HP Integrated Lights-Out

Integrated Lights-Out, or iLO, is a proprietary embedded server management technology by Hewlett Packard Enterprise which provides out-of-band management facilities. The physical connection is an Ethernet port that can be found on most ProLiant servers and microservers[1] of the 300 and above series.

iLO has similar functionality to the lights out management (LOM) technology offered by other vendors, for example, Sun/Oracle's LOM port, Dell DRAC, the IBM Remote Supervisor Adapter and Cisco CIMC.

Features

iLO makes it possible to perform activities on a Compaq, HP or HPE server from a remote location. The iLO card has a separate network connection (and its own IP address) to which one can connect via HTTPS. Possible options are:

  • Reset the server (in case the server doesn't respond anymore via the network card)
  • Power-up the server (possible to do this from a remote location, even if the server is shut down)
  • Remote system console (in some cases however an 'Advanced license' may be required for some of the utilities to work)
  • Mount remote physical CD/DVD drive or image (virtual media), depends on license.
  • Access the server's Integrated Management Log (IML)
  • Can be manipulated remotely through XML-based Remote Insight Board Command Language (RIBCL)
  • Full command-line interface support through RS-232 port (shared with system), though the inability to enter function keys prevents certain operations
  • SSH remote network access to iLO card supporting public key authentication, 1024 bit DSA key,[2][3] at least since iLO 3
  • iLO Federation[4]
  • Two factor authentication[5]
  • Remote syslog,[6] depends on license.

iLO provides some other utilities virtual power and a remote console. iLO is either embedded on the system board, or available as a PCI card.

Availability

iLO is embedded or available on some HPE ProLiant and Integrity servers.

Prior to iLO, Compaq created several other lights out management products. The original was the Remote Insight Board (RIB), which was available as an EISA or PCI expansion card. RIB was replaced with RILOE (Remote Insight Light-Out Edition), which was only available for PCI. The original RILOE was replaced with RILOE II. HP stopped manufacturing RILOE II in 2006. The final firmware version for RILOE is 2.53(A) dated 9 Mar 2004 and for RILOE II is 1.21 dated 5 July 2006.

For G7 and older ProLiant 100 series servers there is a "Lights Out 100" option, which has more limited functionality. The LO100 is a traditional IPMI BMC, and does not share hardware or firmware with iLO. ProLiant 100 series servers starting with Gen9 include iLO.

There is also a version of iLO for HP Moonshot systems referred to as iLO Chassis Management which is often abbreviated as iLO CM. The Chassis Management version of iLO was derived from iLO 4.[7] As of June 2018 the most recent Chassis Manager Firmware available is version 1.56 which was released as part of the Moonshot Component Pack 2018.02.0.[8]

Although HP included iLO functionality in the ProLiant Gen8 MicroServer, they removed it from the Gen10 version. The ProLiant MicroServer Gen10+ and Gen11 has an iLO add-on card.

Versions

There have been multiple generations of iLO, each generation noted by a single digit number ("iLO 2"). Some generations of iLO are segmented into different editions, based on what features are licensed.[9] iLO includes updatable firmware, for which HP periodically releases new versions.

Name Servers Latest Firmware
iLO[10] ProLiant G2, G3, G4, and G6 (model numbers under 300) 1.96 released 30 April 2014[11]
iLO 2[12] ProLiant G4, G5, and G6 (model numbers 300 and higher) 2.33 released 30 March 2018[13]
iLO 3[14] ProLiant G7 1.94 released 17 December 2020[15]
iLO 4[16] ProLiant Gen8 and Gen9 2.82 released 2 March 2023[17]
iLO 5[18] ProLiant Gen10 and Gen10 Plus[19] 3.08 released 17 September 2024[20]
iLO 6[21] ProLiant Gen11 1.63 released 17 September 2024[22]

Programming Interfaces

Several tools or APIs exist for interacting with HPE iLO:

iLO 4 introduced a HTTP API to manage the functionality.

This served as the inspiration for the Redfish standard developed by the DMTF, which is implemented in iLO 5. It can be managed in an industry standard way, by all Redfish compatible tools. However, since Redfish allows the vendors to add custom functionality to their Redfish API, HPE forked the DMTF's tools and included additional functionality.

Security issues

In December 2021 Iranian researchers at Amnpardaz security firm have discovered rootkits in HPE's iLO (Integrated Lights-Out) management modules.[28][29]

See also

References

  1. ^ "HPE ProLiant MicroServer Generation 8 (Gen8)" (PDF). Hewlett Packard Enterprise. 23 October 2017. Retrieved 31 October 2017.
  2. ^ "Document Display | HPE Support Center". Support.hpe.com. Retrieved 2020-10-14.
  3. ^ "Document Display | HPE Support Center". Support.hpe.com. Retrieved 2020-10-14.
  4. ^ "HPPSocialUserSignonPage - Hewlett Packard Enterprise Community". Community.hpe.com. Retrieved 2020-10-14.
  5. ^ "Document Display | HPE Support Center". Support.hpe.com. Retrieved 2020-10-14.
  6. ^ "Document Display | HPE Support Center". Support.hpe.com. Retrieved 2020-10-14.
  7. ^ "The difference between HPE Moonshot iLO Chassis Management Firmware and HPE iLO 4". H17007.www1.hpe.com. Archived from the original on 2019-08-25. Retrieved 2020-10-14.
  8. ^ "Document Display | HPE Support Center". Support.hpe.com. Retrieved 2020-10-14.
  9. ^ "HP Integrated Lights-Out (iLO) features comparison". HP ProLiant Servers. Hewlett Packard Enterprise. 26 April 2012. Archived from the original on 26 January 2012. Retrieved 30 October 2017.
  10. ^ "HP ILO".[dead link‍]
  11. ^ "Product Information Pages". H20565.www2.hpe.com. 2020-08-21. Retrieved 2020-10-14.
  12. ^ "HPE Support Center".
  13. ^ "Product Information Pages". Support.hpe.com. 2020-08-21. Retrieved 2020-10-14.
  14. ^ "HPE Support Center".
  15. ^ "Product Information Pages". H20565.www2.hpe.com. 2020-08-21. Retrieved 2020-10-14.
  16. ^ "HPE Integrated Lights-Out 4 (iLO 4)". support.hpe.com.
  17. ^ "HPE Integrated Lights-Out 4 (iLO 4)". Support.hpe.com. 2023-03-02. Retrieved 2023-03-13.
  18. ^ "HPE Support Center".
  19. ^ New iLO 5 for ProLiant Gen10 demo on YouTube
  20. ^ "HPE Integrated Lights-Out 5 (iLO 5)". Support.hpe.com. Retrieved 2024-01-10.
  21. ^ "HPE Support Center".
  22. ^ "HPE Integrated Lights-Out 6 (iLO 6)". Support.hpe.com. Retrieved 2024-01-10.
  23. ^ "Community.general.hponcfg module – Configure HP iLO interface using hponcfg — Ansible Documentation".
  24. ^ "Net::ILO - Interface to HP Integrated Lights-Out". metacpan.org. Retrieved 2020-10-14.
  25. ^ "iLO automation from python or shell — python-hpilo 4.4.1 documentation". Seveas.github.com. Retrieved 2020-10-14.
  26. ^ "josqu4red/ilorb: HP ILO Ruby interface". GitHub. 27 August 2019. Retrieved 2020-10-14.
  27. ^ "Scripting Tools for Windows PowerShell: iLO cmdlets | HPE™".
  28. ^ "HP iLO and the Newly Discovered iLOBleed Rootkit". 30 December 2021.
  29. ^ "New iLOBleed Rootkit Targeting HP Enterprise Servers with Data Wiping Attacks".