FILE NAME: iLO5_210.bin TITLE: iLO 5 firmware v2.10 LANGUAGE: English DIVISIONS: Systems PRODUCTS AFFECTED: HPE ProLiant BL460c Gen10 Server HPE ProLiant DL580 Gen10 Server HPE ProLiant DL560 Gen10 Server HPE ProLiant DL385 Gen10 Plus Server HPE ProLiant DL385 Gen10 Server HPE ProLiant DL380 Gen10 Server HPE ProLiant DL360 Gen10 Server HPE ProLiant DL325 Gen10 Plus Server HPE ProLiant DL325 Gen10 Server HPE ProLiant DL180 Gen10 Server HPE ProLiant DL160 Gen10 Server HPE ProLiant DL120 Gen10 Server HPE ProLiant DL20 Gen10 Server HPE ProLiant ML350 Gen10 Server HPE ProLiant ML150 Gen10 Server HPE ProLiant ML110 Gen10 Server HPE ProLiant ML30 Gen10 Server HPE ProLiant XL450 Gen10 Server HPE ProLiant XL420 Gen10 Server HPE Proliant XL270d Gen10 Server HPE ProLiant XL230k Gen10 Server HPE ProLiant XL190r Gen10 Server HPE ProLiant XL170r Gen10 Server HPE Apollo r2800 Gen10 24 SFF Flexible Configure-to-order Chassis HPE Apollo r2600 Gen10 24 SFF Premium Configure-to-order Chassis HPE Apollo r2200 Gen10 12 LFF Configure-to-order Chassis HPE Apollo 4510 Gen10 System HPE Apollo 4200 Gen10 Server HPE Synergy 660 Gen10 Compute Module HPE Synergy 480 Gen10 Compute Module THIS VERSION VALIDATED WITH: Microsoft Windows Server 2019 Microsoft Windows Server 2016 Microsoft Windows Server 2012 Microsoft Windows Server 2012 Essentials Red Hat Enterprise Linux 8 Server Red Hat Enterprise Linux 7 Server SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 VMware ESXi 6.5 VMware ESXi 6.7 PREREQUISITE: N/A BUILD DATE: October 30, 2019 EFFECTIVE DATE: November 20, 2019 DESCRIPTION: Firmware for the Hewlett Packard Enterprise Integrated Lights-Out 5 Management Controller LAST RECOMMENDED OR CRITICAL VERSION: 1.46 (for Gen10) PREVIOUS VERSION: 1.46 (for Gen10) UPGRADE REQUIREMENTS: RECOMMENDED UPGRADING FROM A PREVIOUS VERSION OF iLO - Upgrading to iLO 5 version 2.10 is supported on servers with iLO 5 1.4x or later installed. - On servers with an earlier version of iLO 5 installed, you must first install iLO 5 1.4x, and then install iLO 5 2.10. For example, if a server has iLO 5 1.10 installed, install iLO 5 1.4x, and then install iLO 5 2.10. FIRMWARE DEPENDENCY: Hewlett Packard Enterprise recommends the following or greater versions of iLO utilities for best performance: - RESTful Interface Tool (iLOREST) 3.0 - HPQLOCFG v5.2 - Lights-Out XML Scripting Sample bundle 5.20.0 or later - HPONCFG Windows 5.3.0 - HPONCFG Linux 5.5.0 or later - LOCFG v5.20.0 or later - HPLOMIG 5.2.0 NOTE: Updated utilities and system libraries are required to support the iLO HighSecurity, FIPS, and CNSA security states. KNOWN ISSUES: - To connect to the iLO Service Port with a USB Ethernet adapter, you must use a USB 2.0 device that is based on the AX88772 series chipset from ASIX Electronics Corporation. Hewlett Packard Enterprise recommends the HPE USB to Ethernet Adapter (part number Q7Y55A). - The server must be powered off when you update the Server Platform Services (SPS) Firmware or the Innovation Engine (IE) Firmware. After powering off the server, wait 30 seconds before initiating an SPS or IE firmware update. - With the release of iLO 5, some features in the iLO web interface are not supported by RIBCL or the CLI. Instead, HPE recommends the use of the iLO RESTful API, particularly for setting the iLO security state and configuring extended user privileges. The iLO RESTful API is the preferred programmatic interface for Gen10 and later systems. The preferred CLI and scripting tool is the RESTful Interface Tool (iLOREST). - Starting with iLO 5 1.20, SNMP settings are not backward compatible with older iLO firmware versions. The SNMP settings are discarded when you downgrade the firmware to an earlier version. - When you start the iLO web interface, and then you launch the HTML5 IRC, these interfaces are counted as a single iLO session. This behavior is different from the .NET IRC and the Java IRC, which are separate sessions from the iLO web interface. The Idle Connection Timeout specifies how long a session can be inactive before it ends automatically. If you start a virtual media operation (such as an OS installation), and the Idle Connection Timeout is reached, the HTML5 IRC and the iLO web interface close automatically, and the virtual media operation is interrupted. To avoid this issue, you can set the Idle Connection Timeout to a longer value, use a different remote console, or make sure that the session is not idle during the virtual media operation. - To support power usage reporting and optimum server thermal fan control on Linux servers with NVIDIA GPU option cards: Blacklist the nouveau video driver, and then load the NVIDIA GPU driver in persistent mode by entering the following command: nvidia-smi -pm 1 - On certain HPE Mellanox adapters supporting dual port personality (InfiniBand/Ethernet), the port personality of the adapter gets reset to default with adapter firmware upgrade. Please refer the following Advisory for details on the issue: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00068199en_us The advisory suggest iLO 5 v1.37 before you update your adapters, iLO 5 v1.40 would be better for moving to v2.10. FIXES: The following issues are resolved in this version: - The iLO clock incorrectly changes when iLO is reset due to a configuration change, firmware update, or a cause other than system power loss. - System GPUs might be listed without GPU version information. - Incorrect power consumption information is displayed in RIBCL output and the Active Health System Log. - If the domain name system is unavailable, an HPE ProLiant Gen10 Server might stop responding for up to three minutes during startup. SECURITY FIXES: For information about the latest security bulletins and vulnerabilities addressed in this version, see the following website: https://support.hpe.com/hpesc/public/home. Security best practices: For the latest information about security best practices, see the HPE Integrated Lights-Out Security Technology Brief at the following website: http://www.hpe.com/support/ilo-docs. ENHANCEMENTS: This version adds support for the following features and enhancements: - Added a security log that lists security events recorded by the iLO firmware. - Extended Secure Start to verify CPLD on Gen10 Plus servers. - Updated menu path and feature names for the Performance Management features. The features that were accessed through the Intelligent System Tuning menu can now be accessed through the Performance menu. - Embedded remote support over IPv6. - New alert for recovery events. - SUM/SUT support on servers using the High Security, FIPS, or CNSA security states. - Support for staging firmware to update direct-attached hard drives through the UEFI System Utilities. - Ability to import and export drive bay mapping information. - Daily firmware flash limit, to protect iLO, ROM, and CPLD from repeated flashing attacks. - Performance data logging in a new Active Health System record. - Increased the certificate size limit from 4096 to 8096. - When iLO is set to the factory default settings, Virtual NIC is enabled by default. - The following System Diagnostics features are supported on Gen10 Plus servers: - Booting to safe mode—Allows you to boot the server with a safe minimum configuration. - Booting to intelligent diagnostics mode—Allows the system to automatically diagnose a boot failure during POST. - Restoring the default manufacturing settings—Resets all BIOS configuration settings to their default manufacturing values. This process deletes all UEFI nonvolatile variables, such as boot configuration, Secure Boot security keys (if Secure Boot is enabled), and configured date and time settings. - Restoring the default system settings—Resets all BIOS configuration settings to their default values and restarts the server. This option preserves some UEFI settings. - Modified text of iLO time zone selections to match system ROM time zone selections. For backward compatibility, either previous time zone selection text or the new text can be used in APIs to set the time zone. SUPPORT: 1. iLO 5 firmware updates and utilities can be found here: https://www.hpe.com/support/iLO5 2. IPv6 network communications Supported Networking Features IPv6 Over Shared Network Port Connections IPv6 Static Address Assignment IPv6 SLAAC Address Assignment IPv6 Static Route Assignment IPv6 Static Default Gateway Entry DHCPv6 Stateful Address Assignment DHCPv6 Stateless DNS, Domain Name, and NTP Configuration Integrated Remote Console OA Single Sign-On HPE Single Sign-On Web Server SSH Server SNTP Client DDNS Client RIBCL over IPv6 SNMP AlertMail Remote Syslog WinDBG Support HPQLOCFG/HPLOMIG over an IPv6 connection URL-based Virtual Media CLI/RIBCL Key Import over IPv6 Authentication using LDAP and Kerberos over IPv6 iLO Federation IPMI Embedded remote support Networking Features not supported by IPv6 in this release NETBIOS-WINS Key managers 3. You might encounter a "data inconsistency error" when you use iLO Federation Management. This error occurs when an iLO on your network is not responding correctly. Use the data on the Multi-System map page to troubleshoot data inconsistency errors. DOCUMENTATION - 1. iLO 5 documentation is available at https://www.hpe.com/support/ilo-docs. 2. Check the online help for information about how to use iLO. To access the online help, Click the question mark icon in the upper right corner of any iLO web interface page. HOW TO USE - 1. Download the iLO 5 Online Firmware Update Component for your operating system. 2. Install the firmware using one of these options: i a) Run the component on the host to be updated. The component will update the iLO 5 firmware and reset the iLO processor. b) Extract the firmware from the component. This will place the firmware image file, iLO5_yyy.bin (where yyy represents the firmware version), in the target directory. You can use the following methods to install firmware: i) Login to iLO, navigate to the Flash Firmware page, and update the firmware from there. ii) Use the iLO RESTful API or ILOREST. For more information, see the following website: http://www.hpe.com/support/restfulinterface/docs. iii) Use the Lights-Out Configuration Utility (HPQLOCFG) and RIBCL/XML scripts to update iLO 5 across the network. iv) Use the Online Lights-Out Configuration utility (HPONCFG) and RIBCL/XML scripts to update iLO 5 from the supported host OS. 3. iLO automatically resets after a successful update. There is no need to manually reset iLO. Copyright 2002,2019 Hewlett Packard Enterprise Development, LP