Manuals

Manuals
Configuring iDRAC6 Enterprise: Integrated Dell Remote Access Controller 6 (iDRAC6) Enterprise for Blade Servers Version 2.2 User Guide

Back to Contents Page

Configuring iDRAC6 Enterprise

Integrated Dell™ Remote Access Controller 6 (iDRAC6) Enterprise for Blade Servers Version 2.2 User Guide

  Before You Begin

  Interfaces for Configuring iDRAC6

  Configuration Tasks

  Configuring Networking Using CMC Web Interface

  Viewing FlexAddress Mezzanine Card Fabric Connections

  Remote Syslog

  Remote File Share

  Updating iDRAC6 Firmware

  Updating the USC Repair Package

  Configuring iDRAC6 For Use With IT Assistant

  Using iDRAC6 Configuration Utility to Enable Discovery and Monitoring

  Using iDRAC6 Web Interface to Enable Discovery and Monitoring

  Using IT Assistant to View iDRAC6 Status and Events


This section provides information about how to establish access to iDRAC6 and to configure your management environment to use iDRAC6.


Before You Begin

Gather the following items prior to configuring iDRAC6:

  • Dell Chassis Management Controller Firmware User Guide

  • Dell Systems Management Tools and Documentation DVD

The Dell Systems Management Tools and Documentation DVD includes the following components:

  • DVD root — Contains the Dell™ Systems Build and Update Utility, which provides server setup and system installation information

  • SYSMGMT — Contains the systems management software products including Dell OpenManage® Server Administrator

For more information, see the Dell OpenManage Server Administrator Installation Guide and the Dell OpenManage Management Station Software Installation Guide available on the Dell Support website at support.dell.com/manuals.


Interfaces for Configuring iDRAC6

You can configure iDRAC6 using iDRAC6 Configuration Utility, iDRAC6 Web interface, Chassis Management Controller (CMC) Web interface, Chassis LCD Panel, the local and remote RACADM CLI, iVMCLI, or the SM-CLP CLI. The local RACADM CLI is available after you have installed the operating system and the Dell OpenManage software on the managed server. Table 2-1 describes these interfaces.

For greater security, access to iDRAC6 configuration through iDRAC6 Configuration Utility or the local RACADM CLI can be disabled by means of a RACADM command (see "RACADM Subcommand Overview") or from the GUI (see "Enabling or Disabling Local Configuration Access").

NOTE: Using more than one configuration interface at the same time may generate unexpected results.

Table 2-1. Configuration Interfaces 

Interface

Description

iDRAC6 Configuration
Utility

Accessed at boot time, iDRAC6 Configuration Utility is useful when installing a new Dell PowerEdge™ server. Use it for setting up the network and basic security features and for enabling other features.

iDRAC6 Web Interface

iDRAC6 Web interface is a browser-based management application that you can use to interactively manage iDRAC6 and monitor the managed server. It is the primary interface for day-to-day tasks, such as monitoring system health, viewing the system event log, managing local iDRAC6 users, and launching CMC Web interface and console redirection sessions.

CMC Web Interface

In addition to monitoring and managing the chassis, CMC Web interface can be used to view the status of a managed server, update iDRAC6 firmware, configure iDRAC6 network settings, logon to iDRAC6 Web interface, and to start, stop, or reset the managed server.

Chassis LCD Panel

The LCD panel on the chassis containing iDRAC6 can be used to view the high-level status of the servers in the chassis. During initial configuration of CMC, the configuration wizard allows you to enable DHCP configuration of iDRAC6 networking.

Local and Remote RACADM

The local RACADM command line interface runs on the managed server. It is accessed from either the iKVM or a console redirection session initiated from iDRAC6 Web interface. RACADM is installed on the managed server when you install Dell OpenManage Server Administrator.

Remote RACADM is a client utility which runs on a management station. It uses the out-of-band network interface to run RACADM commands on the managed server. The –r option runs the RACADM command over a network.

RACADM commands provide access to nearly all iDRAC6 features. You can inspect sensor data, system event log records, and the current status and configuration values maintained in iDRAC6. You can alter iDRAC6 configuration values, manage local users, enable and disable features, and perform power functions such as shutting down or rebooting the managed server.

iVMCLI

iDRAC6 Virtual Media Command Line Interface (iVMCLI) provides the managed server access to media on the management station. It is useful for developing scripts to install operating systems on multiple managed servers.

SM-CLP

SM-CLP is the Server Management Workgroup Server Management-Command Line Protocol (SM-CLP) implementation incorporated in iDRAC6. The SM-CLP command line is accessed by logging in to iDRAC6 using Telnet or SSH and typing smclp at the CLI prompt.

SM-CLP commands implement a useful subset of the local RACADM commands. The commands are useful for scripting since they can be executed from a management station command line. The output of commands can be retrieved in well-defined formats, including XML, facilitating scripting and integration with existing reporting and management tools.

IPMI

IPMI defines a standard way for embedded management subsystems, such as iDRAC6, to communicate with other embedded systems and management applications.

You can use iDRAC6 Web interface, SM-CLP, or RACADM commands to configure IPMI Platform Event Filters (PEF) and Platform Event Traps (PET).

PEFs cause iDRAC6 to perform specific actions (for example, rebooting the managed server) when it detects a condition. PETs instruct iDRAC6 to send e-mail or IPMI alerts when it detects specified events or conditions.

You can also use standard IPMI tools such as IPMItool and ipmish with iDRAC6 when you enable IPMI Over LAN.


Configuration Tasks

This section is an overview of the configuration tasks for the management station, iDRAC6, and the managed server. The tasks to be performed include configuring iDRAC6 so that it can be accessed remotely, configuring iDRAC6 features you want to use, installing the operating system on the managed server, and installing management software on your management station and the managed server.

The configuration tasks that can be used to perform each task are listed beneath the task.

NOTE: Before performing the configuration procedures in this guide, CMC and I/O modules must be installed in the chassis and configured, and the Dell PowerEdge™ server must be physically installed in the chassis.

Configure the Management Station

Set up a management station by installing the Dell OpenManage software, a Web browser, and other software utilities. See "Configuring the Management Station."

Configure iDRAC6 Networking

Enable iDRAC6 network and configure IP, netmask, gateway, and DNS addresses.

NOTE: Access to iDRAC6 configuration through iDRAC6 Configuration Utility or local RACADM CLI can be disabled by means of a RACADM command (see "RACADM Subcommand Overview") or from the GUI (see "Enabling or Disabling Local Configuration Access").
NOTE: Changing iDRAC6 network settings terminates all current network connections to iDRAC6.
NOTE: The option to configure the server using the LCD panel is available only during CMC initial configuration. Once the chassis is deployed, the LCD panel cannot be used to reconfigure iDRAC6.
NOTE: The LCD panel can be used only to enable DHCP to configure iDRAC6 network.

Configure iDRAC6 Users

Set up the local iDRAC6 users and permissions. iDRAC6 holds a table of sixteen local users in firmware. You can set usernames, passwords, and roles for these users.

NOTE: <, >, and \ are not allowed in usernames or passwords.
NOTE: When using iDRAC6 in an Active Directory / generic LDAP Directory Service environment, ensure that your user names conform to the Active Directory / generic LDAP Directory Service naming convention in force.

Configure Directory Services

In addition to the local iDRAC6 users, you can use Microsoft® Active Directory® or generic LDAP Directory Service to authenticate iDRAC6 user logins.

For more information, see "Using iDRAC6 Directory Service."

Configure IP Filtering and IP Blocking

In addition to user authentication, you can prevent unauthorized access by rejecting connection attempts from IP addresses outside of a defined range and by temporarily blocking connections from IP addresses where authentication has failed multiple times within a configurable timespan.

Configure Platform Events

Platform events occur when iDRAC6 detects a warning or critical condition from one of the managed server's sensors.

Configure Platform Event Filters (PEF) to choose the events you want to detect, such as rebooting the managed server, when an event is detected.

Configure Platform Event Traps (PET) to send alert notifications to an IP address, such as a management station with IPMI software or to send an e-mail to a specified e-mail address.

Enabling or Disabling Local Configuration Access

Access to critical configuration parameters, such as network configuration and user privileges, can be disabled. Once disabled, the setting remains persistent across reboots. Configuration write access is blocked for both the local RACADM program and iDRAC6 Configuration Utility (at boot). Web access to configuration parameters is unimpeded and configuration data is always available for viewing. For information about iDRAC6 Web interface, see "Enabling or Disabling Local Configuration Access." For RACADM commands, see "cfgRacTuning."

Configure iDRAC6 Services

Enable or disable iDRAC6 network services — such as Telnet, SSH, and the Web server interface — and reconfigure ports and other service parameters.

Configure Secure Sockets Layer (SSL)

Configure SSL for iDRAC6 Web server.

Configure Virtual Media

Configure the virtual media feature so that you can install the operating system on the Dell PowerEdge server. Virtual media allows the managed server to access media devices on the management station or ISO CD/DVD images on a network share as if they were devices on the managed server.

Configure a VFlash Media Card

Install and configure a VFlash Media card for use with iDRAC6.

Install the Managed Server Software

Install the operating system on the Dell PowerEdge server using virtual media and then install the Dell OpenManage software on the managed Dell PowerEdge server and set up the last crash screen feature.

Configure the Managed Server for the Last Crash Screen Feature

Set up the managed server so that iDRAC6 can capture the screen image after an operating system crash or freeze.


Configuring Networking Using CMC Web Interface

NOTE: You must have Chassis Configuration Administrator privilege to set up iDRAC6 network settings from CMC.
NOTE: The default CMC username is root and the default password is calvin.
NOTE: CMC IP address can be found in iDRAC6 Web interface by clicking System® Remote Access® CMC. You can also launch CMC Web interface from this screen.

Launching iDRAC6 Web Interface From CMC

CMC provides limited management of individual chassis components, such as servers. For complete management of these individual components, CMC provides a launch point for the server's iDRAC6 Web interface.

To launch iDRAC6 from the Servers screen:

  1. Log in to CMC Web interface.

  2. In the system tree, select Servers.

The Servers Status screen appears.

  1. Click the Launch iDRAC6 GUI icon for the server you want to manage.

You can also launch iDRAC6 Web interface for a single server using the Servers list in the system tree:

  1. Log in to CMC Web interface.

  2. Expand Servers in the system tree.

All of the servers (1–16) appear in the expanded Servers list.

  1. Click the server you want to view.

The Server Status screen for the server you selected displays.

  1. Click the Launch iDRAC6 GUI icon.

Single Sign-On

Using the single sign-on feature, you can launch iDRAC6 Web interface from CMC without having to log in a second time. Single sign-on policies are described below.

  • CMC user who has Server Administrator set under User Privileges is automatically logged in to iDRAC6 Web interface using single sign-on. After logging in, the user is automatically granted iDRAC6 Administrator privileges. This is true even if the same user does not have an account on iDRAC6, or if the account does not have Administrator privileges.

  • CMC user who does not have Server Administrator set under User Privileges, but has the same account on iDRAC6, is automatically logged in to iDRAC6 using single sign-on. Once logged in to iDRAC6 Web interface, this user is granted the privileges that were created for iDRAC6 account.

NOTE: In this context, "the same account" means that the user has the same username and password for CMC as for iDRAC6. A user who has the same username but a different password is not recognized as a valid user.
  • CMC user who does not have Server Administrator set under User Privileges, or the same account on iDRAC6, is not automatically logged in to iDRAC6 using single sign-on. This user is directed to iDRAC6 log in screen after clicking Launch iDRAC6 GUI.

NOTE: In this case, users may be prompted to log in to iDRAC6.
NOTE: If iDRAC6 network LAN is disabled (LAN Enabled = No), single sign–on is not available.
NOTE: If the server is removed from the chassis, iDRAC6 IP address is changed, or there is a problem in iDRAC6 network connection, then clicking the Launch iDRAC6 GUI icon may display an error screen.

Configuring Networking for iDRAC6

  1. Click System® Remote Access® iDRAC6.

  2. Click the Network/Security tab:

To enable or disable Serial Over LAN:

    1. Click Serial Over LAN.

The Serial Over LAN screen appears.

    1. Select the Enable Serial Over LAN check box. You may also change the Baud Rate and Channel Privilege Level Limit settings.

    2. Click Apply.

To enable or disable IPMI Over LAN:

    1. Click Network.

The Network screen appears.

    1. Click IPMI Settings.

    2. Select the Enable IPMI Over LAN check box. You may also change the Channel Privilege Level Limit and Encryption Key settings.

    3. Click Apply.

To enable or disable DHCP:

    1. Click Network.

The Network screen appears.

    1. Select the DHCP Enable check box in the IPv4 Settings section and the Autoconfiguration Enable check box in the IPv6 Settings section to enable DHCP. To use DHCP to obtain DNS server addresses, select the Use DHCP to obtain DNS Server Addresses check box.

    2. Click Apply.

NOTE: If you choose not to enable DHCP, you must enter the static IP address, netmask, and default gateway for the server.

Viewing FlexAddress Mezzanine Card Fabric Connections

The M1000e includes FlexAddress, an advanced multilevel, multistandard networking system. FlexAddress allows the use of persistent, chassis-assigned World Wide Names and MAC addresses (WWN/MAC) for each managed server port connection.

NOTE: In order to avoid errors that may lead to an inability to power on the managed server, you must have the correct type of mezzanine card installed for each port and fabric connection.

Configuration of the FlexAddress feature is performed using CMC Web interface. For more information on the FlexAddress feature and its configuration, see the Dell Chassis Management Controller User Guide and the Chassis Management Controller (CMC) Secure Digital (SD) Card Technical Specification document.

After the FlexAddress feature has been enabled and configured for the chassis, click System® Properties tab® WWN/MAC to view a list of installed mezzanine cards, the fabrics to which they are connected, type of fabric, and server-assigned or chassis-assigned MAC addresses for each installed embedded Ethernet and optional mezzanine card port.

The Server–Assigned column displays the server–assigned WWN/MAC addresses embedded in the controller's hardware. WWN/MAC addresses showing N/A indicate that an interface for the specified fabric is not installed.

The Chassis–Assigned column displays the chassis–assigned WWN/MAC addresses used for the particular slot. WWN/MAC addresses showing N/A indicate that the FlexAddress feature is not installed. A green check mark in the Server–Assigned and Chassis–Assigned columns indicates the active addresses.

FlexAddress MAC for iDRAC6

The FlexAddress feature replaces the server–assigned MAC addresses with chassis–assigned MAC addresses and is implemented for iDRAC6 along with blade LOMs, mezzanine cards and I/O modules. iDRAC6 FlexAddress feature supports preservation of slot specific MAC address for iDRAC6s in a chassis. The chassis–assigned MAC address is stored in CMC non–volatile memory and is sent to iDRAC6 during an iDRAC6 boot or when CMC FlexAddress page settings are changed.

If CMC enables chassis–assigned MAC addresses, iDRAC6 displays the value in the MAC Address field on the following screens:

  • System® Properties tab® System Details® iDRAC6 Information

  • System® Properties tab® WWN/MAC

  • System® Remote Access® iDRAC6® Properties tab® Remote Access Information® Network Settings

  • System® Remote Access® iDRAC6® Network/Security tab® Network® Network Interface Card Settings

CAUTION: With FlexAddress enabled, if you switch from a server–assigned MAC address to a chassis–assigned MAC address and vice–versa, iDRAC6 IP address also changes.
NOTE: You can enable or disable the FlexAddress feature only through CMC. iDRAC6 GUI only reports the status. Any existing vKVM or vMedia session terminates if the FlexAddress setting is changed in CMC FlexAddress page.

Enabling FlexAddress through RACADM

You cannot enable FlexAddress from iDRAC6. Enable FlexAddress at the slot and fabric levels from CMC.

  1. From CMC console, enable FlexAddress for the managed server on the slot with the following RACADM command:

racadm setflexaddr -i <slot_no> 1, where <slot_no> is the slot number on which to enable FlexAddress.

  1. Next, from CMC console, enable FlexAddress at the fabric level by executing the following RACADM command:

racadm setflexaddr -f <fabric_name> 1, where <fabric_name> is A, B, or C.

  1. To enable FlexAddress for all iDRAC6s in the chassis, from the CMC console, execute the following RACADM command:

racadm setflexaddr -f idrac 1

See the Dell Chassis Management Controller Administrator Reference Guide for more information on CMC RACADM subcommands.


Remote Syslog

iDRAC6 Remote Syslog feature allows you to remotely write the RAC log and the System Event Log (SEL) to an external syslog server. You can read all logs from the entire server farm from a central log.

The Remote Syslog protocol does not need any user authentication. For the logs to be entered in the Remote Syslog server, ensure that there is proper network connectivity between iDRAC6 and the Remote Syslog server and that the Remote Syslog server is running on the same network as iDRAC6. The Remote Syslog entries are carried in UDP packets sent to the Remote Syslog server's syslog port. If network failures occur, iDRAC6 does not send the same log again. The remote logging happens real time as and when the logs are recorded in iDRAC6's RAC log and SEL log. You can also change iDRAC6 Remote Syslog settings through CMC.

Remote Syslog can be enabled through the remote Web interface:

  1. Open a supported Web browser window.

  2. Log in to iDRAC6 Web interface.

  3. In the system tree, select System® Setup tab® Remote Syslog Settings. The Remote Syslog Settings screen is displayed.

Table 2-2 lists the Remote Syslog settings.

Table 2-2. Remote Syslog Settings 

Attribute

Description

Remote Syslog Enabled

Select this option to enable the transmission and remote capture of the syslog on the specified server. Once syslog is enabled, new log entries are sent to the Syslog server(s).

Syslog Server 1–3

Enter the Remote Syslog server address to log iDRAC6 messages like SEL Log and RAC Log. Syslog server addresses allows alphanumeric, -, ., :, and _ symbols.

Port Number

Enter the port number of the Remote Syslog server. The port number should be between 1 to 65535. Default is 514.

NOTE: The severity levels defined by the Remote Syslog protocol differ from the standard IPMI System Event Log (SEL) severity levels. Hence all iDRAC6 Remote Syslog entries are reported in the syslog server with severity level as Notice.

The following example shows the configuration objects and the RACADM command usage to change remote syslog settings:

racadm config –g cfgRemoteHosts –o cfgRhostsSyslogEnable [1/0] ; default is 0

racadm config –g cfgRemoteHosts –o cfgRhostsSyslogServer1 <servername1> ; default is blank

racadm config –g cfgRemoteHosts –o cfgRhostsSyslogServer2 <servername2>; default is blank

racadm config –g cfgRemoteHosts –o cfgRhostsSyslogServer3 <servername3>; default is blank

racadm config –g cfgRemoteHosts –o cfgRhostsSyslogPort <portnumber>; default is 514


Remote File Share

iDRAC6 Remote File Share (RFS) feature allows you to specify a CD/DVD ISO image file located on a network share and make it available to the managed server's operating system as a virtual drive by mounting it as a CD or DVD using NFS or CIFS.

NOTE: This feature works only with IPv4 addresses. IPv6 addresses are currently not supported.

CIFS shared image path should be in the format:

//<ipaddress or domain name>/<share_name>/<pathtoimage>

The NFS shared image path should be in the format:

<ipadddress>:/<pathtoimage>

If a username contains a domain name, then the username must be entered in the form of <user name>@<domain>. For example, user1@dell.com is a valid username whereas dell\user1 is not.

A filename that ends with the IMG extension is redirected as a Virtual Floppy and a filename ending with the ISO extension is redirected as a Virtual CDROM. Remote file share supports only .IMG and .ISO image file formats.

The RFS feature utilizes the underlying virtual media implementation in iDRAC6. You must have Virtual Media privileges to perform an RFS mounting. If a virtual drive is already used by Virtual Media, then the drive will not be available to mount as RFS and vice versa. For RFS to work, Virtual Media in iDRAC6 must be in the Attach or Auto–Attach modes.

Connection status for RFS is available in iDRAC6 log. Once connected, an RFS mounted virtual drive does not disconnect even if you log out from iDRAC6. The RFS connection is closed if iDRAC6 is reset or the network connection is dropped. GUI and command line options are also available in CMC and iDRAC6 to close the RFS connection. The RFS connection from CMC always overrides an existing RFS mount in iDRAC6.

NOTE: iDRAC6 VFlash feature and RFS are not related.

To enable remote file sharing through iDRAC6 Web interface, do the following:

  1. Open a supported Web browser window.

  2. Log in to iDRAC6 Web interface.

  3. Select System® Remote File Share tab.

The Remote File Share screen is displayed.

Table 2-3 lists the remote file share settings.

Table 2-3. Remote File Server Settings 

Attribute

Description

User Name

Username to connect for NFS/CIFS file system.

Password

Password to connect for NFS/CIFS file system.

Image File Path

Path of the file to be shared through remote file share.

Status

Connected: The file is shared.

Not Connected: The file is not shared.

Connecting... : Busy connecting to the share

Click Connect to establish a file share connection. The Connect button is disabled after successfully establishing a connection.

NOTE: Even if you have configured remote file sharing, the GUI does not display this information due to security reasons.

For remote file share, the remote RACADM command is

racadm remoteimage.

racadm remoteimage <options>

Options are:

–c ; connect image

–d ; disconnect image

–u <username>; username to access the network share

–p <password>; password to access the network share

–l <image_location>; image location on the network share; use double quotes around the location

–s ; display current status

CAUTION: All characters including alphanumeric and special characters are allowed as part of username, password, and image_location except the following characters: ' (single quote), "(double quote), ,(comma), < (less than), and > (greater than). When using remote file share, the characters listed above are not allowed as part of the user name, password, and image_location.

Updating iDRAC6 Firmware

Updating iDRAC6 firmware installs a new firmware image in the flash memory. You can update the firmware using any of the following methods:

  • iDRAC6 Web interface

  • RACADM CLI

  • Dell Update Package (for Linux or Microsoft Windows)

  • DOS iDRAC6 firmware update utility

  • CMC Web interface

Downloading the Firmware or Update Package

Download the firmware from support.dell.com. The firmware image is available in several different formats to support the different update methods available.

To update iDRAC6 firmware using iDRAC6 Web interface or to recover iDRAC6 using CMC Web interface, download the binary image packaged as a self-extracting archive.

To update iDRAC6 firmware from the managed server, download the operating system-specific Dell Update Package (DUP) for the operating system running on the server whose iDRAC6 you are updating.

To update iDRAC6 firmware using the DOS iDRAC6 Firmware update utility, download both the update utility and the binary image, which are packaged in self-extracting archive files.

Executing the Firmware Update

NOTE: When iDRAC6 firmware update begins, all existing iDRAC6 sessions are disconnected and new sessions are not permitted until the update process is completed.
NOTE: The chassis fans run at 100% during iDRAC6 firmware update. When the update is complete, normal fan speed regulation resumes. This is normal behavior, designed to protect the server from overheating during a time when it cannot send sensor information to CMC.

To use a Dell Update Package for Linux or Microsoft Windows, execute the operating-specific DUP on the managed server.

When using iDRAC6 Web interface or CMC Web interface, place the firmware binary image on a disk that is accessible to the management station from which you are running the Web interface. See "Updating iDRAC6 Firmware."

NOTE: iDRAC6 Web interface also allows you to reset iDRAC6 configuration to the factory defaults.

You can use CMC Web interface or CMC RACADM to update iDRAC6 firmware. This feature is available when iDRAC6 firmware is in Normal mode, as well as when it is corrupted. See "Updating iDRAC6 Firmware Using CMC."

NOTE: If the configuration is not preserved during firmware update, iDRAC6 generates new SHA1 and MD5 keys for the SSL certificate. Because the keys are different from those in the open Web browser, all browser windows that are connected to iDRAC6 must be closed after the firmware update is complete. If the browser windows are not closed, an Invalid Certificate error message is displayed.
NOTE: If you are rolling back iDRAC6 firmware to an earlier version, delete the existing Internet Explorer ActiveX® browser plug-in on any Windows-based management station to allow the firmware to install a compatible version of the ActiveX plug-in.

Verifying the Digital Signature for Linux DUPs

A digital signature is used to authenticate the identity of the signer of a file and to certify that the original content of the file has not been modified since it was signed.

If you do not already have it installed on your system, you must install the Gnu Privacy Guard (GPG) to verify a digital signature. To use the standard verification procedure, perform the following steps:

  1. Download the Dell Linux public GnuPG key by navigating to lists.us.dell.com and clicking the Dell Public GPG key link. Save the file to your local system. The default name is linux-security-publickey.txt.

  2. Import the public key to your GPG trust database by running the following command:

gpg --import <Public Key Filename>

NOTE: You must have your private key to complete the process.
  1. To prevent a distrusted-key warning, change the trust level for the Dell Public GPG key.

    1. Enter the following command:

gpg --edit-key 23B66A9D

    1. Within the GPG key editor, enter fpr. The following message appears:

pub 1024D/23B66A9D 2001-04-16 Dell, Inc. (Product Group) <linux-security@dell.com>
Primary key fingerprint: 4172 E2CE 955A 1776 A5E6 1BB7 CA77 951D 23B6 6A9D

If the fingerprint of your imported key is the same as above, you have a correct copy of the key.

    1. While still in the GPG key editor, enter trust. The following menu appears:

Please decide how far you trust this user to correctly verify other users' keys (by looking at passports, checking fingerprints from different sources, etc.)


  1 = I don't know or won't say
  2 = I do NOT trust
  3 = I trust marginally
  4 = I trust fully
  5 = I trust ultimately
  m = back to the main menu

Your decision?

    1. Enter 5, then press <Enter>. The following prompt appears:

Do you really want to set this key to ultimate trust? (y/N)

    1. Enter y <Enter> to confirm your choice.

    2. Enter quit <Enter> to exit the GPG key editor.

You must import and validate the public key only once.

  1. Obtain the package you need (for example, the Linux DUP or self-extracting archive) and its associated signature file from the Dell Support website at support.dell.com/support/downloads.

NOTE: Each Linux Update Package has a separate signature file, which is shown on the same Web page as the Update Package. You need both the Update Package and its associated signature file for verification. By default, the signature file has the same name as the DUP filename with a .sign extension. For example, iDRAC6 firmware image has an associated .sign file (IDRAC_FRMW_LX_2.2.BIN.sign), which is included in the self-extracting archive with the firmware image (IDRAC_FRMW_LX_2.2.BIN). To download the files, right-click the Download link and use the Save Target As option.
  1. Verify the Update Package:

gpg --verify <Linux Update Package signature filename> <Linux Update Package filename>

The following example illustrates the steps that you must follow to verify a Dell PowerEdge™ M610 iDRAC6 Update Package:

  1. Download the following two files from support.dell.com:

    • IDRAC_FRMW_LX_2.2.BIN.sign

    • IDRAC_FRMW_LX_2.2.BIN

  2. Import the public key by running the following command line:

gpg --import <linux-security-publickey.txt>

The following output message appears:

gpg: key 23B66A9D: "Dell Computer Corporation (Linux Systems Group) <linux-security@dell.com>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1

  1. Set the GPG trust level for the Dell public key, if you haven't done so previously.

    1. Enter the following command:

gpg --edit-key 23B66A9D

    1. At the command prompt, enter the following commands:

fpr
trust

    1. Enter 5, then press <Enter> to choose I trust ultimately from the menu.

    2. Enter y <Enter> to confirm your choice.

    3. Enter quit <Enter> to exit the GPG key editor.

This completes validation of the Dell public key.

  1. Verify the Dell PowerEdge M610 iDRAC6 package digital signature by running the following command:

gpg --verify IDRAC_FRMW_LX_2.2.BIN.sign IDRAC_FRMW_LX_2.2.BIN

The following output message appears:

gpg: Signature made Fri Jul 11 15:03:47 2008 CDT using DSA key ID 23B66A9D
gpg: Good signature from "Dell, Inc. (Product Group) <linux-security@dell.com>"

If you have not validated the key as shown in step 3, you will receive additional messages:

gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 4172 E2CE 955A 1776 A5E6 1BB7 CA77 951D 23B6 6A9D

Using iDRAC6 Web Interface

NOTE: If iDRAC6 firmware update progress is interrupted before it completes, iDRAC6 firmware may be corrupted. In such cases, you can recover iDRAC6 using CMC Web interface.
NOTE: The firmware update, by default, retains the current iDRAC6 settings. During the update process, you have the option to reset iDRAC6 configuration to the factory defaults. If you set the configuration to the factory defaults, external network access will be disabled when the update completes. You must enable and configure the network using iDRAC6 Configuration Utility.
  1. Start iDRAC6 Web interface.

  2. In the system tree, select System® Remote Access® iDRAC6.

  3. Click the Update tab.

The Firmware Update screen appears.

NOTE: To update the firmware, iDRAC6 must be placed in an update mode. Once in this mode, iDRAC6 will automatically reset, even if you cancel the update process.
  1. In the Upload (Step 1 of 4) section, click Browse to locate the firmware image that you downloaded. You can also enter the path in the text field. For example:

C:\Updates\V2.2\<image_name>.

The default firmware image name is firmimg.imc.

  1. Click Upload.

The file uploads to iDRAC6. This may take several minutes to complete.

NOTE: During the upload process, you abort the firmware upgrade process by clicking Cancel. Clicking Cancel resets iDRAC6 to normal operating mode.

When the upload is complete, the Firmware Update - Validation (page 2 of 4) screen displays.

    • If the image file uploaded successfully and passed all verification checks, a message appears indicating that the firmware image has been verified.

    • If the image did not upload successfully, or it did not pass the verification checks, the firmware update returns to the Firmware Update screen. You can try upgrading iDRAC6 again or click Cancel to reset iDRAC6 to normal operating mode.

NOTE: If you deselect the Preserve Configuration check box, iDRAC6 resets to its default settings. In the default settings, the LAN is disabled, and you cannot log in to iDRAC6 Web interface. You must reconfigure the LAN settings using iDRAC6 Configuration Utility during BIOS POST or through CMC.
  1. By default, the Preserve Configuration option is enabled (checked) to preserve the current settings on iDRAC6 after an upgrade. If you do not want the settings to be preserved, clear the Preserve Configuration check box.

  2. Click Begin Update to start the upgrade process. Do not interrupt the upgrade process.

  3. In the Firmware Update - Updating (page 3 of 4) window, you will see the status of the update. The progress of the firmware upgrade operation, measured in percentage, appears in the Progress column.

  4. Once the firmware update is complete, the Firmware Update - Update Results (page 4 of 4) window will appear and iDRAC6 will reset automatically. You must close the current browser window and reconnect to iDRAC6 using a new browser window.

Updating iDRAC6 Firmware Using RACADM

You can update iDRAC6 firmware using remote RACADM.

  1. Download iDRAC6 firmware image from the Dell Support website at support.dell.com to the managed system.

For example:

C:\downloads\firmimg.imc

  1. Run the following RACADM command:

For example:

racadm -r <iDRAC6 IP address> -u <username> -p <password> fwupdate -g -u -a <path>

where path is the location on the TFTP server where firmimg.imc is stored.

Using the DOS Update Utility

To update iDRAC6 firmware using the DOS update utility, boot the managed server to DOS, and execute the idrac16d command. The syntax for the command is:

idrac16d [-f] [-i=<filename>] [-l=<logfile>]

When executed with no options, the idrac16d command updates iDRAC6 firmware using the firmware image file firmimg.imc in the current directory.

The options are as follows:

  • -f — Forces the update. The -f option can be used to downgrade the firmware to an earlier image.

  • -i=<filename> — Specifies the file name of the firmware image. This option is required if the firmware file name has been changed from the default name firmimg.imc.

  • -l=<logfile> — Logs output from the update activity. This option is used for debugging.

NOTE: If you enter incorrect arguments to the idrac16d command, or supply
the  -h option, you may notice an additional option, -nopresconfig in the usage output. This option is used to update the firmware without preserving any configuration information. It is recommended to not use this option because it deletes all of your existing iDRAC6 configuration information such as IP addresses, users, and passwords.

Clear Your Browser's Cache

To use the latest iDRAC6 features, clear the browser's cache to remove/delete any old Web pages that may be stored on the system.


Updating the USC Repair Package

See the Dell Lifecycle Controller User Guide for information on updating the USC repair package from iDRAC6 Web interface.


Configuring iDRAC6 For Use With IT Assistant

Dell OpenManage IT Assistant can discover managed devices that comply with Simple Network Management Protocol (SNMP) v1 and v2c and Intelligent Platform Management Interface (IPMI) v2.0.

iDRAC6 complies with IPMI v2.0. This section describes the steps necessary to configure iDRAC6 for discovery and monitoring by IT Assistant. There are two ways to accomplish this: through iDRAC6 Configuration Utility and through iDRAC6 graphical Web interface.


Using iDRAC6 Configuration Utility to Enable Discovery and Monitoring

To set up iDRAC6 for IPMI discovery and sending alert traps at iDRAC6 Configuration Utility level, restart your managed server (blade) and observe its power-up using the iKVM and either a remote monitor and console keyboard or a Serial over LAN (SOL) connection. When Press
<Ctrl-E> for Remote Access Setup
displays, press <Ctrl><E>.

When iDRAC6 Configuration Utility screen appears, use the arrow keys to scroll down.

  1. Enable IPMI over LAN.

  2. Enter your site's RMCP+ Encryption Key, if used.

NOTE: See your senior Network Administrator or CIO to discuss implementing this option because it adds valuable security protection and must be implemented site-wide in order to function properly.
  1. At LAN Parameters, press <Enter> to enter the sub-screen. Use Up and Down arrows to navigate.

  2. Toggle LAN Alert Enabled to On using the spacebar.

  3. Enter the IP address of your Management Station into Alert Destination 1.

  4. Enter a name string into iDRAC6 Name with a consistent naming convention across your data center. The default is iDRAC6-{Service Tag}.

Exit iDRAC6 Configuration Utility by pressing <Esc>, <Esc>, and then pressing <Enter> to save your changes. Your server will now boot into normal operation, and it will be discovered during IT Assistant's next scheduled Discovery pass.

NOTE: You can also use Dell Management Console, the next generation one-to-many systems management application, to enable discovery and monitoring. See the Dell Management Console User's Guide on the Dell Support site at support.dell.com/manuals for more information.

Using iDRAC6 Web Interface to Enable Discovery and Monitoring

IPMI Discovery can also be enabled through the remote Web interface:

  1. Open a supported Web browser window.

  2. Log in to iDRAC6 Web interface using a login and password with Administrator rights.

  3. In the system tree, select System® Remote Access® iDRAC6.

  4. Click the Network/Security tab.

The Network screen appears.

  1. Click IPMI Settings.

  2. Ensure the Enable IPMI Over LAN check box is selected (checked).

  3. Select Administrator from the Channel Privilege Level Limit drop-down menu.

  4. Enter your site's RMCP+ Encryption Key, if used.

  5. Click Apply if you made any changes on this screen.

  6. In the system tree, select System.

  7. Click the Alert Management tab, and then click Platform Events.

The Platform Events screen appears, displaying a list of events for which you can configure iDRAC6 to generate e-mail alerts.

  1. Enable e-mail alerts for one or more events by selecting the check box in the Generate Alert column.

  2. Click Apply if you made any changes on this screen.

  3. Click Trap Settings.

The Trap Settings screen appears.

  1. In the first available Destination IP Address field in the IPv4 Destination List section, select the Enabled check box, and then enter the IP address of your Management Station.

  2. Click Apply if you made any changes on this screen.

You can now send a test trap by clicking the Send link in the Test Trap column.

Dell highly recommends that for security purposes you create a separate User for IPMI commands with its own user name, IPMI over LAN privileges, and password:

  1. In the system tree, select System® Remote Access® iDRAC6.

  2. Click the Network/Security tab, and then click Users.

The Users screen appears, displaying a list of all users (defined or undefined).

  1. Click the User ID of an undefined User.

The User Configuration screen for the selected User ID appears.

  1. Select the Enable User check box, and then enter the user's name and password.

  2. In the IPMI LAN Privilege section, ensure that Maximum LAN User Privilege Granted is set to Administrator.

  3. Set other user privileges as needed.

  4. Click Apply to save the new User settings.


Using IT Assistant to View iDRAC6 Status and Events

After discovery is complete, iDRAC6 devices appear in the Servers category of the ITA Devices detail screen, and iDRAC6 information can be seen by clicking the iDRAC6 name. This is different from DRAC 5 systems, where the management card shows up in the RAC group.

iDRAC6 error and warning traps can now be seen in the primary Alert Log of IT Assistant. They display in the Unknown category, but the trap description and severity will be accurate.

For more information on using IT Assistant to manage your data center, see the Dell OpenManage IT Assistant User's Guide.

NOTE: You can also use Dell Management Console, the next generation one-to-many systems management application, to view iDRAC6 status and events. See the Dell Management Console User's Guide on the Dell Support website at support.dell.com/manuals for more information.

Back to Contents Page

 

Laptops | Desktops | Business Laptops | Business Desktops | Workstations | Servers | Storage | Services | Monitors | Printers | LCD TVs | Electronics
© 2012 Dell | About Dell | Terms & Conditions | Unresolved Issues | Privacy Statement | Ads and Emails | Dell Recycling | Contact | Site Map | Feedback
AT | AU | BE | BR | CA | CH | CL | CN | CO | DE | DK | ES | FR | HK | IE | IN | IT | JP | KR | ME | MX | MY | NL | NO | PA | PR | RU | SE | SG | UK | VE | ALL

snWEB4