is selected specify the Server Address of the remote server, where the system events are logged.

5. In the Audit Log field, check or uncheck the Enable option as desired.

6. Click Save to save the changes.

Steps to configure the remote server to enable syslogging

Note : Note : This example uses FC13 as the remote machine to log syslog.

On FC machine, disable the following lines for UDP in /etc/rsyslog.conf:

1. MODLOAD imudp

2. UDPSERVER 514

30.9.6. Media Redirection Settings

This page is used to configure the media into BMC for redirection. To open Media Redirection page, click Settings > Media Redirection Settings from the menu bar. A sample screenshot of Media Redirection page is shown below.

76

The fields of Media Redirection page are explained below.

• General Settings

• VMedia Instance Settings

• Remote Session

• Active Redirections

General Settings

This option is used to configure General Media Settings.

To open General Media Settings section, click Settings > Media Redirection Settings > General Settings.

Local Media Support : To enable or disable Local Media support, check/uncheck the ‘ Enable ’ check box.

Remote Media Support: To enable or disable Remote Media support, check/uncheck the ‘ Enable ’ check box.

Mount CD/DVD : To enable or disable Mount CD/DVD support, check/uncheck the ‘ Enable ’ checkbox.

Note : You can also select all the media types simultaneously. Server Address for CD/DVD Images: Displays the address of the server where the remote media images are stored.

Path in server : Displays the Source path to the remote media images.

Share Type for CD/DVD : Displays the Share Type of the remote media server either NFS or CIFS.

Domain Name, Username, and Password : If share Type is Samba(CIFS), then enter user credentials to authenticate on the server.

Same settings for Harddisk Images : Enable/Disable to select same media type data configurations for all the remote media types.

Mount Harddisk : Enable/Disable to Mount Harddisk.

Server Address for Harddisk Images : Address of the server where the remote media images are stored.

Path in server : Source path to the remote media images.

Share Type for Harddisk : To Select Share Type for Floppy.

77

Domain Name, Username, and Password : If share Type is Samba(CIFS), then enter user credentials to authenticate on the server.

VMedia Instance Settings

This page is used to configure Virtual Media device settings. To open VMedia Instance Settings page, click Settings > Media Redirection Settings > VMedia Instance Settings from the menu bar.

A sample screenshot of VMedia Instance Settings page is shown below.

The following fields are displayed in this page:

CD/DVD device instances : The number of CD/DVD devices supported for Virtual Media redirection.

Harddisk instances : The number of harddisk devices supported for Virtual Media redirection. Remote KVM CD/DVD device instances : The number of CD/DVD devices supported for KVM Virtual Media redirection.

Remote KVM Hard disk instances : The number of Hard disk devices supported for KVM Virtual

Media redirection.

Emulate SD Media as USB disk to Host : To emulate SD Media on BMC as a USB device to

Host Server.

Power Save Mode : To enable or disable the virtual USB devices visibility in the host. If this option is enabled, Virtual media devices will be connected to the Host machine only at the instance Ciara Server Management Console launching KVM session. If this option is disabled, Virtual media devices will remain connected to the host machine all the time irrespective of KVM session status.

Save : To save the configured settings.

Note : Virtual Media configuration changes will restart all the media services. So configuration changes will be blocked when any active media redirection is present.

Procedure

1. Select the number of Floppy devices, CD/DVD devices, Harddisk devices and Remote

KVM Floppy, CD/DVD and Hard disk Devices from the respective drop-down list.

Note : Maximum of four devices can be added in Floppy, CD/DVD and Harddisk drives.

2. Select the Emulate SD Media as USB disk to Host option to enable/disable the SD card support in the host.

3. Check the Power Save Mode option to enable/disable the Virtual USB devices visibility in the host.

4. Click Save to save the changes made else click Reset to reset the previously saved values.

Note : When KVM is launched from Standalone Application, if there are two device panels for each device, and when you click the Connect button, then the redirected device panel will be disabled.

Unmounting device will make the driver disconnect device when using Auto Attach . Hence, when unmounting one USB key, the other USB key will be disconnected and then reconnected.

Remote Session

In BMC Web, this page is used to configure Remote Session configuration settings. “KVM Single

Port Application ” is enabled by default. On disabling, “KV M Single Port Application” , “Encryp t H5Viewer KVM packets” will be enabled by default. On enabling “KVM Single Port

Application”, “Encrypt H5 Viewer KVM packets” will be disabled if it is enabled alread y.

To open Remote Session page, click Settings > Media Redirection Settings > Remote

78

Session from the menu bar.

A sample screenshot of Remote Session page is shown below.

The fields of Configure Remote Session page are explained below.

KVM Single Port Application : To Enable/Disable single port support by runtime. On changing this configuration, KVM and VMedia Sessions will be restarted. If this support is enabled,

KVM session will not use its dedicated port whereas both Web and KVM sessions will be established only via Web Port. If this support is disabled, KVM and Web sessions will use their own dedicated ports respectively.

Keyboard Language : This option is used to select the keyboard supported languages.

Retry Count : This option is used to retry the redirection session for certain number of attempts.

Retry Time Interval(Seconds) : This option is used to give time interval for each attempts.

Server Monitor OFF Feature Status : To enable/disable Server Monitor OFF. If this option is enabled, you can Lock or Unlock the Local host monitor from the remote KVM window.

If this option is disabled, you cannot Lock or Unlock the Local host monitor from the remote KVM window.

Automatically OFF Server Monitor, When KVM Launches : To enable/disable Automatically OFF Server Monitor, When KVM Launches.

Save : To save the current changes.

Note : It will automatically close the existing remote redirection either KVM or Virtual media sessions on Single Port enable/Disable.

Note : Installation of Operating System on the servers via BMC CD ISO image over remote KVM may take 1 to 2 hours.

Procedure

1. Check or uncheck the KVM Single Port Application option to enable Single Port Application support in BMC.

2. Choose the Keyboard Language from the list of keyboard supported languages.

3. Enter a value in the Retry Count field to set the number of attempts for retrying the redirection session.

4. Enter a value in the Retry Time Interval (Seconds) field to give time interval for each attempts.

5. Check the Server Monitor OFF Feature Status check box to enable Local Monitor ON/ OFF command during runtime.

6. Check the Automatically OFF Server Monitor , When KVM Launches check box to automatically Lock the local monitor during H5Viewer launch.

7. Click Save to save the current changes.

Active Redirections

This page displays a list of Media which are being redirected currently. It shows current status and other basic information about the Media.

79

30.9.7. Network Settings

The Network Settings page is used to configure the network settings for the available LAN channels. It also allows users to manage the DNS settings or configure Network

Controller Sideband Interface of a device. To open the Network Settings page, click Settings > Network Settings from the menu bar.

Network IP Settings

To open Network IP Settings page, click Settings > Network Settings > Network IP Settings from the menu bar. A sample screenshot of Network IP Settings page is shown below.

The fields of Network IP Settings page are explained below.

Enable LAN : To enable or disable the LAN Settings.

LAN Interface : Lists the LAN interfaces.

MAC Address : This field displays the MAC Address of the device. This is a read only field.

Enable IPv4 : This option is to enable/disable the IPv4 settings in the device.

Enable IPv4 DHCP : This option is to enable IPv4 DHCP support for the selected interface.

80

IPv4 Address, IPv4 Subnet Mask, and IPv4 Default Gateway : These fields are for specifying the static IPv4 address, Subnet Mask and Default Gateway to be configured to the device.

Note : IP Address made of 4 numbers separated by dots as in “xxx.xxx.xxx.xxx”. Each Number ranges from 0 to 255. First Number must not be 0.

Enable IPv6 : To Enable/Disable the IPv6 configuration settings.

Enable IPv6 DHCP : To Enable/Disable the IPv6 settings in the device. It dynamically configures IPv6 address using DHCP (Dynamic Host Configuration Protocol).

IPv6 Index : To specify a static IPv6 Index to be configured to the device. E.g.: 0

IPv6 Address : To specify a static IPv6 address to be configured to the device. E.g.: 2004::2010

Subnet Prefix length : To specify the subnet prefix length for the IPv6 settings.

Note : Value ranges from 0 to 128.

Default Gateway : Specify v6 default gateway for the IPv6 settings.

Note : If core feature IPV6_COMPLIANCE is enabled, the IPV6 default Gateway field will not be displayed.

Enable VLAN : To enable/disable the VLAN support for selected interface.

VLAN ID : The Identification for VLAN configuration.

Note : Value ranges from 2 to 4094.

VLAN Priority : The priority for VLAN configuration.

Note : Note: Value ranges from 0 to 7. 7 is the highest priority for VLAN.

Save : To save the entries.

Procedure

1. Check Enable LAN to enable LAN support for the selected interface.

2. Select the LAN Interface to be configured.

3. Check Enable IPv4 to enable IPv4 support for the selected interface.

4. Check Enable IPv4 DHCP to dynamically configure IPv4 address using DHCP.

5. If the field is disabled, enter the IPv4 Address, IPv4 Subnet Mask and IPv4 Default Gateway in the respective fields.

6. In IPv6 Configuration, if you wish to enable the IPv6 settings, check Enable IPv6 .

7. If the IPv6 setting is enabled, enable or disable the option Enable IPv6 DHCP .

8. If the field is disabled, enter the IPv6 Address, Subnet Prefix length and IPv6 Index in the given field.

9. In VLAN Configuration, if you wish to enable the VLAN settings, check Enable LAN .

10. Enter the VLAN ID in the specified field.

11. 11. Enter the VLAN Priority in the specified field.

12. Click Save to save the entries.

81

DNS Configuration

The Domain Name System (DNS) is a distributed hierarchical naming system for computers, services, or any resource connected to the Internet or a private network. It associates the information with domain names assigned to each of the participants. Most importantly, it translates domain names meaningful to humans into the numerical

(binary) identifiers associated with networking equipment for the purpose of locating and addressing these devices worldwide. The DNS Server settings page is used to manage the

DNS settings of a device.

To open DNS Server Settings page, click Settings > Network Settings > DNS Configuration from the menu bar. A sample screenshot of DNS Configuration page is shown below.

Domain Name Service Configuration

DNS Enabled : To enable/disable all the DNS Service Configurations. mDNS Enable : To enable/disable the mDNS Support Configurations. Host Name Settings : Choose either Automatic or Manual settings.

Host Name : It displays host name of the device. If the Host setting is chosen as Manual, then specify the host name of the device.

Note : Value ranges from 1 to 64 alphanumeric characters. Special characters ‘ ’(hyphen) and ‘_’(underscore) are allowed. It must not start or end with a ‘ ’(hyphen). IE browsers won't work correctly if any part of the host name contain underscore (_) character.

BMC Registration Settings

BMC Interface : Options to register the BMC through the Interfaces (eth0&eth1).

Register BMC : To register BMC through registration method.

Registration Method

Options to register the BMC are through NS Update or DHCP Client FQDN or Hostname .

TSIG Configuration

Both : Check this option to modify TSIG authentication for both interfaces.

Eth 0&1 :

• TSIG Authentication Enabled : Check this box to enable TSIG authentication while registering DNS via nsupdate. Separate TSIG files can be uploaded for each LAN interface.

• Current TSIG Private File : The information of Current TSIG private file along with its uploaded date/time will be displayed (readonly).

• New TSIG Private File : Browse and navigate to the TSIG private file.

Note : TSIG file should be of private type.

Domain Setting : Select whether the domain interface will be configured manually or automatically.

• Automatic - If you Select Automatic, the Domain Name cannot be configured as it will be done automatically. The field will be disabled.

• Manual - If the Domain setting is chosen as Manual, then specify the domain name of the device.

Note : If you select “Automatic” it displays the Domain Interface option. If you select “Manual” it displays “Domain name”.

82

• Domain Name : It displays the domain name of the device.

Domain Name Server Setting

Automatic - If you select Automatic “DNS Interface” option should be explained.

Manual - Specify the DNS (Domain Name System) server address to be configured for the BMC.

IP Priority :

• If IP Priority is IPv4, it will have 2 IPv4 DNS servers and 1 IPv6 DNS server.

• If IP Priority is IPv6, it will have 2 IPv6 DNS servers and 1 IPv4 DNS server.

Note : This is not applicable for Manual configuration.

DNS Server 1, 2 & 3

To specify the DNS (Domain Name System) server address to be configured for the BMC.

Note : IPv4 Addresses should be given in dotted decimal representation. IPv6 Addresses are supported and must be global unicast addresses. DNS Server Address will support the following:

• IPv4 Address format.

• IPv6 Address format.

Save : To save the current changes.

Procedure

1. In Domain Name Service Configuration, Enable DNS Service.

• Check the option DNS Enabled to enable all the DNS Service Configurations.

2. Choose the Host Name Setting either Automatic or Manual.

Note : If you choose Automatic, you need not enter the Host Name and if you choose Manual, you need to enter the Host Name.

3. Enter the Host Name in the given field if you have chosen Manual Configuration.

4. Under Register BMC, choose the BMC ’ s network port to register with DNS settings.

5. Check Register BMC option to register with DNS settings.

• Nsupdate - Choose Nsupdate option to register with DNS server using nsupdate application.

• DHCP Client FQDN - Choose DHCP Client FQDN option to register with DNS Server using DHCP option 81.

• Hostname - Choose Hostname option to register with DNS server using DHCP option 12.

Note : Hostname option should be selected, if the DHCP client FQDN option is not supported by DHCP server.

6. Check Both option to modify TSIG authentication for both interfaces (eth0&1).

7. In Eth 0&1 TSIG Configuration , Check TSIG Authentication Enabled option to enable/ disable TSIG authentication while registering DNS via nsupdate.

• The current file name will be displayed in Current TSIG Private file info field.

• To view a new one, click New TSIG private file to browse and navigate to the TSIG private file.

8. In the Domain Settings,

• Select the domain settings (Automatic or Manual).

• Enter the Domain Name in the given field if the option “Manual” is being selected in domain settings field.

9. In Domain Name Server Setting,

• Select the DNS Name Server Setting.

• Choose the IP Priority, either IPv4 or IPv6.

• Enter the DNS Server address.

10. In DNS Server1, DNS Server2 and DNS Server3, enter the server addresses to be configured for the BMC.

11. Click Save to save the entries.

83

30.9.8. PAM Order Settings

This page is used to configure the PAM ordering for user authentication in to the BMC.

To open PAM Ordering page, click Settings > PAM Order Settings from the menu bar. A sample screenshot of PAM Order page is shown below:

The fields of Setttings > PAM Ordering page are explained below.

PAM Module : It shows the list of available PAM modules supported in BMC.

Note : It is recommended to not to keep same username for different PAM modules. If Authentication fails, the reason of fail could be invalid User or Invalid Password. If

Radius Authentication fails, we can't differentiate whether it is invalid user or invalid password. So it is always treated as Invalid username error and PAM will try other

Authentication Methods.

If AD contains secret username & password as empty, Authentication fails will be always treated as Invalid Password error. For Invalid Password error PAM will not try other

Authentication Methods. So it is recommended to keep AD in the last location in PAM order.

Procedure

1. Select the required PAM module and click and drag the required PAM module. It can be moved UP or DOWN to change its arrangement order.

2. Click Save to save any changes made.

Note : Whenever the configuration is modified, the web server will be restarted automatically. Logged-in session will be logged out.

84

30.9.9. Platform Event Filter

Platform Event Filter (PEF) provides a mechanism for configuring the BMC to take selected actions on event messages that it receives or has internally generated. These actions include operations such as system power-off, system reset, as well as triggering the generation of an alert.

In BMC Web GUI, the PEF Management is used to configure the following:

• Event Filters

• Alert Policies

• LAN Destinations

To open PEF Management Settings page, click Settings > Platform Event Filter from the menu bar. Each tab is explained below.

Event Filters

A PEF implementation is recommended to provide at least 40 entries in the event filter table.

A subset of these entries should be pre-configured for common system failure events, such as over-temperature, power system failure, fan failure events, etc. Remaining entries can be made available for ‘OEM’ or System Management Software configured events. Note that individual entries can be tagged as being reserved for system use - so this ratio of pre-configured entries to run-time configurable entries can be reallocated if necessary.

The fields of Platform Event Filters Tab are explained below. This page contains Pre-configured 40 Events with PEF IDs.

Procedure

1 . Click the Event Filters section to configure the event filters in the available slots.

2. To Add an Event Filter entry, select a free section to open the Event Filter entry page. A sample screenshot of Event Filter Configuration page is shown below.

85

In the Event Filter Configuration section:

• In Enable this filter, check this option to enable the PEF settings.

• In Event Severity to trigger, select any one of the Event severity from the list.

• Check Event Filter Action Alert to enable alerts for event filter actions.

• Select any one of the Power Action either Power down, Power reset or Power cycle from the drop down list

• Choose any one of the configured Alert Policy Group Number from the drop down list.

Note : Alert Policy has to be configured - under Settings->PEF->Alert Policy .

• Check Raw Data option to fill the Generator ID with raw data.

• Generator ID 1 field is used to give raw generator ID 1 data value.

• Generator ID 2 field is used to give raw generator ID2 data value.

Note : In RAW data field, specify hexadecimal value prefix with ‘0x '.

86

• In the Event Generator section, choose the event generator as Slave Address - if event was generated from IPMB. Otherwise as System Software ID - if event was generated from system software.

• In the Slave Address/Software ID field, specify corresponding I2C Slave Address or System Software ID.

• Choose the particular Channel Number that event message was received over. Or choose ‘0’ if the event message was received via the system interface, primary

IPMB, or internally generated by the BMC.

• Choose the corresponding IPMB Device LUN if event generated by IPMB.

• Select the Sensor Type of sensor that will trigger the event filter action.

• In the SensorName field, choose the particular sensor from the sensor list.

• Choose Event Option to be either All Events or Sensor Specific Events.

• In the Sensor Events field, choose the type of event levels.

• Event Trigger field is used to give Event/Reading type value.

Note : Value ranges from 1 to 255.

• Event Data 1 AND Mask field is used to indicate wildcarded or compared bits.

Note : Value ranges from 1 to 255.

• Event Data 1 Compare 1 & Event Data 1 Compare 2 fields are used to indicate whether each bit position ’ s comparison is an exact comparison or not.

Note : Value ranges from 1 to 255.

• Event Data 2 AND Mask field is similar to Event Data 1 AND Mask.

• Event Data 2 Compare 1 & Event Data 2 Compare 2 fields are similar to Event

Data 1 Compare 1 and Event Data 1 Compare 2 respectively.

• Event Data 3 AND Mask field is similar to Event Data 1 AND Mask.

• Event Data 3 Compare 1 & Event Data 3 Compare 2 fields are similar to Event

Data 1 Compare 1 and Event Data 1 Compare 2 respectively.

3. Click Save to save the changes and return t o event filter list.

4. Click Delete to delete the existing filter.

87

Alert Policies

This page is used to configure the Alert Policy for the PEF configuration. You can add, delete or modify an entry in this page.

The fields of Platform Event Filter - Alert Policies section are explained below.

Policy Group Number : Displays the Policy number of the configuration.

Enable this alert : To enable or disable the policy settings.

Policy Action : To choose any one of the Policy set values (0-5) from the list.

0 - Always send alert to this destination.

1 - If alert to previous destination was successful, do not send alert to this destination. Proceed to next entry in this policy set.

2 - If alert to previous destination was successful, do not send alert to this destination. Do not process any more entries in this policy set.

3 - If alert to previous destination was successful, do not send alert to this destination. Proceed to next entry in this policy set that is to a different channel.

4 - If alert to previous destination was successful, do not send alert to this destination. Proceed to next entry in this policy set that is to a different destination type.

LAN Channel : To choose a particular channel from the available channel list.

Destination Selector: To choose a particular destination from the configured destination list.

Note : LAN Destination has to be configured - under Settings->Platform Event Filters >LAN Destinations .

Event Specific Alert String : To specify an event-specific Alert String.

Alert String Key : To specify which string is to be sent for this Alert Policy entry.

Save : To save the Alert Policies entries.

Delete : To delete the selected configured Alert Policy.

Procedure

1. In the Alert Policies Section, select the slot for which you have to configure the Alert policy. That is, In the Alert Policies page , if you have chosen Alert Policy Group

Number as 4, you have to configure the 4th slot (the slot with Policy Number 4) in the Alert Policy Tab.

2. Select the slot and click on the empty slot to open the Alert Policies page as shown in the screenshot below.

88

3. Select Policy Group Number from the drop-down list.

4. Check Enable this alert to enable the policy settings.

5. Choose any of the Policy Action from the list.

6. Choose particular LAN Channel from the available channel list.

7. In the Destination Selector , choose particular destination from the configured destination list.

Note : LAN Destination has to be configured under Settings-> Platform Event Filters->LAN Destinations .

That is if you select the number 4 for destination selector in Alert Policy Entry page, then you have to configure the 4th slot (LAN Destination Number 4) in the LAN

Destinations tab.

8. Enable Event Specific Alert String , if the Alert policy entry is Event Specific.

9. In the Alert String Key field, choose any one value that is used to look up the Alert

String to send for this Alert Policy entry.

Note : Using Web UI, Alert strings cannot be configured but option for Event Specific alert strings can be enabled/disabled. There is an option to select only the alert string keys, but alert strings has to be configured using IPMI Command (Set PEF Config Parameter 'Alert String").

10. Click Save to save the new alert policy and return to Alert Policy list.

11. Click Delete to delete a configuration.

89

LAN Destinations

This page is used to configure the LAN destination of PEF configuration. A sample screenshot of LAN Destination page is given below.

The fields of Platform Event Filters - LAN Destinations are explained below. Select any empty slot to configure LAN Destinations.

Select the LAN Channel : To select the LAN Channel number

LAN Channel : Displays LAN Channel Number for the selected slot (read-only).

LAN Destination : Displays ID for setting Destination Selector of Alert Policy (read-only). Destination Type : Destination type can be either an SNMP Trap or an E-mail alert. For Email alerts, the four fields - SNMP Destination Address, BMC User Name, Email subject and Email message needs to be filled. The SMTP server information also has to be added - under Settings

->SMTP Settings . For SNMP Trap, only the SNMP Destination Address has to be filled.

SNMP Destination Address : If Destination type is SNMP Trap, then enter the IP address of the system that will receive the alert. Destination address will support the following:

• IPv4 address format.

• IPv6 address format.

BMC User Name : If Destination type is Email Alert, then choose the user to whom the email alert has to be sent. Email address for the user has to be configured under

Settings-->User Management.

Email Subject & Email Message : These fields must be configured if email alert is chosen as destination type. An email will be sent to the configured email address of the user in case of any severity events with a subject specified in subject field and will contain the message field ’ s content as the email body. These fields are not applicable for ‘AMI - Format’ email users.

Note : User should be configured under Settings-->User Management

Save : To add a new entry to the device. Alternatively, double click on a free slot.

Delete : To delete the selected configured LAN Destination.

Procedure

1. In the LAN Destinations section, choose the number of slots to be configured. This should be the same number of slot that you have selected in the Alert Policies -

Destination Selector field. That is if you have chosen the Destination Selector as 4 in the Alert Policies page of Alert Policies tab, then you have to configure the 4th slot of LAN

Destination page.

2. Select the slot and click on the empty slot. This opens the LAN Destination entry .

90

3. In the LAN Channel Number field, the LAN Channel Number for the selected slot is displayed and this is a read only field.

4. In the LAN Destination field, the destination for the newly configured entry is displayed and this is a read only field.

5. In the Destination Type field, select the one of the types.

6. In the SNMP Destination Address field, enter the destination address.

7. If the destination type is Email alert, select the BMC User Name from the list of users.

Note : E-mail address should be configured under Settings-->User Management .

8. In the Email Subject field, enter the subject.

9. In the Email Message field, enter the message.

10. Click Save to save the new LAN destination and return to LAN destination list.

11. Click Delete to delete a configuration.

12. Click Send Test Alert to send sample alert to configured destination.

Note : Test alert can be sent only with enabled SMTP configuration. SMTP support can be enabled under Settings->SMTP Settings .

91

30.9.9. Services

This page displays the basic information about services running in the BMC. Only Administrator can modify the service.

To open Services page, click Settings > Services from the menu bar. A sample screenshot of Services page is shown below.

The fields of Services page are explained below.

Services : Displays service name of the selected slot (read-only).

Status : Displays the current status of the service, either active or inactive state.

Interfaces : It shows the interface in which service is running.

Nonsecure Port : This port is used to configure non secure port number for the service.

• Web default port is 80

• KVM default port is 7578

• CD Media default port is 5120

• FD Media default port is 5122

• HD Media default port is 5123

• Telnet default port is 23

• SOLSSH default port is 52123

Note : SSH service will not support non secure port. If single port feature is enabled, KVM, CD Media, FD Media and HD Media ports cannot be edited. Port value ranges from 1 to 65535.

Secure Port : Used to configure secure port number for the service.

• Web default port is 443

• KVM default port is 7582

• CD Media default port is 5124

• FD Media default port is 5126

• HD Media default port is 5127

• SSH default port is 22

Note : Telnet service and SOLSSH will not support secure port. If single port feature is enabled, KVM, CD Media, FD Media and HD Media ports cannot be edited. Port value ranges from 1 to 65535.

Port listening status on various feature settings:

Si n g l e p o r t enabled

Si n g l e p o r t disabled

O n l y K V M e n c r y p t i o n enabled

Only Medi a e n c r y p t i o n enabled

B o t h K V M a n d

M e enabled d e n c r y p t i o n i a

Adviser

(video server)

Cdserver

Fdserver

Hdserver

7578 (LP)

5120 (LP)

5122 (LP)

5123 (LP)

7578 (LP)

7578 (EO)

5120 (LP)

5120 (EO)

5122 (LP)

5122 (EO)

5123 (LP)

5123 (EO)

7578 (LP)

7578 (EO)

5120 (LP)

5120 (EO)

5122 (LP)

5122 (EO)

5123 (LP)

5123 (EO)

7578(LP)

7578 (EO)

5120 (LP)

5124 (EO)

5122 (LP)

5126 (EO)

5123 (LP)

5127 (EO)

7578(LP)

7582 (EO)

5120 (LP)

5124 (EO)

5122 (LP)

5126 (EO)

5123 (LP)

5127 (EO)

92

Note : LP - Loopback, EO - Exposed Outside.

The adviser will always be listening to loopback as well as kvm configured interface as mentioned in the above table. So that the H5Viewer client can connect to the video server. The media servers will be listening to loopback as well as configured interface as mentioned in the above table. So that the lmedia/rmedia and H5Viewer/JViewer client can connect to the media servers.

Timeout : Displays the session timeout value of the service. For web, SSH and telnet service, user can configure the session timeout value.

Note : Web timeout value ranges from 300 to 1800 seconds. KVM timeout value ranges from 300 to 1800 seconds. SSH and Telnet timeout value ranges from 60 to 1800 seconds. SSH and Telnet timeout value ranges from 60 to 1800 seconds. SSH and telnet service will be using the same timeout value. If you configure SSH timeout value, it will be applied to telnet service also and vice versa.

If KVM is launched then the web session timeout will not take effect.

Maximum Sessions : Displays the maximum number of allowed sessions for the service.

Active Sessions : To view the current active sessions for the service.

Procedure to view the Active Sessions:

1. Click View Icon ( ) to view the details about the active sessions for the service.

2. This opens the Active Session screen (for example - Service Sessions) as shown in the screenshot below.

Session Type : Displays the type of the active sessions.

User : Displays the name of the user.

Client IP : Displays the IP addresses that are already configured for the active sessions.

Privilege : Displays the access privilege of the user.

3. Select a slot and click Terminate icon () to terminate the particular session of the service.

Procedure to modify the existing services:

1. Select a slot and click Edit icon () to modify the configuration of the service.

Note : Whenever the configuration is modified, the service will be restarted automatically .

User has to close the existing opened session for the service if needed.

2. This opens the Service Configuration screen as shown in the screenshot below.

93

3. Service Name is a read only field.

4. Activate the Current State by enabling the Active check box.

Note : Interfaces, Non-secure port, secure port, Time out and Maximum Sessions will not be active unless the current state is active.

5. Enter the Secure Port Number in the Secure Port field.

6. Enter the timeout value in the Timeout field.

Note: The values in the Maximum Sessions field cannot be modified.

7. Click Save to save all changes you have made, else click Cancel to exit.

94

30.9.10. SMTP Settings

Simple Mail Transfer Protocol (SMTP) is an Internet standard for electronic mail (e-mail) transmission across Internet Protocol (IP) networks. Using BMC Web GUI, you can configure the SMTP settings of the device.

To open SMTP Settings page, click Settings > SMTP Settings from the menu bar. A sample screenshot of SMTP Settings page is shown below.

The fields of SMTP Settings page are explained below.

LAN Interface : Displays the list of LAN channels available

Sender Email ID : A valid ‘Sender Address’ to indicate the BMC, whenever e-mail is sent.

Primary Server Name : The ‘Machine Name’ of the BMC, from where the e-mail is sent.

Note: Machine Name is a string of maximum 15 alpha-numeric characters. Space, special characters are not allowed.

Primary SMTP Support : To enable/disable SMTP support for the BMC.

Primary SMTP Port : To specify the SMTP Normal Port.

Primary Secure SMTP Port : To specify the SMTP Secure Port.

Note: For Primary SMTP Port - Default Port is 25, and the Port value ranges from 1 to 65535. For Primary Secure SMTP Port - Default Port is 465, and the Port value ranges from

1 to 65535.

Primary Server IP : The IP address of the SMTP Server. It is a mandatory field.

Note: IP Address made of 4 numbers separated by dots as in “xxx.xxx. xxx.xxx”. Each Number ranges from 0 to 255. First Number must not be 0.

Supports IPv4 Address format and IPv6 Address format.

Primary SMTP Authentication : To enable/disable SMTP Authentication.

Note: SMTP Server Authentication Types supported are:

• CRAM-MD5

• LOGIN

• PLAIN

If the SMTP server does not support any one of the above authentication types, the user will get an error message stating “ Authentication type is not supported by SMTP Server .”

Primary Username : Enter username to access SMTP Accounts.

Note: User Name can be of length 4 to 64 alpha-numeric characters, dot (.), dash (-), and underline (_). It must start with an alphabet. Other Special Characters are not allowed.

95

Primary Password : Enter password for the SMTP User Account.

Note: Password must be at least 4 characters long. Blank space is not allowed. This field will not allow more than 64 characters.

Primary SMTP STARTTLS Enable : To enable STARTTLS support for the SMTP Client.

• Upload SMTP CA Certificate File : File that contains the certificate of the trusted CA certs. CACERT key file should be of pem type,LOGIN

• Upload SMTP Certificate File : Client certificate filename. CERT key file should be of pem type.

• Upload SMTP Private Key : Client private key filename. SMTP key file should be of pem type.

Note: To enable STARTTLS support, the respective SMTP support option should be enabled.

Secondary SMTP Support : It lists the Secondary SMTP Server configuration. It is an optional field. If the Primary SMTP server is not working fine, then it uses Secondary SMTP

Server configuration.

Note: Options of Secondary SMTP Support are same as Primary SMTP Support.

Save : To save the new SMTP server configuration.

Procedure

1. Select the LAN Interface from the drop-down list.

2. Enter the Sender Email ID in the specified field.

3. Check Primary SMTP Support option to enable SMTP support for the BMC.

4. Enter the Machine Name of the SMTP Server in the Primary Server Name .

Note: Machine Name is a string of maximum 15 alpha-numeric characters. Space, special characters are not allowed.

5. Enter IP address of the SMTP Server in the Primary Server IP field. It is a mandatory field.

6. Enter the Primary SMTP Port in the specified field.

7. Enter the Primary Secure SMTP Port in the specified field.

8. Enable the check box Primary SMTP Authentication if you want to authenticate SMTP Server.

9. Enter your Primary User name and Primary Password in the respective fields.

10. Enable the check box Primary SMTP SSLTLS Enable to send data through secure Port.

Note: If this option is selected, STARTTLS option and Normal Port will be hidden.

11. Check the Secondary SMTP Support option to enable Secondary SMTP support for the BMC.

12. Enter the Secondary Server Name , Secondary Server IP , Secondary SMTP Port and Secure

13. Port values in the respective fields.

14. Enable the check box SMTP Server Authentication if you want to authenticate SMTP Server.

15. Enter your Secondary User name and Password in the respective fields.

16. Enable the check box Secondary SMTP SSLTLS to send data through secure Port.

Note: If this option is selected, STARTTLS option and Normal Port will be hidden.

17. Click Save to save the entered details.

96

30.9.11. SSL Settings

The Secure Socket Layer protocol was created by Netscape to ensure secure transactions between web servers and browsers. The protocol uses a third party, a Certificate

Authority (CA) , to identify one end or both end of the transactions.

Using BMC Web GUI, configure SSL certificate into the BMC. Using this, the device can be accessed in a secured mode.

To open the SSL Certificate Configuration page, click Settings > SSL Settings from the menu bar. There are three tabs in this page.

• Upload SSL Certificate option is used to upload the certificate and private key file into the BMC.

• Generate SSL Certificate option is used to generate the SSL certificate based on configuration details.

• View SSL Certificate option is used to view the uploaded SSL certificate in readable format.

A sample screenshot of Upload SSL Certificate page is shown below.

The fields of SSL Settings - Upload SSL Settings tab are explained below.

Current Certificate : Current certificate and uploaded date/time will be displayed (read-only).

New Certificate : Certificate file should be of pem type

Current Private Key : Current Private key information will be displayed (read-only).

New Private Key : Private key file should be of pem type

Upload : To upload the SSL certificate and privacy key into the BMC.

Note: After successful upload, HTTPs service will restart to use the newly uploaded SSL certificate.

The fields of SSL Settings - Generate SSL Certificate are explained below.

97

Common Name(CN) : Common name for which certificate is to be generated.

• Maximum length of 64 characters.

• It is a string of alpha-numeric characters.

• Special characters ‘#’ and ‘$’ are not allowed.

Organization(O) : Organization name for which the certificate is to be generated.

• Maximum length of 64 characters.

• It is a string of alpha-numeric characters.

• Special characters ‘#’ and ‘$’ are not allowed.

Organization Unit(OU) : Over all organization section unit name for which certificate is to be generated.

• Maximum length of 64 characters.

• It is a string of alpha-numeric characters.

• Special characters ‘#’ and ‘$’ are not allowed.

City or Locality(L): City or Locality of the organization (mandatory).

• Maximum length of 128 characters.

• It is a string of alpha-numeric characters.

• Special characters ‘#’ and ‘$’ are not allowed.

State or Province(ST) : State or Province of the organization (mandatory).

• Maximum length of 64 characters.

• It is a string of alpha-numeric characters.

• Special characters ‘#’ and ‘$’ are not allowed.

Country(C) : Country code of the organization (mandatory).

• Only two characters are allowed.

• Special characters are not allowed.

Email Address : E-mail Address of the organization (mandatory).

Valid for : Validity of the certificate.

• Value ranges from 1 to 3650 days.

Key Length : The key length bit value of the certificate.

Save : To generate the new SSL certificate.

Note: HTTPs service will get restarted, to use the newly generated SSL certificate.

The fields of SSL Settings - View SSL Certificate are explained below.

Basic Information : This section displays the basic information about the uploaded SSL certificate. It displays the following fields:

• Version Serial Number

• Signature Algorithm

• Public Key

• Issuer Common Name(CN)

• Issuer Organization(O)

• Issuer Organization Unit(OU)

• Issuer City or Locality(L)

• Issuer State or Province(ST)

• Issuer Country(C)

• Issuer E-mail Address

98

• Valid From

• Valid Till

Procedure

1. Click the Upload SSL Certificate tab, Browse the New Certificate and New Private key.

2. Click Upload to upload the new certificate and private key.

3. In Generate SSL Certificate, enter the following details in the respective fields:

• The Common Name for which the certificate is to be generated.

• The Organization for which the certificate is to be generated.

• The Organization Unit name for which certificate to be generated.

• The City or Locality of the organization

• The State or Province of the organization

• The Country of the organization

• The Email address of the organization.

• The number of days the certificate will be valid in the Valid For field.

4. Choose the Key Length bit value of the certificate

5. Click Save to generate the certificate.

6. Click View SSL Certificate tab to view the uploaded SSL certificate in user readable format.

Note: Once you Upload/Generate the certificates, only HTTPs service will get restarted. You can now access your Web securely using the following format in your IP

Address field from your Internet browser: https://<your BMC's IP address here>

For example, if your BMC's IP address is 192.168.0.30, enter the following: https://192.168.030

Please note the <s> after <http> . You must accept the certificate before you are able to access your Web.

99

30.9.12. System Firewall

In BMC Web GUI, the System Firewall page allows you to configure the firewall settings. The firewall rule can be set for an IP or range of IP Addresses or Port numbers. To view this page, you must at least be an operator. Only administrators can add or delete a firewall.

To open System Firewall page, click Settings > System Firewall from the menu bar.

General Firewall Settings

Click General Firewall Settings page. A sample screenshot of General Firewall Settings page is shown below.

The fields of Firewall Settings tab are explained below.

To View Existing Firewall Settings

Click General Firewall Settings > Existing Firewall Settings icon. A blank page will be opened if you did not add anything in “Add Firewall Settings”.

If any settings are added, then the added rule will be listed in “Existing Firewall Settings” page. A sample screenshot of Existing

Firewall Settings page is shown below.

The Existing Firewall Settings page allows you to remove any particular Existing Firewall Settings.

100

Procedures

1. Select the Existing Firewall Settings you want to remove.

2. Click on Delete to remove the selected Existing Firewall Settings.

101

Add Firewall Settings

Click General Firewall Settings > Add Firewall Settings . This opens the Add Firewall Settings page as shown below.

1. Select Block All to block all the incoming IP ’ s and Port ’ s.

2. Select Flush All to flush all the system firewall rules.

3. Select Timeout to enable or disable firewall rules with timeout.

4. Enter Start Time to start the respective firewall rule effect from this time.

5. Enter End Time to end the respective firewall rule effect from this time.

Note: The time should be in the dd-mm-yy:hh-mm format.

6. Click Save to save the changes made else click Cancel to go back to the previous screen.

IP Address Firewall Rules

Click IP Firewall Rules page. A sample screenshot of IP Firewall Rules page is shown below.

The fields of IP Address Firewall tab are explained below.

To View Existing IP Rules or a range of IP Addresses

Click Settings > System Firewall > IP Address Firewall Rules > Existing IP Rules . A blank page will be opened if you did not add anything in “Add IP Rule”.

If any rule is added, then the added rule will be listed in “Existing IP Rules” page.

A sample screenshot of Existing IP Rules page is shown below.

102

The Existing IP Rules page allows you to remove any particular Existing IP Rules.

Procedures

1. Select the Existing IP Rules you want to remove.

2. Click on Delete to remove the selected Existing IP Rules.

IP Single (or) Range Start - To show the configured Port Address or Range of Ports.

IP Range End - To show the configured Port Address or Range of Ports.

Enable Timeout - To enable/disable Timeout.

Start Date - The respective firewall rule effect will start from this date. Start Time - The respective firewall rule effect will start from this time. End Date - The respective firewall rule effect will end from this date. End Time - The respective firewall rule effect will end from this time.

Rule - To indicate the current setting of the listed Port or Range of Port rules (Allow or Block) status.

Delete - To delete the selected slot.

Procedures

1. Click Settings > System Firewall > IP Address Firewall Rules > Add New IP Rule to add a new IP or range of IP address.

103

2. In the Add new rule for IP page, Enter the IP address and a range of IP addresses in the IP Single or IP Range Start field.

Note: IP Address will support IPv4 Address format only:

IPv4 Address made of 4 numbers separated by dots as in xxx.xxx.xxx.xxx. Each number ranges from 0 to 255.

First number must not be 0.

IPv6 Address made of 8 groups of 4 Hexadecimal digits separated by colon as in xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx.

3. Enter IP range end value in the IP Range End field.

4. Enable Timeout to enable firewall rules with timeout.

5. Enter Start Date to start the respective firewall rule effect from this date.

6. Enter End Date to end the respective firewall rule effect from this date.

7. Enter Start Time to start the respective firewall rule effect from this time.

8. Enter End Time to end the respective firewall rule effect from this time.

Note: The date and time should be in the YYYY/MM/DD and hh-mm format respectively.

9. Determine the rule to block or accept.

10. Click Save to save the changes made.

104

Port Firewall Rules

Click Port Firewall Rules page. A sample screenshot of Port Firewall Rules page is shown below.

The fields of Port Firewall Rules tab are explained below.

To view Existing Port Rules

Click Settings > System Firewall > Port Firewall Rules > Existing Port Rules . A blank page will be opened if you did not add anything in “Add New port Rule”.

If any rule is added, then the added rule will be listed in “Existing Port Rules” page.

A sample screenshot of Existing Port Rules is shown below.

The Existing Port Rules page allows you to remove any particular Existing Port Rules.

Procedures

1 . Select the Existing Port Rules you want to remove.

2. Click on Delete to remove the selected Existing Port Rules.

105

The fields of System Firewall - Existing Port Rules page are explained below.

Port Single (or) Range Start - To configure the Port or Range of Port Addresses.

Port Range End - To configure the Port or Range of Port Addresses.

Protocol - This field specifies the protocols for the configured Port or Port Ranges.

Network Type - This field specifies the affected network type for the particular Port or Port Ranges.

Enable Timeout - To enable or disable firewall rules with timeout. Start Date - The respective firewall rule effect will start from this time. Start Time - The respective firewall rule will start from this time.

End Date - The respective firewall rule effect will end on this date.

End Time - The respective firewall rule will end at this time.

Rule - To indicate Allow or Block status.

Delete - To delete the entry to the firewall rules list.

Procedure to add Port/Range of ports

1. To add a new range of Port address, click the Add button

2. In the Add new rule for Port window, enter the port number or a range of port numbers in the Port Single (or) Range Start field.

3. Enter the end value in the Port Range End field.

4. Select the Protocol to be either TCP or UDP or Bot.

5. Select the Network Type . It may be IPv4 or IPv6 or Both.

6. Select Timeout to enable or disable firewall rules with timeout.

7. Enter Start Time to start the respective firewall rule effect from this time.

8. Enter Start Date to start the respective firewall rule effect from this date.

9. Enter End Date to end the respective firewall rule effect on this date.

10. Enter End Time to end the respective firewall rule effect at this time.

Note: The time should be in the YYYY/MM/DD:hh-mm format.

11. Select the Rule to determine the rule to Block or Allow.

12. Click Save to save the changes made.

106

30.9.13 User Management

In BMC Web GUI, the User Management page allows you to view the current list of user slots for the server. You can add a new user and modify or delete the existing users.

To open User Management page, click Settings > User Management from the menu bar. A sample screenshot of User Management page is shown below.

Click user icon ( ) and select any free slot to add a new user from the User Management main page.

Note: The Free slots are shown as “Disabled” in all columns for the slot.

The fields of User Management page are explained below.

User ID : Displays the ID number of the user.

Note: The list contains a maximum often users only.

User Name : Displays the name of the user.

User Access : To enable or disable the access privilege of the user.

Network Privilege : Displays the network access privilege of the user.

SNMP Status : Displays if the SNMP status for the user is enabled or Disabled.

E-mail ID : Displays e-mail address of the user.

Add User : To add a new user.

Delete User : To delete an existing user.

107

Procedure to add a new User

1. To add a new user, select a free section and click on the empty section. This opens the Add User screen as shown in the screenshot below.

2. Enter the name of the user in the User Name field.

Note: User Name is a string of l to 16 alpha-numeric characters. It must start with an alphabetical character. It is case-sensitive.

Special characters ‘ ’(hyphen), ‘_’(underscore), ‘@’(at sign) are allowed. For 20 Bytes password, LAN session will not be established.

3. Set Password Size for the new password.

4. In the Password and Confirm Password fields, enter and confirm your new password.

Note: Password should be the combination of alphabets, numbers, symbol and upper case characters.

Blank space is not allowed. This field will not allow more than 16/20 characters based on Password size field value. This field will not allow the below mentioned characters.

The password should be a string, if you try to set password using “ipmitool user set password”.

1A

1B

1C

18

19

19

1D

1E

1F

20

7F

15

16

17

12

13

14

0E

0F

10

11

07

08

09

0A

0B

0C

0D

04

05

06

00

01

02

03

Hex

NUL ‘ \ 0’

SOH (start of heading)

STX (start of text)

ETX (end of text)

Char

EOT (end of transmission.)

ENQ (enquiry)

ACK (acknowledge)

BEL ‘ \ a’ (bell)

BS ‘ \ b’ (backspace)

HT ‘ \ t’ (horizontal lab)

LF ‘ \n' (new Line)

VT ‘ \ v’ (vertical tab)

FF ‘ \f ’ (form feed)

CR ‘ \r ’ (carriage ret)

SO (shift out)

SI (shift in)

DLE (data link escape)

DC1 (device control 1 )

IDC2 (device control 2)

DG3 (device control 3)

DC4 (device control 4)

NAK (negative ack.)

SYN (synchronous idle)

ETB (end of trans. blk)

CAN (cancel)

EM (end of medium)

EM (end of medium)

SUB (substitute)

ESC (escape)

FS (file separator)

GS (group separator)

RS (record separator)

US (unit separator)

SPACE

DEL

108

5 . Enable or Disable the Enable User Access Privilege.

Note: Enabling User Access will intern assign the IPMI messaging privilege to user. It is recommended that the IPMI messaging option should be enabled for the user to enable the User Access option, while creating User through IPMI.

6. In the Network Privilege and Serial Previlege fields, select the privileges assigned to the user which could be Administrator, Operator, User, OEM or None.

7. Check KVM Access to assign the KVM privilege for the user.

8. Check VMedia Access assign the VMedia privilege for the user.

Note: It is recommended that the privileges support to KVM and VMedia should be provided only to the ADMIN user and shouldn't be provided to USER and OPERATOR privilege level users. The Admin user can provide the privilege support to USER and OPERATOR privilege level users at their own risk.

VMedia Privilege only restricts initiating / starting media redirection. If a device is already being redirected and attached to the host, then in host it will be visible as normal device. Hence, it will be accessible to all the KVM sessions, which includes ‘KVM Privilege only’ sessions as well.

9. Check the SNMP Access check box to enable SNMP access for the user.

Note: Password field is mandatory, if SNMP Status is enabled.

10. Choose the SNMP Access level option for user from the SNMP Access level (SHA or MD5) drop-down list. Either it can be Read Only or Read Write.

11. Choose the SNMP Authentication Protocol (SHA or MD5) to use for SNMP settings from the drop down list.

Note: Password field is mandatory, if Authentication protocol is changed.

12. Choose the Encryption algorithm to use for SNMP settings from the SNMP Privacy protocol (AES or DES) drop-down list.

13. In the Email ID field, enter the email ID of the user. If the user forgets the password, the new password will be mailed to the configured email address.

Note: SMTP Server must be configured to send emails.

Email Format : Two types of formats are available:

• AMI-Format : The subject of this mail format is ‘Alert from (your Host name)’.

The mail content shows sensor information, ex: Sensor type and Description.

• Fixed-Subject Format : This format displays the message according to user's setting. You must set the subject and message for email alert.

14. In the Upload SSH Key field, click Browse and select the SSH key file.

Note: SSH key file should be of pub type.

15. Click Save to save the new user and return to the users list.

109

To Modify User

1. To modify the existing user, click on the active user tab. This opens a User screen as shown in the screenshot below.

2. Check Change Password , if you wish to change the existing Password.

3. Follow the steps (3 to 15) of Procedure to add a new User.

4. Click Save to save the changes and return to the users list.

5. Click Delete to delete the user.

110

30.9.14. Video Recording

The Video Recording consists of the following:

1. Auto Video Settings

• Video Trigger Settings

• Video Remote Storage

• Pre-Event Video Recordings

2. SOL Settings

• SOL Trigger Settings

• SOL Video Remote Storage

• SOL Recorded Video

3. JAVA SOL

A sample screenshot of the Video Recording is given below.

A detailed description of the menu items are given below.

Auto Video Settings

The Auto Video Settings page allows you to configure the events that will trigger auto video recording function of the KVM server and view the current list of user slots for the server. You can add a new user and modify or delete the existing users.

This page is used to configure the events that will trigger auto video recording function of the KVM server.

To triggers for Auto Video Recording, click Video Recording > Auto Video Settings > Video Trigger Settings from the menu bar. A sample screenshot of Video Trigger Settings page is shown below.

111

Video Trigger Settings

Event List : It shows the list of available events to be configured. The events are mentioned below.

• Critical Events (Temperature/Voltage)

• Non Critical Events (Temperature/Voltage)

• Non Recoverable Events (Temperature/Voltage)

• Fan state changed Events

• Watchdog Timer Events

• Chassis Power on Events

• Chassis Power off Events

• Chassis Reset Events

• LPC Reset Events

• Date and Time Event

• Pre-Event Video Recording

• Pre -crash

• Pre -reset

Save : To save the current changes.

Procedure

1. Check the events to be enabled.

2. To set particular Date and Time Event, check the option Date and Time Event.

a) Choose the month, day and year from the Date field b) Enter/Choose the Time in hh:mm format in the respective fields.

Note: KVM service should be enabled to perform auto-video recording. The date and time should be in advance to the system date and time.

3. Click Pre-Event Video Recording to edit the Pre-Event video recording configurations.

A sample screenshot of Pre-Event Video Recordings page is shown as below.

112

a) To set video quality, select ranges (very low, low, high, average and normal) from Video Quality drop-down list.

b) To set compression mode, select modes (high, normal, low, no) from Compression Mode drop-down list.

c) To set number of frames per second, select frames/sec (1-4) from Frames Per Second drop-down list.

d) To set duration of video, select second (10-60) from Video Duration drop-down list. e) Click Save to save the changes made on the Pre-Event Video Recording.

4. Select Crash Reset either Pre-crash or Pre-reset.

5. Click Save to save the changes.

Video Remote Storage

To Video Remote Storage capture host video before critical event like crash or reset occurs, click

Video Recording > Auto Video Settings > Video Remote Storage . A Sample screenshot of Video Remote Storage is as shown below.

1. Check Record Video to Remote Server to enable the Remote Video Support.

Note: By default, video files will be stored in local path of BMC. If remote video support is enabled, then the video files will be stored only in remote path, not within BMC.

2. Enter Maximum Duration (Sec) of the video.

3. Enter Maximum Size (MB) of the video.

4. Enter Maximum Dumps of the video.

Note: The Maximum Duration of the video should be in the range from 1 to 3600 seconds. The Maximum Size of the video should be in the range from 1 to 500 mb. The

Maximum Dumps should be in the range from 1 to 100. The recorded video file should meet either the size constraint or duration constraint, according to the configured settings, depending on which constraint is met first.

5. Enter the Server Address.

Server address will support the following: IP Address (Both IPv4 and IPv6 format). FQDN (Fully qualified domain name) format.

6. Enter the source path in Path in Server field

7. Select the Share Type (NFS/CIFS). If the selected share type is (CIFS), enter the User

Name, Password and Domain Name in the respective fields.

113

8. Click Save to save the settings.

Pre-Event

Pre-Event video recording files will be named as per event captured. For example - if any video is recorded for Crash Event, the recorded file will be named as pre_crash_video_x.dat

, where x is file count, similarly if it is recorded for reset event it will be named as pre_reset_video_x.dat.

Post-Event

Post-Event video recording files will be named as shown below. video_dump_<Hostname>_%Y%m%dT%H%M%S.dat.

File Count and Duration for Pre and Post Event Recordings are as shown in the below table:

Auto Video Recording (Post

Event)

Pre-Event Video Recording(only for

Crash/reset event)

Time Limits

Video File Count

20 secon ds or 5.5M B vid eo allowed if

Local Storage.

D e f a u l t - 1 0 s e c , b u t c a n b e configurable up to 60sec.

300 seconds recording allowed if

Remote Storage (Remote Path).

Local Storage: 2 (After 2, if video recording 1 if local storage/3 if remote storage. (Once starts, the oldest video file among the two files will be replaced with the new video)

Max file count reached, will Delete Old video file to store new file.)

Remot e S torag e : ma x imu m configured dump value of video files for Remote Storage.

SOL Settings

To open SOL Set page, click Settings > Video Recording > SOL Settings from the menu bar. A sample screenshot of SOL Settings page is shown below.

The SOL Settings consists of three fields:

• SOL Trigger Settings

• SOL Video Remote Storage

• SOL Recorded Video

SOL Trigger Settings

Event List : It shows the list of available events to be configured. The events are shown below.

• Critical Events (Temperature/Voltage)

• Non Critical Events (Temperature/Voltage)

• Non Recoverable Events (Temperature/Voltage)

• Fan state changed Events

• Watchdog Timer Events

114

• Chassis Power on Event

• Chassis Power off Event

• Chassis Reset Events

• LPC Reset Events

• Date and Time Events

Save : To save the current changes.

A sample screenshot of SOL Trigger Settings page is shown as below.

Procedure

1. Check the events to be enabled to configure which event on the page will trigger the SOL video recording option to start.

2. To set particular Date and Time Event, check the option Date and Time Event . a) Choose the month, day and year from the Date field b) Enter the Time in hh:mm:ss format in the respective fields.

Note: The date and time should be in advance to the system date and time.

3. Click Save to save the changes.

SOL Video Remote Storage

This page allows you to configure recorded video files. The sample screenshot and various fields of SOL Video Remote Storage are given below.

115

Procedure for SOL Video Remote Storage:

1. Click SOL Video Remote Storage.

2. Enter Log Size (KB). The value will support maximum length of 10 digits.

3. Enter Log File Count. The default number of Log files count ranges from 1 to 10.

SOL Recorded Video

This page displays the list of available recorded video files on the system. Click on Download icon to download and save the video. Click on Delete icon to delete the selected video. A sample screenshot of SOL Recorded Video is given below.

JAVA SOL

This page allows you to download JAVA SOL. A sample screenshot of JAVA SOL is given below.

Note: A compatible JRE must be installed in the system prior to the launch of JNLP file.

116

30.9.15. Fan Policy

The Fan Policy consists of the following:

1. Add New Fan Profile

A sample screenshot of the Fan Profile is given below.

Procedure to add Fan Profile

To add fan profile:

117

1. Name the the profile

2. Select the Algorithm . Choose the mapping function of temperature and fan speed at this policy.

3. Select Sensor Type , current or temperature.

4. Set the Initialize Type .

5. Select the reference device sensor.

6. Select the controlled fan.

7. Click New to a new policy reference table

8. Set reference temperature and fan speed duty

9. Click Save to save the configuration.

10. Click arrow icon to run the fan profile.

118

30.9.16. Power Consumption

The Power Consumption is a simple display page for basic power consumption reading information. Item on this page are non-configurable.

119

30.10. Remote Control

The system and browser requirements for Remote Control are given below.

System Requirements

• Client machine with 8GB RAM.

• If the client machine has 4GB RAM, there will be lag in Video/keyboard/mouse functionality.

Supported Browsers

• Chrome latest version.

• IE 11 and above.

• Firefox (with limited support).

Note: It is advisable to use Chrome or IE for H5Viewer, since Firefox has its own memory limitations.

To open Remote Control page, click Remote Control from the menu bar. A sample screenshot of the Remote Control page is shown below.

A detailed description of the menu items are given on the next page.

Open the Remote Control page, click Launch KVM. A sample screenshot of the Remote KVM page is shown below.

Click Launch KVM to open the Remote Control KVM page.

Stop KVM : Stops the H5Viewer video redirection.

Video Record : This menu contains the following sub menu items:

• Record Video : This option is to start recording the screen.

• Stop Recording : This option is used to stop the recording.

Record Settings : This option is used to set Video Recording Duration.

120

Note: The Maximum video file size allowed is around 40MB. If the video file size reaches its max size limit, the recorded file is downloaded and recording will be in progress until the configured video recording time is reached. The video file is saved as video_date- month-year_hr-min-sec_partno in client side video recording.

Users have to take care of saving the video files in different browsers.

When H5viewer focus is lost and if video recording is in progress, the recording will be stopped with a notification message and the recorded video file will be discarded. Due to browser limitation, Set timeout/set interval will be delayed from specified time of interval when browser window loses focus, Hence, video server will not send the video packets to H5viewer and so the video recording will be stopped.

Note: Windows 2016 installation takes 1 hour and 52 minutes to install on Ironman through the BMC ISO redirection.

Send Keys : This option is used to key items.

This menu contains the following sub menu items:

• Hold Down

• Press and Release

Hold Down

This menu contains the following sub menu items:

Right Ctrl Key : This menu item can be used to act as the right-side <CTRL> key when in Console Redirection.

Right Alt Key : This menu item can be used to act as the right-side <ALT> key when in Console Redirection.

Right Windows Key : This menu item can be used to act as the right-side <WIN> key when in Console Redirection.

Left Ctrl Key : This menu item can be used to act as the left-side <CTRL> key when in Console Redirection.

Left Alt Key : This menu item can be used to act as the left-side <ALT> key when in Console Redirection.

Left Windows Key : This menu item can be used to act as the left-side <WIN> key when in Console Redirection. You can also decide how the key should be pressed: Hold Down or Press and Release.

Press and Release

Ctrl+Alt+Del : This menu item can be used to act as if you depressed the <CTRL>, <ALT> and <DEL> keys down simultaneously on the server that you are redirecting.

Left Windows Key : This menu item can be used to act as the left-side <WIN> key when in Console Redirection. You can also decide how the key should be pressed: Hold Down or Press and Release.

Right Windows Key : This menu item can be used to act as the right-side <WIN> key when in Console Redirection.

Context Menu Key : This menu item can be used to act as the context menu key, when in Console Redirection.

Print Screen Key : This menu item can be used to act as the print screen key, when in Console Redirection.

Hot Keys : This menu is used to add the user configurable shortcut keys to invoke in the host machine. The configured key events are saved in the BMC.

This menu contains the following sub menu items:

• Add Hot Keys - This menu is used to enable macros. Click Add to macros.

Browse File : Used to select the CD image file to be redirected to the host.

Start Media : Redirects the selected CD image file to the host.

Stop Media : Stops the CD media redirected to the host.

Procedure To Start KVM

1. Click Start KVM to start the H5Viewer video redirection. A sample screenshot is as shown below.

121

2. Click Browse to select CD Image.

3. Click Start Media to redirect the selected CD image file to the Host. A sample screenshot is as shown below.

4. To stop the CD Image redirection, click Stop Media.

Settings

Keyboard Layout

List of Host Physical Keyboard languages supported in SPX H5Viewer.

• English U.S

• German

• Japanese

Video

This menu contains the following sub menu items:

Pause Video : This option is used for pausing Console Redirection.

Resume Video : This option is used to resume the Console Redirection when the session is paused.

Refresh Video : This option can be used to update the display shown in the Console Redirection window.

Host Display

Display on : If you disable this option, the display will be shown on the screen in Console

Redirection

Display off : If you enable this option, the server display will be blank but you can view the screen in Console Redirection. If you disable this option, the display will be back in the server screen. Capture Screen : This option helps to take the screenshot of the host screen and save it in the client ’ s system.

Mouse

Show Client Cursor : This menu item can be used to show or hide the local mouse cursor on the remote client system.

Mouse Mode : This option handles mouse emulation from local window to remote screen using either of the two methods. Only ‘Administrato r ’ has the right to configure this option.

• Absolute mouse mode : The absolute position of the local mouse is sent to the server if this option is selected.

• Relative mouse mode : The Relative mode sends the calculated relative mouse position displacement to the server if this option is selected.

122

• Other mouse mode : This mouse mode sets the client cursor in the middle of the client system and will send the deviation to the host. This mouse mode is specific for

SUSE Linux installation.

Note: Client cursor will be hidden always. If you want to enable, use Alt + C to access the menu.

Options

The Bandwidth Usage option allows you to adjust the bandwidth. You can select one of the following options:

Block Privilege Request : To enable or disable the access privilege of the user. Keyboard/Mouse Encryption : This option allows you to encrypt keyboard inputs and mouse movements sent between the connections.

0 Best Quality - 7 : This option allows you to adjust the screen resolution.

Power

The power options are to perform any power cycle operation. Click on the required option to perform the following operation:

Reset Server : To reboot the system without powering off (warm boot).

Immediate Shutdown : To perform Power OFF Immediately. Orderly Shutdown : To Power OFF the server in proper order. Power ON Server : To Power ON the server.

Active Users

Click this option to display the active users and their system ip address.

Active KVM Session can be terminated when there are multiple KVM Session from Master [FULL Privilege KVM Session].

Help

Click this option to get more information About H5Viewer. The KVM Remote Console utility version and plugin version will be displayed.

Zoom 100%

Displays the zoom percentage. Users can click Options from the menu bar and then select Zoom

In or Zoom Out to adjust the zoom percentage.

Power ON/OFF

Click this option to Power ON/OFF the server.

123

30.11. Images Redirection

This page is used to configure the images into BMC for redirection. This can be done either by uploading an image into BMC say, Local Media or by mounting the image from the remote system, Remote Media .

To open Images Redirection page, click I mages Redirection from the menu bar. A sample screenshot of Images Redirection page is shown below.

The fields of Images Redirection page are explained below.

• Local Images

• Remote Images

Note: VMedia Privilege only restricts initiating / starting media redirection. If a device is already being redirected and attached to the host, then in host it will be visible as normal device. Hence it will be accessible to all the KVM sessions. Which inclu des ‘KVM Privilege only' sessions as well.

30.11.1. Remote Media

The displayed table shows configured images on BMC. You can configure images of remote media server.

Note: More than one image can be configured for each image type. At maximum 4 images can be configurable. To configure the image, you need to enable Remote

Media support under Settings->Media Redirection - > General Settings . To start/stop redirection and to delete an image, you must have Administrator Privileges. Free slots are denoted by “~”

The fields of Remote Media tab are as follows:

Media Type : Displays type of Media such as CD/DVD, Floppy and Harddisk.

Media Instance : Displays total media instance count.

Image Name : Displays the default recovery image name on the server.

Status : Displays the status of the media.

Session Index : Displays Media Server Session Index. Start/Stop Redirection : To start or stop Media redirection Pause : To pause the Media redirection.

124

Refresh Image List : To get latest Image lists from the Remote Storage.

Procedure

1. To Start/Stop Redirection and configure remote media images, click (Start/Stop icon) and make sure Remote Media Support option is enabled.

Note: The Start Redirection button is active only for VMedia enabled users.

2. Select a configured slot and click (Start/Stop icon) to start the remote media redirection.

It is a toggle button, if the image is successfully redirected, then click (Start/Stop icon) to stop the remote media redirection.

Note: Redirection needs to be stopped to clear the image.

125

30.12. Power Control

This page allows you to view and control the power of your server.

To open Power Control, click Power Control from the menu bar. A sample screenshot of Power Control is shown below.

The various options of Power Control are given below. Power Off : To immediately power off the server. Power On : To power on the server.

Power Cycle : This option will first power off, and then reboot the system (cold boot).

Hard Reset : This option will reboot the system without powering off (warm boot).

ACPI Shutdown : This option to initiate operating system shutdown prior to the shutdown.

Perform Action : Click this option to perform the selected operation.

Procedure

Select an action and click Perform Action to proceed with the selected action.

Note: During Execution you will be asked to confirm your choice. Upon confirmation, you will be informed about the status after few minutes.

Note: It is advisable to use Chrome or IE for H5Viewer, since Firefox has its own memory limitations.

126

30.13. Maintenance

This group of pages allows you to do maintenance tasks on the device. The menu contains the following items:

• Backup Configuration

• Firmware Image Location

• Firmware Information

• Firmware Update

• HPM Firmware Update

• Preserve Configuration

• Restore Configuration

• Restore Factory Defaults

• System Administrator

A sample screenshot of Maintenance is shown below. A detailed description is given below.

127

30.13.1. Backup Configuration

This page allows you to select the specific configuration items to be backed up in case of “Backup Configuration”.

To open Backup Configuration page, click Maintenance > Backup Configuration from the menu bar. A sample screenshot of Backup Configuration page is shown below.

The various fields of Backup Configuration page are given below.

Check All - To select all the configuration list.

Download Config - To download and save the configuration files backup from BMC to client system.

Procedure

1. Click Check All to backup the selected configuration items. The Backup Configuration page will appear as shown above screenshot.

2. Click Download Config to save the backup file to the client system.

3. Cick OK to perform the backup action. The Backup file will be saved in the client system.

4. Click Cancel to cancel the backup process.

TFTP server configuration

The TFTP server configuration is used for exporting the backup file.

Note: Ensure that no other TFTP servers are enabled, if so remove all other servers with all configuration files. Login as “super” user means “root” use r.

Procedure to make the default tftp server

1. Install the application which is needed.

>apt-get install xinetd tftp tftpd

2. Edit the configuration file for TFTP.

>vi /etc/xinetd.d/tftp

Edit the file as below: service tftp

{ protocol = udp port = 69 socket_type = dgram wait = yes user = nobody server = /usr/sbin/in.tftpd

server_args = <DIR to which the file to be access> disable = no

}

#EOF

#example:server_args = /tftpboot

Note: No arguments to be passed to the server_args other than directory.

128

######################################

>vi /etc/xinetd.conf

Add to the file: defaults

{

# Please note that you need a log_type line to use log_on_success and log_on_failure. The default is the following:

# log_type = SYSLOG daemon info

} includedir /etc/xinetd.d

>vi /etc/inetd.conf

ftp stream tcp nowait root /usr/sbin/tcpd /usr/sbin/ in.ftpd

tftp dgram udp wait nobody /usr/sbin/tcpd /usr/sbin/ in.tftpd <DIR>

3. Restart the server.

>/etc/init.d/xinetd restart

4. Give permission to the file to access by all.

>mkdir <DIR>

>chmod -R 777 <DIR>

>chown -R nobody <DIR>

For Example: mkdir /tftpboot chmod -R 777 /tftpboot chown -R nobody /tftpboot

5. To receive the file you have to touch the file and give permission to access by all users

> touch <DIR>/conf.bak

> chmod 777 <DIR>/conf.bak

6. Even after all this step has been done and still facing error of timeout: a) Check with /etc/xinetd.d/tftp file and uncomment the EOF (Remove the ‘#’ before the EOF alone). b) Restart the server.

30.13.2. Firmware Image Location

This page is used to configure firmware image into the BMC.

To open Firmware Image Location , click Maintenance > Firmware Image Location from the menu bar. A sample screenshot of Firmware Image Location page is shown below.

The various options of Image Transfer Protocol are given below.

Image Location Type : Type of location to transfer the firmware image into the BMC either Web

Upload during Flash or TFTP Server.

129

TFTP Server Address : Address of the server where the firmware image is stored.

Note: The Server supports both IPv4 and IPv6 addresses

IP Address made of 4 numbers separated by dots as in “xxx.xxx.xxx.xxx”. Each number ranges from 0 to 255. First number must not be 0. IPv6 Address made of 8 groups of 4

Hexadecimal digits separated by c olon as in “xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx.” Hexadecimal digits are expressed as lower -case letters.

TFTP Image Name : Full Source path with filename of the firmware image is stored on TFTP Server.

TFTP Retry Count : Number of times to be retried in case a transfer failure occurs. Retry count ranges from 0 to 255.

Save : To save the configured settings.

Procedure

1. Select the Image Location Type (Web Upload during flash/ TFTP Server) .

2. If the protocol selected is TFTP, enter the IP address of the server in the TFTP Server

Address field.

3. Enter the TFTP Image Name in the given field

4. Enter the TFTP Retry Count value.

5. Click Save to save the changes.

30.13.3. Firmware Update

This wizard takes you through the process of firmware upgradation. A reset of the box will automatically follow if the upgrade is completed or cancelled. An option to

Preserve All Configuration is available. Enable it, if you wish to preserve configured settings through the upgrade.

Warning: Please note that after entering update mode widgets, other web pages and services will not work. All open widgets will be closed automatically. If upgrade process is cancelled in the middle of the wizard, the device will be reset.

Note: T he firmware upgrade process is a crucial operation. Make sure that the chances of a power or connectivity loss are minimal when performing this operation. Once you enter into Update Mode and choose to cancel the firmware flash operation, the BMC must be reset. This means that you must close the Internet browser and log back onto the BMC before you can perform any other types of operations. Once Firmware upgrade using web is started, the regular IPMI command will not be allowed for safety concern if Enable IPMI Command handling during flashing support is disabled in project configuration.

To configure, choose ‘ Firmware Image Location ’ under Maintenance. To open Firmware Update page, click Maintenance > Firmware Update from the menu bar.

A sample screenshot of Firmware Update page is shown below.

130

The various fields of Firmware Update are as follows:

• Preserve all Configuration : To preserve all configuration.

• New signimage Public Key : To select the signimage Public Key to be uploaded.

• Edit Preserve Configuration : To modify the Preserve status settings.

• Select Firmware Image : To select the Firmware image to be uploaded.

• Start Firmware Update : To start the Firmware Update.

This wizard takes you through the process of AMI based firmware upgradation. The protocol information to be used for firmware image transfer during this update is as follows:

Note: All configuration items will be preserved/overwrite as default during the restore configuration operation.

Procedure

1. Click Preserve all Configuration to preserve all configuration.

2. Click Browse to select firmware image. The Firmware update undergoes the following steps: a) Closing all active client requests b) Preparing Device for Firmware Upgrade c) Uploading Firmware Image

131

Note: A file upload pop-up will be displayed for http/https but in the case of tftp files, the file is automatically uploaded displaying the status of upload.

d) Browse and select the Firmware image to flash and click Upload .

e) Click Start firmware update start the Firmware Update. A warning message will be prompted you to proceed further.

f) Click OK to start the Firmware Update. The sample screenshot is shown below g) Verifying Firmware Image

If flashing is required for all images, please select the following checkbox:

If only few module versions are different, those modules will be flashed.

Note: Only selected sections of the firmware will be updated. Other sections are skipped. Before starting flash operation, you are advised to verify the compatibility between image sections.

132

h) Flashing Firmware Image.

i) Resetting the image. The sample screenshot of Firmware update is as shown below.

Note: The Firmware Update page will be disabled and you will not be able to perform any other tasks until firmware upgrade is completed and the device is rebooted. You can now follow the instructions presented in the subsequent pages to successfully update the card's firmware. The device will reset if update is canceled. The device will also reset upon successful completion of firmware update.

133

30.13.4. HPM Firmware Update

This page allows you to update the HPM (Hardware Platform Management) firmware.

To configure, choose ‘ HPM Firmware Image Location ’ under Maintenance . To open HPM Firmware Update page, click Maintenance > HPM Firmware Update from the menu bar.

A sample screenshot of HPM Firmware Update page is shown below.

The various fields of HPM Firmware Update are as follows:

• New signimage Public Key: To select the signimage Public Key to be uploaded.

• Select Firmware Image : To select the Firmware image to be uploaded.

• Start Firmware Update : To start the Firmware Update.

This wizard takes you through the process of AMI based firmware upgradation. The protocol information to be used for firmware image transfer during this update is as follows:

Procedure

Note: All configuration items will be preserved/overwrite as default during the restore configuration operation.

1. Click Preserve all Configuration to preserve all configuration.

2. Click Browse to select firmware image. The Firmware update undergoes the following steps: a) Closing all active client requests b) Preparing Device for Firmware Upgrade c) Uploading Firmware Image

Note: A file upload pop-up will be displayed for http/https but in the case of tftp files, the file is automatically uploaded displaying the status of upload.

d) Browse and select the Firmware image to flash and click Upload .

e) Click Start firmware update start the Firmware Update. A warning message will be prompted you to proceed further.

f) Click OK t o start the Firmware Update. The sample screenshot is shown below.

g) Verifying Firmware Image.

If flashing is required for all images, please select the following checkbox:

134

If only few module versions are different, those modules will be flashed.

Note: Only selected sections of the firmware will be updated. Other sections are skipped. Before starting flash operation, you are advised to verify the compatibility between image sections. h) Flashing Firmware Image.

i) Resetting the image. The sample screenshot of Firmware update is as shown below.

Note: The HPM Firmware Update page will be disabled and you will not be able to perform any other tasks until firmware upgrade is completed and the device is rebooted. You can now follow the instructions presented in the subsequent pages to successfully update the card's firmware. The device will reset if update is canceled. The device will also reset upon successful completion of firmware update.

135

30.13.5. Firmware Information

This wizard takes you through the process of firmware upgradation. A reset of the box will This page is used to configure the Firmware Information settings.

To open System Administrator page, click Maintenance > Firmware Information from the menu bar. A sample screenshot of Firmware Information page is shown below.

The various fields of Firmware Information page are given below.

BMC Firmware Information :

Build Date : Describes the Build Date of the active BMC image.

Build Time : Describes the Build Time of the active BMC image.

Firmware version : Describes the Firmware version of the active BMC image.

BIOS Firmware Information :

Product Manufacturer : Describes the hardware manufacturer.

Product Name : Describes the model name of the device.

Build Date : Describes the Build Date of the device.

Firmware version : Describes the BIOS version of the device.

CPLD Firmware Information :

Firmware version : Describes the CPLD Firmware version.

136

30.13.6. Preserve Configuration

This page allows the user to configure the preserve configuration items, which will be used by the Restore factory defaults to preserve the existing configuration without overwriting with defaults/ Firmware Upgrade configuration, To open Preserve Configuration page, click Maintenance > Preserve Configuration from the menu bar. A sample screenshot of

Preserve Configuration page is shown below.

The various fields of Preserve Configuration are as follows:

Click here to go to Firmware Update or Restore Configuration : This link will redirect to the Firmware Update or Restore Configuration page which needs to be preserved.

Check All : To check the entire configuration list.

Save : To save the current changes.

Note: This configuration is used by Restore Factory Defaults process.

Files Preserved

SDR

Following files will be preserved:

SDR.dat

: This file contains the sensor data record information that is used in IPMI.

Dependency Configurations - NIL

FRU

Following files will be preserved:

FRU.bin

: This file contains the logical field replaceable unit data that are used by IPMI.

Dependency Configurations - SDR

FRU

Following files will be preserved:

FRU.bin

: This file contains the logical field replaceable unit data that are used by IPMI.

Dependency Configurations - SDR

SEL

Following files will be preserved when Delete SEL reclaim space is disabled: SEL.dat

: This file contains the system event logs that are being logged by the IPMI. Following files will be preserved when Delete SEL reclaim space is enabled: Selreclaiminfo.ini - The file contains the SEL repository information.

SEL folder - This folder contains the multiple files of event logs.

Dependency Configurations - IPMI

IPMI

The following files are preserved in IPMI configuration:

IPMI.conf

: This file contains the IPMI configurations such as SEL rep size, SDR rep size, interface specific, enable/disable, Primary/Secondary, IPMB Bus number etc.

Dependency Configurations - NIL

Network

To save network settings related with IPMI (LAN IP or DHCP configuration), select “IPMI” and “Network” options simultaneously. After restore configuration, the Network

Configuration will be preserved successfully. Following files will also be preserved: dhcp.conf

: This file is to configure the host name in the FQDN format.

dns.conf

: This file is used to configure the DNS registration method and DNS server for the particular interface, hostname: This file is used to store the Hostname of the BMC. hostname.conf

: This file is used to configure the host name creation method Manual/Automatic for the BMC.

Vlaninterfaces : This file helps to enable the vlan interface for the particular LAN interface vlansetting.conf

: This file is to store the vlan ID and Vlan priority for the particular

VLAN interface entry.

bond.conf

: This file is to enable the bond interface for the specified LAN interfaces.

Interfaces : This file is to configure the IP/IPV6 addresses for the LAN interface using static/DHCP method.

activeslave.conf

: This file is to configure the active interface for the specified bond interface. This file depends on bond.conf.

hosts : This file is used to store the host name to map the IP address.

hosts.allow

: This file contains the list of hosts that has permission to access the system hosts.deny

: This file contains the list of host that does not allow accessing the system resolv.conf

: This file is used to store the nameserver and domain name for hostname registration.

dhcp6c-script : This file is used to configure the domain name, DNS server IPv6 address and NTP address.

dhcp6c.conf

: This file is to configure the IPv6 parameters for the DHCPv6 clients.

ncsicfg.conf

: This file is to configure the NCSI related configurations.

nsupdate.conf

: This file is to configure the channel ID, package ID for the NCSI interface. phycfg.conf

: This file is to configure the link speed, duplex and MTU value for the specified interface.

dhcp.preip_4

: This file is to store the pre IPv4 address. This file will be created at runtime. dns.conf

: This file is used to configure the DNS registration method and DNS server for the particular interface.

hostname : This file is used to store the Hostname of the BMC.

hostname.conf

: This file is used to configure the host name creation method Manual/Automatic for the BMC.

Vlaninterfaces : This file helps to enable the vlan interface for the particular LAN interface vlansetting.conf

: This file is to store the vlan ID and Vlan priority for the particular

VLAN interface entry.

bond.conf

: This file is to enable the bond interface for the specified LAN interfaces.

Interfaces : This file is to configure the IP/IPV6 addresses for the LAN interface using static/DHCP method.

activeslave.conf

: This file is to configure the active interface for the specified bond interface. This file depends on bond.conf.

hosts : This file is used to store the host name to map the IP address.

hosts.allow

: This file contains the list of hosts that has permission to access the system hosts.deny

: This file contains the list of host that does not allow accessing the system resolv.conf

: This file is used to store the nameserver and domain name for hostname registration.

dhcp6c-script : This file is used to configure the domain name, DNS server IPv6 address and

NTP address.

dhcp6c.conf

: This file is to configure the IPv6 parameters for the DHCPv6 clients.

ncsicfg.conf

: This file is to configure the NCSI related configurations.

nsupdate.conf

: This file is to configure the channel ID, package ID for the NCSI interface. phycfg.conf

: This file is to configure the link speed, duplex and MTU value for the specified interface.

dhcp.preip_4

: This file is to store the pre IPv4 address. This file will be created at runtime.

NTP

Following files will be preserved: ntp.conf: This file contains the NTP dameon protocol configuration parameters such as synchronization sources, nodes and other related information ntp.stat

: This file contains the auto or manual network type protocols adjtime : This file contains the time to synchronize the system clock

Localtime : This file is the system link to the file local time or to the correct time zone in the system timezone directly.

Dependency Configurations - IPMI

SNMP

Following files will be preserved: snmp_users.conf

: This file contains the SNMP user configurations such as user name and password encryption mechanism for the specific users.

snmpcfg.conf

: This file contains the SNMP users privilege levels such as ro user and rw user.

Dependency Configurations - NIL

SSH

Following files will be preserved: sshd_config : This file contains the keyword argument pairs of configurations such as Address family, Accept Env, Allow, users, authorized key files etc.

ssh_host_dsa_key, ssh_host_rsa_key : These files contain the private parts of the host keys. ssh_host_dsa_key.pub, ssh_host_rsa_key.pub

: These files contain the public parts of the host keys.

Dependency Configurations - NIL

KVM

Following files will be preserved: vmedia.conf

: This file contains the modes of media such as cd,fd,hd and enable and disable flags for lmedia, rmedia and sd servers.

stunnel.conf

: This file contains the information about the stunnel configuration. It will also contain advisor and media server ’ s secure port if secure connection is enabled.

usermacro.conf

: This file saves the user defined macro from the jviewer.

rmedia.conf

: This file contains the image name and the remote machine information like IP address, user name, password, domain name and share type.

Dependency Configurations - NIL

Authentication

Following files will be preserved: activedir.conf

: This file contains the configurations such as sslenable, timeout, racdomain, adtype, adfilterdc1, adfilterdc2, adfilterdc3, username, password, and rolegroup information such as name domain and privileges.

openLdapGroup.conf: This file contains the oprnm ldap role group information such as name domain and privilege.

nsswitch.conf

: This file contains the sources to obtain the name service information in the range of categories and in what order pam_withunix : This file contains the PAM Order of modules such as IPMI,LDAP, RADIUS and

UNIX.

pam_wounix : This contains the PAM Order of modules such as IPMI, LDAP and RADIUS. group: This file contains the Linux group. It stores the group information or defines the user group information in Linux.

passwd : This file contains the user login information for the Linux system shadow : This file contains the encrypted password information for the clients. ldap.conf

: This file contains the ldap server configuration details such as bindn, binpw, pam_ password, nss_reconnect_tries, port, port secondary, host, host secondary.

radius.conf

: This file contains the radius server IP address, port number, secret, timeout, privilege etc.

Dependency Configurations – NIL

Syslog

System Event Log

Web

Web Settings

Extlog

Audit Log & System Log

Redish

Redfish Audit Log

Procedure

1. Click Firmware Update or Restore Configuration link to view Firmware Update or Restore Configuration page accordingly.

2. Select the required Preserve Configuration items by either choosing the items individually by selecting the appropriate check boxes or by selecting all or none using Check All .

3. Click Save to save the changes.

30.13.7. Restore Configuration

This page allows you to restore the configuration files from the client system to the BMC. To open Restore Configuration page, click Maintenance > Restore Configuration from the menu bar. A sample screenshot of Restore Configuration page is shown below.

The various fields Restore Configuration page are given below.

Config File - This option is used to select the file which was backup earlier.

Upload - To upload the backup file to restore the backup files.

Procedure for Restore Configuration:

1. Click Browse to select the configuration file that needs to be backup and used to restore the configuration, when needed.

2. Click Upload to restore the backup files. The Restore Configuration page will appear as shown below.

3. Click OK to upload the new configuration file and restore.

30.13.8. Restore Factory Defaults

In BMC Web GUI, this option is used to restore the factory defaults of the device firmware. This section lists the configuration items that will be preserved during restore factory default configuration.

Warning: Please note that after entering restore factory widgets, other web pages and services will not work. All open widgets will be closed automatically. The device will reset and reboot within few minutes.

To open Restore Factory Defaults page, click Maintenance > Restore Factory Defaults from the menu bar. A sample screenshot of Restore Factory Defaults page is shown below.

Procedure

1. Click Preserve Configuration to redirect to Preserve Configuration page, which is used to preserve the particular configuration not to be overwritten by the default configuration.

2. Click Restore Factory Defaults to restore the factory defaults of the device firmware

30.13.9. System Administrator

This page is used to configure the System Administrator settings.

To open System Administrator page, click Maintenance > System Administrator from the menu bar. A sample screenshot of System Administrator page is shown below.

The various fields of System Administrator page are given below. Username : Username of System Administrator is a read only field. Enable User Access : To enable user access for system administrator. Change Password : To change the user ’ s password.

Note: This field will not allow more than 64 characters.

Password must be at least 8 characters long and blank space is not allowed.

Save : To save the new configuration for system administrator.

Procedure

1. Check Enable User Access to enable user access for system administrator..

2. Enable Change Password option to change the user password. This action enables the password fields.

3. Enter the new password in the Password field.

4. Re-enter the password in the Confirm Password field.

5. Click Save to save the changes.

30.14. Sign Out

To log out from the Web GUI, click the admin on the top right corner of the screen. A sample screenshot of admin option is shown below.

Click Sign Out to perform log out from the Web GUI. A Warning message will be prompted you to proceed further, click OK to log out else Cancel to retain the Web GUI.

31.

Updating Bios and ME

This section provides information to update the BIOS through the BMC port. a. Insert the network cable in the dedicated BMC/IPMI Lan port. b. Turn ON the machine. c. Note down the BMC IP address detected as shown in the screenshot d. Turn off the machine. e. Go to your computer and open a browser IE or Chrome and then put the BMC IP address on the address bar (ex: [ https://172.2.2.31

]) and press enter. f. If the web page doesn’t open you need to ENABLE PRIVACY g. Click ADVANCED h. Click Proceed to (……….) unsafe.

i. Enter Username : ADMIN or admin Password : ADMIN or Password j. Click on Maintenance .

k. Click on Firmware Update i. Click on Choose File m. Browse to the appropriate Bios Folder, then Select the file Image .RBU

from your PC and press Open

n. Click Start firmware update and wait until is done 100% o. Click Start firmware update p. Click OK on the Pop-up Window.

q. The window turns grayed-out and start uploading the image file.

r. When uploading displays 100% then click on the Flash BIOS s. The Windows turns grayed-out and start flashing the BIOS.

t. Click OK on the Pop-up Window. u. Click OK again on the Pop-up Window and Wait for two minuets and open a new Web-GUI Session.

32.

Profile Loading in BIOS

This section provides information on how to upload the profile in the BIOS.

Step 1: There is no password to enter the BIOS; you will just have to hit Enter.

Step 2: In the Setup menu, select the OC Config menu and go to Save user profiles.

Step 3: Choose the desired profile. You should have a 48_18 and a 50_10 profiles. Restore it, and then press F10.

33.

Importing profile from Vmedia:

1.

From the Launch Menu, on the top right, click on Launch HTLM5vKVM Viewer

2.

Click on Activate Vmedia

3.

Select Removable Disk and click Manage

4.

Click on browse to select the profile image: HF310-G4-F05-xxxx-xx.img

5.

Click on Map Drive to mount the removable media.

6.

Boot on the UEFI Shell.

7.

Verify the disk letter for the Removable Media. In this example, it has fs3.

8. Type fs3 : (which is the number of Removable Media in this example).

9. Type update.nsh

profile_name and press Enter

10. Reboot the system, the profile will be applied and saved into the BIOS.

34.

Drivers/Tools

The drivers and tools are available on the Ciara’s website: https://ciaratech.com/support-center/

34.1 Verifying CPU Frequency for Linux

For UBUNTU and DEBIAN , you can install i7z (available in most LINUX Distribution Tree).

For RHEL and CentOS , turbostat is part of the base install.

34.2 Verifying CPU Frequency for Windows

The Hwinfo utility for Windows available on website: https://www.hwinfo.com/download/

WINDOWS Hwinfo64

advertisement

Was this manual useful for you? Yes No
Thank you for your participation!

* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project

Related manuals

Download PDF

advertisement