Dell Chassis Management Controller, User Manual

Page 1: ...Dell Chassis Management Controller Firmware Version 4 3 User s Guide ...

Page 2: ... Sempron are trademarks of Advanced Micro Devices Inc Microsoft Windows Windows Server Internet Explorer MS DOS Windows Vista and Active Directory are either trademarks or registered trademarks of Microsoft Corporation in the United States and or other countries Red Hat and Red Hat Enterprise Linux are registered trademarks of Red Hat Inc in the United States and or other countries Novell and SUSE...

Page 3: ...MC Hardware 21 Checklist To Set up Chassis 21 Basic CMC Network Connection 22 Daisy chain CMC Network Connection 22 Installing Remote Access Software on a Management Station 24 Installing RACADM on a Linux Management Station 25 Uninstalling RACADM From a Linux Management Station 25 Configuring Web Browser 25 Proxy Server 26 Microsoft Phishing Filter 26 Certificate Revocation List CRL Fetching 26 D...

Page 4: ...tive Directory User or LDAP User 38 Logging Into CMC Using Smart Card 38 Logging Into CMC Using Single Sign on 39 Logging In to CMC Using Serial Telnet or SSH Console 39 Accessing CMC Using RACADM 40 Logging in to CMC Using Public Key Authentication 40 Multiple CMC Sessions 41 4 Updating Firmware 43 Downloading CMC Firmware 43 Viewing Currently Installed Firmware Versions 43 Viewing Currently Inst...

Page 5: ...us of Fans 61 Viewing iKVM Information and Health Status 61 Viewing PSU Information and Health Status 62 Viewing Information and Health Status of Temperature Sensors 62 Viewing LCD Information and Health 62 6 Configuring CMC 63 Viewing and Modifying CMC Network LAN Settings 64 Viewing and Modifying CMC Network LAN Settings Using CMC Web Interface 64 Viewing and Modifying CMC Network LAN Settings U...

Page 6: ...Viewing Server Certificate 78 Configuring Multiple CMCs Using RACADM 79 Creating a CMC Configuration File 80 Parsing Rules 81 Modifying the CMC IP Address 82 Viewing and Terminating CMC Sessions 82 Viewing and Terminating CMC Sessions Using Web Interface 83 Viewing and Terminating CMC Sessions Using RACADM 83 7 Configuring Server 85 Configuring Slot Names 85 Configuring iDRAC Network Settings 86 C...

Page 7: ... Alert Destinations 100 Configuring SNMP Trap Alert Destinations 100 Configuring E Mail Alert Settings 102 9 Configuring User Accounts and Privileges 105 Types of Users 105 Modifying Root User Administrator Account Settings 109 Configuring Local Users 109 Configure Local Users Using CMC Web Interface 109 Configure Local Users Using RACADM 110 Configuring Active Directory Users 111 Supported Active...

Page 8: ...ography Schemes 138 Configure Public Key Authentication over SSH 139 Enabling Front Panel to iKVM Connection 141 Configuring Terminal Emulation Software 141 Configuring Linux Minicom 141 Connecting to Servers or I O Modules Using Connect Command 142 Configuring the Managed Server BIOS for Serial Console Redirection 143 Configuring Windows for Serial Console Redirection 144 Configuring Linux for Se...

Page 9: ...for IOMs Using RACADM 162 Resetting IOM to Factory Default Settings 162 Updating IOM Software Using CMC Web Interface 163 Managing VLAN for IOM 164 Configuring VLAN settings on IOMs Using CMC Web Interface 164 Viewing the VLAN settings on IOMs Using CMC Web Interface 165 Adding Tagged VLANs for IOMs Using CMC Web Interface 165 Removing VLANs for IOMs Using CMC Web Interface 165 Updating Untagged V...

Page 10: ...Redundancy 186 Power Budgeting For Hardware Modules 186 Server Slot Power Priority Settings 187 Assigning Priority Levels to Servers 188 Viewing Power Consumption Status 188 Viewing Power Consumption Status Using CMC Web Interface 188 Viewing Power Consumption Status Using RACADM 188 Viewing Power Budget Status 189 Viewing Power Budget Status Using CMC Web Interface 189 Viewing Power Budget Status...

Page 11: ...oting a Remote System 202 Power Troubleshooting 202 Troubleshooting Alerts 204 Viewing Event Logs 204 Viewing Hardware Log 204 Viewing CMC Log 205 Using Diagnostic Console 206 Resetting Components 206 Saving or Restoring Chassis Configuration 206 Troubleshooting Network Time Protocol NTP Errors 207 Interpreting LED Colors and Blinking Patterns 208 Troubleshooting Non responsive CMC 210 Observing L...

Page 12: ... Troubleshooting 219 Front Panel LCD Messages 221 LCD Error Messages 221 LCD Module and Server Status Information 225 18 Frequently Asked Questions 229 RACADM 229 Managing and Recovering a Remote System 229 Active Directory 231 FlexAddress and FlexAddressPlus 231 iKVM 233 IOM 234 ...

Page 13: ...wer Supply Engagement mode This enables CMC to enable or set power supplies in standby dynamically depending on load and redundancy requirements to improve power efficiency CMC reports real time power consumption which includes logging high and low points with a time stamp CMC supports setting an optional enclosure Maximum Power Limit which either alerts or takes actions such as throttling server ...

Page 14: ...management and security features Management Features The CMC provides the following management features Redundant CMC Environment Dynamic Domain Name System DDNS registration for IPv4 and IPv6 Remote system management and monitoring using SNMP a Web interface iKVM Telnet or SSH connection Monitoring Provides access to system information and status of components Access to system event logs Provides...

Page 15: ...lity for Group Members to keep their chassis settings synchronized with the Lead Chassis Support to save BIOS configuration information to hard disk and restore to same or different server Security Features The CMC provides the following security features Password level security management Prevents unauthorized access to a remote system Centralized User authentication through Active Directory usin...

Page 16: ...e ports CMC listens to for connections Table 1 CMC Server Listening Ports Port Number Function 22 SSH 23 Telnet 80 HTTP 161 SNMP Agent 443 HTTPS Configurable port The following table lists the ports that CMC uses as a client Table 2 CMC Client Port Port Number Function 25 SMTP 53 DNS 68 DHCP assigned IP address 69 TFTP 162 SNMP trap 16 ...

Page 17: ...905 CMC 1 2 PowerEdge M610 CMC 2 0 PowerEdge M610x CMC 3 0 PowerEdge M710 CMC 2 0 PowerEdge M710HD CMC 3 0 PowerEdge M910 CMC 2 3 Power Edge M915 CMC 3 2 PowerEdge M420 CMC 4 1 PowerEdge M520 CMC 4 0 PowerEdge M620 CMC 4 0 PowerEdge M820 CMC 4 11 PowerEdge PSM4110 CMC 4 11 The following table lists the minimum CMC version required to enable the listed IOMs Table 4 Minimum CMC Version for IOMs IOM ...

Page 18: ... 2 Cisco Catalyst CBS 3130X S CMC 1 0 Cisco Catalyst CBS 3130G CMC 1 0 Cisco Catalyst CBS 3032 CMC 1 0 Dell Force10 MXL 10 40GbE CMC 4 11 Dell PowerEdge M I O Aggregator CMC 4 2 Mellanox M2401G DDR Infiniband Switch CMC 1 0 Mellanox M3601Q QDR Infiniband Switch CMC 2 0 Mellanox M4001F M4001Q FDR QDR Infiniband Switch CMC 4 0 Mellanox M4001T FDR10 Infiniband Switch CMC 4 1 Brocade M6505 CMC 4 3 Cis...

Page 19: ...be connected internally to the serial console of a server or I O module using the connect or racadm connect command Other connections Access to the Dell CMC Console through the Avocent Integrated KVM Switch Module iKVM Supported Platforms The CMC supports modular systems designed for the M1000e platform For information about compatibility with the CMC see the documentation for your device For the ...

Page 20: ...out obtaining and using Dell Update Packages as part of your system update strategy The following system documents available at dell com support manuals provide more information about the system in which CMC is installed The safety instructions that came with your system provide important safety and regulatory information For additional regulatory information see the Regulatory Compliance home pag...

Page 21: ...to run as a standby to the active CMC Related Links Understanding Redundant CMC Environment Checklist To Set up Chassis The following steps enable you to setup the chassis accurately 1 CMC and the management station where you use your browser must be on the same network which is called the management network Connect an Ethernet network cable from CMC port labelled GB to the management network NOTE...

Page 22: ...K port to the management network can have unpredictable results Cabling GB and STK to the same network broadcast domain can cause a broadcast storm Daisy chain CMC Network Connection If you have multiple chassis in a rack you can reduce the number of connections to the management network by daisy chaining up to four chassis together If each of the four chassis contains a redundant CMC by daisy cha...

Page 23: ...1 Management Network 2 Standby CMC 3 Active CMC The following figures provide examples of incorrect cabling of CMC 23 ...

Page 24: ...been lost and they may fail over to their redundant CMCs 6 To get started with CMC see Installing Remote Access Software on a Management Station Installing Remote Access Software on a Management Station You can access CMC from a management station using remote access software such as the Telnet Secure Shell SSH or serial console utilities provided on your operating system or using the Web interfac...

Page 25: ... where you want to uninstall the management station features 2 Use the following rpm query command to determine which version of the DRAC Tools is installed rpm qa grep mgmtst racadm 3 Verify the package version to be uninstalled and uninstall the feature by using the rpm e rpm qa grep mgmtst racadm command Configuring Web Browser You can configure and manage CMC servers and modules installed in t...

Page 26: ...d iDRACs on the management network to the comma separated list You can use DNS names and wildcards in your entries Microsoft Phishing Filter If the Microsoft Phishing Filter is enabled in Internet Explorer 7 on your management system and your CMC does not have Internet access accessing CMC may be delayed by a few seconds This delay can happen if you are using the browser or another interface such ...

Page 27: ...management network to be isolated from the server data network It is important to separate this traffic for uninterrupted access to chassis management CMC is connected to the management network All external access to CMC and iDRACs is accomplished through CMC Access to the managed servers conversely is accomplished through network connections to I O modules IOMs This allows the application network...

Page 28: ...rk Using LCD Panel Interface NOTE The option to configure CMC using the LCD panel is available only until CMC is deployed or the default password is changed If the password is not changed the LCD can continue to be used to reconfigure the CMC causing a possible security risk The LCD panel is located on the bottom left corner on the front of the chassis To set up a network using the LCD panel inter...

Page 29: ...following If you have selected the Static option press the center button to continue to the next CMC Network Settings screen then Set the Static IP Address by using the right or left arrow keys to move between positions and the up and down arrow keys to select a number for each position When you have finished setting the Static IP Address press the center button to continue Set the subnet mask and...

Page 30: ...nto the chassis the LCD prompts the user on whether to automatically deploy the server using the previously configured network settings policies To not apply the iDRAC network settings to newly installed servers highlight the No icon and press the center button when a new server is inserted into the chassis the iDRAC network settings do not get configured 11 On the Enclosure screen to apply all en...

Page 31: ...rogrammable strings Set DHCP Configure CMC static IP settings To reset CMC without rebooting the server press and hold the System Identification button for 16 seconds Telnet Provides command line access to CMC through the network The RACADM command line interface and the connect command which is used to connect to the serial console of a server or IO module are available from the CMC command line ...

Page 32: ... password is calvin Launching CMC Using Other Systems Management Tools You can also launch CMC from the Dell Server Administrator or Dell OpenManage IT Assistant To access CMC interface using Dell Server Administrator launch Server Administrator on your management station From the system tree on the left pane of the Server Administrator home page click System Main System Chassis Remote Access Cont...

Page 33: ... up to three NTP servers 3 To set the date and time manually clear Enable NTP and edit the Date and Time fields select the Time Zone from the drop down menu and then click Apply Setting Date and Time on CMC Using RACADM To set the date and time using the command line interface see the config command and cfgRemoteHosts database property group sections in the RACADM Command Line Reference Guide for ...

Page 34: ... The redundant CMC may be pre installed or can be installed later It is important that CMC network is properly cabled to ensure full redundancy or best performance Failovers can occur when you Run the RACADM cmcchangeover command See the cmcchangeover command section in the RACADM Command Line Reference Guide for iDRAC7 and CMC Run the RACADM racreset command on the active CMC See the racreset com...

Page 35: ...after replacing CMC or after failover to standby CMC CMC network cable removal or network connection loss Chassis management resumes after the chassis fails over to the standby CMC Network failover is only enabled in redundant CMC mode CMC reset Chassis management resumes after CMC reboots or chassis fails over to the standby CMC CMC failover command issued Chassis management resumes after the cha...

Page 36: ...dant CMC You can view the health status of the standby CMC in the Web interface For more information about accessing CMC health status in the Web interface see Viewing Chassis Information and Monitoring Chassis and Component Health 36 ...

Page 37: ... connecting through a proxy and if you see the error The XML page cannot be displayed you need to disable the proxy to continue To access the CMC Web interface 1 Open a supported Web browser window For the latest information on supported Web browsers see the Readme located at dell com support manuals 2 In the Address field type the following URL and press Enter To access CMC using IPv4 address htt...

Page 38: ... In the Password field type the user password NOTE This field is case sensitive 3 Optionally select a session timeout This is the amount of time you can stay logged in with no activity before you are automatically logged out The default value is the Web Service Idle Timeout 4 Click OK You are logged into CMC with the required user privileges Related Links Configuring User Accounts and Privileges A...

Page 39: ...g in to CMC using Single Sign on make sure that You have logged into your system using a valid Active Directory user account Single Sign On option is enabled during Active Directory configuration To log in to CMC using Single Sign on 1 Log into the client system using your network account 2 Access the CMC Web interface using https cmcname domain name For example cmc 6G2WXF1 cmcad lab where cmc 6G2...

Page 40: ...le CMCs CMC does not have support for scripting so you cannot run the scripts directly on the CMC For more information about RACADM see the RACADM Command Line Reference Guide for iDRAC7 and CMC For more information about configuring multiple CMCs see Configuring Multiple CMCs Using RACADM Logging in to CMC Using Public Key Authentication You can log into the CMC over SSH without entering a passwo...

Page 41: ...ons The following table provides the list of multiple CMC sessions that are possible using the various interfaces Table 7 Multiple CMC Sessions Interface Number of Sessions CMC Web Interface 4 RACADM 4 Telnet 4 SSH 4 41 ...

Page 42: ...42 ...

Page 43: ...ntly Installed Firmware Versions Updating CMC Firmware Updating iKVM Firmware Updating Server iDRAC Firmware Updating Server Component Firmware Recovering iDRAC Firmware Using CMC Updating IOM Infrastructure Device Firmware Downloading CMC Firmware Before beginning the firmware update download the latest firmware version from support dell com and save it to your local system The following software...

Page 44: ...sfer time In some cases the firmware file transfer time may be as high as 30 minutes To set the Idle Timeout value see Configuring Services During updates of CMC firmware it is normal for some or all of the fan units in the chassis to spin at 100 If you have redundant CMCs installed in the chassis it is recommended to update both the CMCs to the same firmware version at the same time with a single...

Page 45: ... station or shared network or click Browse to navigate to the file location The default CMC firmware image name is firmimg cmc 4 Click Begin Firmware Update and then click Yes to continue The Firmware Update Progress section provides firmware update status information A status indicator displays on the page while the image file uploads File transfer time varies based on connection speed When the i...

Page 46: ...hen the internal update process begins the page automatically refreshes and the Firmware update timer is displayed 5 Additional instructions to follow Do not click the Refresh icon or navigate to another page during the file transfer To cancel the process click Cancel File Transfer and Update This option is available only during file transfer The Update State field displays the firmware update sta...

Page 47: ... status information A status indicator displays on the page while the image file uploads File transfer time varies based on connection speed When the internal update process begins the page automatically refreshes and the Firmware update timer is displayed NOTE Do not click the Refresh icon or navigate to another page during the file transfer NOTE The file transfer timer is not displayed when upda...

Page 48: ...Click Begin Firmware Update and then click Yes to continue The Firmware Update Progress section provides firmware update status information A status indicator displays on the page while the image file uploads File transfer time varies based on connection speed When the internal update process begins the page automatically refreshes and the Firmware update timer is displayed 6 Additional instructio...

Page 49: ... executed on the server operating system For supported servers a special repair or installation package with usc file extension is available This enables you to install the Lifecycle Controller firmware through the firmware update facility available on the native iDRAC Web Browser interface You can also install Lifecycle Controller firmware through an appropriate installation package executed on t...

Page 50: ...sions after an initial selection is made Examples Following are some examples where the filtering mechanisms are applied If the BIOS filter is selected only the BIOS inventory for all servers is displayed If the set of servers consists of a number of server models and a server is selected for BIOS update the automatic filtering logic automatically removes all the other servers that do not match wi...

Page 51: ...ce Guide for iDRAC7 and CMC available at dell com support manuals Viewing Firmware Inventory You can view the summary of the firmware versions for all components and devices for all servers currently present in the chassis along with their status Viewing Firmware Inventory Using CMC Web Interface To view the firmware inventory 1 In the system tree go to Server Overview and then click Update Server...

Page 52: ...lots only those slots populated by servers are displayed Name Displays the name of the server in each slot Model Displays the model of the server Component Device Displays a description of the component or device on the server If the column width is too narrow the mouse over tool provides a view of the description Current Version Displays the current version of component or device on the server Ro...

Page 53: ...heduling If an attempt is made a confirmation popup message is displayed allowing the intended navigation to be cancelled Otherwise the operation is interrupted An interruption especially during an Update operation may cause the firmware image file upload to be terminated before proper completion After an operation has been submitted for scheduling ensure that the confirmation popup message indica...

Page 54: ... server s is available on the Lifecycle Controller Jobs page This page enables deletion of single or multiple jobs or purging of all jobs on the server See the Troubleshooting section Managing Lifecycle Controller jobs on a remote system BIOS updates are specific to the model of the server The selection logic is based on this behavior Sometimes even though a single Network Interface Controller NIC...

Page 55: ...t one of the following options Reboot Now Reboot immediately On Next Reboot Manually reboot the server at a later time NOTE This step is not valid for Lifecycle Controller and 32 bit Diagnostics firmware update A server reboot is performed immediatly for these devices 6 Click Update The firmware version is updated for the selected component or device Deleting Scheduled Server Component Firmware Jo...

Page 56: ...56 ...

Page 57: ...graphic overlays and text hints are automatically changed to reflect the current state Figure 1 Example of Chassis Graphics in the Web Interface To view the chassis health go to Chassis Overview Properties Health It displays the overall health status for the chassis active and standby CMCs sever modules IO Modules IOMs fans iKVM power supplies PSUs temperature sensors and LCD assembly Detailed inf...

Page 58: ...n the position slot where the component has been installed Empty positions are shown with a charcoal gray background The component icon visually indicates the state of the component Other components display icons that visually represent the physical component Icons for servers and IOMs span multiple slots when a double size component is installed Hovering over a component displays a tooltip with a...

Page 59: ...r the slot name or slot number of a server a tool tip is displayed with the server s model name and service tag if available Viewing Chassis Summary You can view the summary of the installed components in the chassis To view the chassis summary information in the CMC Web interface go to Chassis Overview Properties Summary The Chassis Summary page is displayed For more information see the CMC Onlin...

Page 60: ...or storage servers do any of the following 1 Go to Chassis Overview Properties Health The Chassis Health page displays a graphical overview of all the servers installed in the chassis Server health status is indicated by the overlay of the server subgraphic Move the cursor to hover over an individual server subgraphic A corresponding text hint or screen tip provides additional information for that...

Page 61: ...server some or all of the fan units in the chassis spin at 100 This is normal To view the health status of the fans in the CMC Web interface do any of the following 1 Go to Chassis Overview Properties Health The Chassis Health page is displayed The lower section of chassis graphics provides the rear view of the chassis and contains the health status of the fan Fan health status is indicated by the...

Page 62: ...f the PSUs associated with the chassis It provides the overall power health system power status and the power supply redundancy status For more information see the CMC Online Help Viewing Information and Health Status of Temperature Sensors To view the health status of the temperature sensors Go to Chassis Overview Temperature Sensors The Temperature Sensors Status page displays the status and rea...

Page 63: ...he basic configuration you can do the following Modify the network settings if required Configure interfaces to access CMC Configure LED display Setup Chassis Groups if required Configure Servers IOMs or iKVM Configure VLAN Settings Obtain the required certificates Add and configure CMC users with privileges Configure and enable e mail alerts and SNMP traps Set the power cap policy if required Rel...

Page 64: ...ettings Viewing and Modifying CMC Network LAN Settings Using CMC Web Interface To view and modify the CMC LAN network settings using CMC Web interface 1 In the system tree go to Chassis Overview and click Network Network The Network Configuration page displays the current network settings 2 Modify the general IPv4 or IPv6 settings as required For more information see the CMC Online Help 3 Click Ap...

Page 65: ...anism automatically For an IPv6 network to disable the Autoconfiguration feature and specify a static CMC IPv6 address gateway and prefix length type racadm config g cfgIPv6LanNetworking o cfgIPv6AutoConfig 0 racadm config g cfgIPv6LanNetworking o cfgIPv6Address IPv6 address racadm config g cfgIPv6LanNetworking o cfgIPv6PrefixLength 64 racadm config g cfgIPv6LanNetworking o cfgIPv6Gateway IPv6 add...

Page 66: ...ettings are valid only if you have registered the CMC on the DNS server by setting cfgDNSRegisterRac to 1 CMC Name By default the CMC name on the DNS server is cmc service tag To change the CMC name on the DNS server type racadm config g cfgLanNetworking o cfgDNSRacName name where name is a string of up to 63 alphanumeric characters and hyphens For example cmc 1 d 345 DNS Domain Name The default D...

Page 67: ...lick Network Network The Network Configuration page is displayed 2 In the IPv4 Settings section click Advanced Settings The Network Security page is displayed 3 Specify the IP range and IP blocking values For more information see the CMC Online Help 4 Click Apply to save your settings Configuring CMC Network Security Settings Using RACADM IP filtering compares the IP address of an incoming login t...

Page 68: ...external chassis management network racadm config g cfgLanNetworking o cfgNicVLanEnable 1 2 Specify the VLAN ID for the external chassis management network racadm config g cfgLanNetworking o cfgNicVlanID VLAN id The valid values for VLAN id are 1 4000 and 4021 4094 Default is 1 For example racadm config g cfgLanNetworking o cfgNicVlanID 1 3 Then specify the VLAN priority for the external chassis m...

Page 69: ...ts wait at least one minute for the services to become available again A Web server reset usually happens as a result of any of the following events Network configuration or network security properties are changed through the CMC Web user interface or RACADM Web Server port configuration is changed through the Web user interface or RACADM CMC is reset A new SSL server certificate is uploaded NOTE ...

Page 70: ...ctiveSessions N A cfgSsnMgtSSHTimeout N A cfgSsnMgtTelnetMaxSessions N A cfgSsnMgtTelnetActiveSessions N A cfgSsnMgtTelnetTimeout N A Configuring CMC Extended Storage Card You can enable or repair the optional Removable Flash Media for use as an extended non volatile storage Some CMC features depend on extended nonvolatile storage for their operation To enable or repair the Removable Flash Media u...

Page 71: ...ater to a different group To set up the Chassis Group using the CMC Web interface 1 Log in with chassis administrator privileges to the chassis planned as the leader 2 Click Setup Group Administration The Chassis Group page is displayed 3 In the Chassis Group page under Role select Leader A field to add the group name is displayed 4 Enter the group name in the Group Name field and then click Apply...

Page 72: ...bers if more than one is selected that it has been removed from the group The member name is removed The member chassis may not receive the message if a network issue prevents contact between the leader and the member In this case disable the member from the member chassis to complete the removal Related Links Disabling an Individual Member at the Member Chassis Disbanding a Chassis Group To disba...

Page 73: ... with administrator privileges to the leader chassis 2 Select the Lead chassis in the tree 3 Click Setup Group Administration 4 In the Chassis Properties Propagation section select one of the propagation types On Change Propagation Select this option for automatic propagation of the selected chassis property settings The property changes are propagated to all current group members whenever lead pr...

Page 74: ...r inventory report contains data that was most recently returned by each Chassis Group member during the Chassis Group leader s normal polling once every 30s To get the most accurate server inventory report The Chassis Group leader chassis and all Chassis Group member chassis must be in Chassis Power State On All servers in the associated chassis must be powered on The inventory data for the assoc...

Page 75: ...entory report is imported into MS Excel and if a message is displayed prompting for additional information select comma delimited to import the file into MS Excel Obtaining Certificates The following table lists the types of certificates based on the login type Table 11 Types of Login and Certificate Login Type Certificate Type How to Obtain Single Sign on using Active Directory Trusted CA certifi...

Page 76: ...request to a certificate authority referred to as a CA in the Web interface for a secure server certificate Secure server certificates ensure the identity of a remote system and ensure that information exchanged with the remote system cannot be viewed or changed by others To ensure the security for your CMC it is strongly recommended that you generate a CSR submit the CSR to a certificate authorit...

Page 77: ...R is overwritten before its server certificate is granted from a certificate authority CMC does not accept the server certificate because the information it uses to authenticate the certificate has been lost Take caution when generating a CSR to prevent overwriting any pending CSR Generating a New Certificate Signing Request Using Web Interface To generate a CSR using the CMC Web interface 1 In th...

Page 78: ...cate you must have Chassis Configuration Administrator privileges Uploading Webserver Key and Certificate Using CMC Web Interface To upload a webserver key and certificate using the CMC Web interface 1 In the system tree go to Chassis Overview and click Network SSL The SSL Main Menu is displayed 2 Select Upload Web Key and Certificate option and click Next 3 Specify the Private Key File and the Ce...

Page 79: ...ration file is myfile cfg You can rename the file The cfg file does not contain user passwords When the cfg file is uploaded to the new CMC you must re add all passwords 2 Open a Telnet SSH text console to the CMC log in and type racadm getconfig f myfile cfg NOTE Redirecting the CMC configuration to a file using getconfig f is only supported with the remote RACADM interface 3 Modify the configura...

Page 80: ...are modifications when the CMC is configured If a modified object represents a new index the index is created on the CMC during configuration You cannot specify a desired index in a cfg file Indexes may be created and deleted Over time the group may become fragmented with used and unused indexes If an index is present it is modified If an index is not present the first available index is used This...

Page 81: ...ject value pairs with no white space between the object or value White spaces that are included after the value are ignored A white space inside a value string remains unmodified Any character to the right of the for example a second a and so on is taken as is These characters are valid modem chat script characters cfgLanNetworking group name cfgNicIpAddress 143 154 133 121 object value The cfg pa...

Page 82: ...s When you modify the CMC IP address in the configuration file remove all unnecessary variable value entries Only the actual variable group s label with and remains including the two variable value entries pertaining to the IP address change Example Object Group cfgLanNetworking cfgLanNetworking cfgNicIpAddress 10 35 10 110 cfgNicGateway 10 35 10 1 This file is updated as follows Object Group cfgL...

Page 83: ... these properties see the CMC Online Help 2 To terminate the session click Terminate for a session Viewing and Terminating CMC Sessions Using RACADM You must have administrator privileges to terminate CMC sessions using RACADM To view the current user sessions use the getssninfo command To terminate a user session use the closessn command For more information about these commands see the RACADM Co...

Page 84: ...84 ...

Page 85: ...ot names must not begin with the following strings Switch Fan PS KVM DRAC MC Chassis Housing Left Housing Right Housing Center The strings Server 1 through Server 16 may be used but only for the corresponding slot For example Server 3 is a valid name for slot 3 but not for slot 4 Note that Server 03 is a valid name for any slot NOTE To change a slot name you must have Chassis Configuration Adminis...

Page 86: ... Configuring iDRAC QuickDeploy Network Settings Modifying iDRAC Network Settings for Individual Server iDRAC Modifying iDRAC Network Settings Using RACADM Configuring iDRAC QuickDeploy Network Settings Use the QuickDeploy Settings to configure the network settings for newly inserted servers After enabling QuickDeploy the QuickDeploy settings are applied to servers when that server is installed To ...

Page 87: ...ess of iDRAC in the server in slot 1 of the enclosure The IP address of each subsequent iDRAC is incremented by 1 for each slot from slot 1 s static IP address In the case where the IP address plus the slot number is greater than the subnet mask an error message is displayed NOTE The subnet mask and the gateway are not incremented like the IP address For example if the starting IP address is 192 1...

Page 88: ... network configuration settings may require a couple of minutes to propagate from CMC to iDRAC Clicking Refresh too soon may display only partially correct data for one or more iDRAC servers Modifying iDRAC Network Settings for Individual Server iDRAC Using this table you can configure the iDRAC network configurations settings for each installed server The initial values displayed for each of the ...

Page 89: ... component is removed Configuring iDRAC VLAN Tag Settings Using Web Interface To configure VLAN for server using the CMC Web interface 1 Go to any of the following pages In the system tree go to Chassis Overview and click Network VLAN In the system tree go to Chassis Overview Server Overview and click Network VLAN The VLAN Tag Settings page is displayed 2 In the iDRAC section enable VLAN for the s...

Page 90: ...errides the System BIOS boot settings The boot device that you specify must exist and contain bootable media You can set the following devices for first boot Table 13 Boot Devices Boot Device Description PXE Boot from a Preboot Execution Environment PXE protocol on the network interface card Hard Drive Boot from the hard drive on the server Local CD DVD Boot from a CD DVD drive on the server Virtu...

Page 91: ...for which you want to set the first boot device 2 Go to Setup First Boot Device The First Boot Device page is displayed 3 From the First Boot Device drop down menu select the boot device you want to use for each server 4 If you want the server to boot from the selected device every time it boots clear the Boot Once option for the server If you want the server to boot from the selected device only ...

Page 92: ...erver cloning feature allows you to apply all BIOS settings from a specified server to one or more servers BIOS settings that can be cloned are those BIOS settings which can be modified and are intended to be replicated across servers The server cloning feature supports iDRAC6 and iDRAC7 Servers Earlier generation RAC servers are listed but are greyed out on the main page and are not enabled to us...

Page 93: ...torage media prevents access to Stored Profiles and disables the Server Cloning feature To add or save a profile 1 In the BIOS Profile page in Save and Apply Profiles section select the server from whose settings the profile is to be generated and then click Save Profile The Save BIOS Profile section is displayed 2 In the Profile Name and Description fields enter the profile name and description o...

Page 94: ... the blade cloning operation You must first enable CSIOR to complete the blade cloning operation 4 Click OK to apply the profile to the selected server The selected profile is applied to the server s and the server s is rebooted immediately For more information see the CMC Online Help Related Links Accessing BIOS Profile Page Importing Profile You can import a BIOS profile that is stored previousl...

Page 95: ...rofiles page in the Save and Apply Profiles section click View in the BIOS settings column for the server for which you want to view the BIOS settings information The View Settings page is displayed Only BIOS settings on the server which may be modified by applying a profile cloneable settings are displayed The settings are partitioned into groups in the same way they are displayed in the iDRAC BI...

Page 96: ...trator privileges This is true even if the same user does not have an account on iDRAC or if the account does not have the Administrator s privileges A CMC user who does NOT have the server administrative privilege but has the same account on iDRAC is automatically logged into iDRAC using single sign on Once on the iDRAC site this user is granted the privileges that were created for the iDRAC acco...

Page 97: ...e iDRAC User s Guide Related Links Launching Remote Console from Chassis Health Page Launching Remote Console from Server Status Page Launching Remote Console from Servers Status Page Launching Remote Console from Chassis Health Page To launch a remote console from the CMC Web interface do any of the following 1 In the system tree go to Chassis Overview and then click Properties Health The Chassis...

Page 98: ...98 ...

Page 99: ...on This property overrides the individual alert setting Make sure that the SNMP or e mail alert destinations are configured to receive the alerts Enabling Or Disabling Alerts Using CMC Web Interface To enable or disable generating alerts 1 In the system tree go to Chassis Overview and then click Alerts Chassis Events The Chassis Events page is displayed 2 Under Chassis Event Filters Configuration ...

Page 100: ...ucture The Test Trap functionality cannot detect incorrect choices based on the current network configuration example use of an IPv6 destination in an IPv4 only environment In the Community String field enter a valid community string to which the destination management station belongs This community string differs from the community string on the Chassis Network Services page The SNMP traps commun...

Page 101: ...8002 Table 14 Event Traps Filter Masks Event Filter Mask Value Fan Probe Failure 0x1 Battery Probe Warning 0x2 Temperature Probe Warning 0x8 Temperature Probe Failure 0x10 Redundancy Degraded 0x40 Redundancy Lost 0x80 Power Supply Warning 0x800 Power Supply Failure 0x1000 Power Supply Absent 0x2000 Hardware Log Failure 0x4000 Hardware Log Warning 0x8000 Server Absent 0x10000 Server Failure 0x20000...

Page 102: ...g g cfgTraps i index Configuring E Mail Alert Settings When CMC detects a chassis event such as an environmental warning or a component failure it can be configured to send an e mail alert to one or more e mail addresses You must configure the SMTP e mail server to accept relayed emails from the CMC IP address a feature which is normally turned off in most mail servers due to security concerns For...

Page 103: ...address to receive the e mail alerts racadm config g cfgEmailAlert o cfgEmailAlertAddress email address i index where email address is a valid e mail address and index is the index value you specified in step 4 6 Specify the name of the person receiving the e mail alert racadm config g cfgEmailAlert o cfgEmailAlertEmailName email name i index where email name is the name of the person or group rec...

Page 104: ...104 ...

Page 105: ... users can be local or directory service users Except where a CMC user has Server Administrator privilege privileges granted to a CMC user are not automatically transferred to the same user on a server because server users are created independently from CMC users In other words CMC Active Directory users and iDRAC Active Directory users reside on two different branches in the Active Directory tree...

Page 106: ...e can perform all power related operations They can control chassis power operations including power on power off and power cycle NOTE To configure power settings the Chassis Configuration Administrator privilege is needed Server Administrator This is a blanket privilege granting a CMC user all rights to perform any operation on any servers present in the chassis When a user with Server Administra...

Page 107: ...an execute system diagnostic commands Fabric A Administrator User can set and configure the Fabric A IOM which resides in either slot A1 or slot A2 of the I O slots Fabric B Administrator User can set and configure the Fabric B IOM which resides in either slot B1 or slot B2 of the I O slots Fabric C Administrator User can set and configure the Fabric C IOM which resides in either slot C1 or slot C...

Page 108: ...r Clear Logs Administrator Chassis Control Administrator Power commands Server Administrator Test Alert User Debug Command Administrator Fabric A Administrator Fabric B Administrator Fabric C Administrator None No assigned permissions Table 17 Comparison of Privileges Between CMC Administrators Power Users and Guest Users Privilege Set Administrator Permissions Power User Permissions Guest User Pe...

Page 109: ...onfirm Password fields 5 Click Apply The password is changed for user ID 1 Configuring Local Users You can configure up to 16 local users in CMC with specific access permissions Before you create a CMC local user verify if any current users exist You can set user names passwords and roles with the privileges for these users The user names and passwords can be changed using any of the CMC secured i...

Page 110: ...dex number which is indicated by the cfgUserAdminIndex object is available for use If a name is displayed after the that index is taken by that user name When you manually enable or disable a user with the racadm config subcommand you must specify the index with the i option Observe that the cfgUserAdminIndex object displayed in the previous example contains a character It indicates that it is a r...

Page 111: ...tive permissions role based authority 1 Locate an available user index using the command syntax racadm getconfig g cfgUserAdmin i index 2 Type the following commands with the new user name and password racadm config g cfgUserAdmin o cfgUserAdminPrivilege i index user privilege bitmask value NOTE For a list of valid bit mask values for specific user privileges see the RACADM Command Line Reference ...

Page 112: ...he following figure using standard schema for Active Directory integration requires configuration on both Active Directory and CMC In Active Directory a standard group object is used as a role group A user who has CMC access is a member of the role group To give this user access to a specific CMC card the role group name and its domain name need to be configured on the specific CMC card The role a...

Page 113: ...ogin User 0x00000001 4 None No assigned permissions 0x00000000 5 None No assigned permissions 0x00000000 NOTE The Bit Mask values are used only when setting Standard Schema with the RACADM NOTE For more information about user privileges see Types of Users Configuring Standard Schema Active Directory To configure CMC for a Active Directory login access 1 On an Active Directory server domain control...

Page 114: ...ou are uploading You must type the absolute file path which includes the full path and the complete file name and file extension The SSL certificates for the domain controllers must be signed by the root certificate authority signed certificate The root certificate authority signed certificate must be available on the management station accessing CMC 9 If you have enabled Single Sign On SSO in the...

Page 115: ... schema includes the rules that determine the type of data that can be added or included in the database One example of a class that is stored in the database is the user class Some example user class attributes can include the user s first name last name phone number and so on You can extend the Active Directory database by adding your own unique attributes and classes for specific requirements D...

Page 116: ...ject for users to authenticate The following figure shows that the association object provides the connection that is needed for the authentication and authorization NOTE The RAC privilege object applies to DRAC 4 DRAC 5 and CMC You can create as many or as few association objects as required However you must create at least one Association Object and you must have one RAC device object for each R...

Page 117: ...RAC1 RAC2 as RAC Devices in A01 6 Add User3 as Members in Association Object 2 A02 Priv2 as Privilege Objects in A02 and RAC2 as RAC Devices in A02 The following figure provides an example of Active Directory objects in multiple domains In this scenario you have two CMCs RAC1 and RAC2 and three existing Active Directory users user1 user2 and user3 User1 is in Domain1 and user2 and user 3 are in Do...

Page 118: ...nstalling Dell Extension to the Active Directory Users and Computers Snap In Adding CMC Users and Privileges to Active Directory Configuring Active Directory With Extended Schema Using CMC Web Interface Configuring Active Directory With Extended Schema Using RACADM Extending Active Directory Schema Extending your Active Directory schema adds a Dell organizational unit schema classes and attributes...

Page 119: ...ass Definitions for Classes Added to the Active Directory Schema Class Name Assigned Object Identification Number OID delliDRACDevice 1 2 840 113556 1 8000 1280 1 7 1 1 delliDRACAssociation 1 2 840 113556 1 8000 1280 1 7 1 2 dellRAC4Privileges 1 2 840 113556 1 8000 1280 1 1 1 3 dellPrivileges 1 2 840 113556 1 8000 1280 1 1 1 4 dellProduct 1 2 840 113556 1 8000 1280 1 1 1 5 Table 20 dellRacDevice C...

Page 120: ... Table 23 dellPrivileges Class OID 1 2 840 113556 1 8000 1280 1 1 1 4 Description Used as a container Class for the Dell Privileges Authorization Rights Class Type Structural Class SuperClasses User Attributes dellRAC4Privileges Table 24 dellProduct Class OID 1 2 840 113556 1 8000 1280 1 1 1 5 Description The main class from which all Dell products are derived Class Type Structural Class SuperClas...

Page 121: ...LDAPTYPE_BOOLEAN 1 3 6 1 4 1 1466 115 121 1 7 TRUE Attribute dellIsUserConfigAdmin Description TRUE if the user has User Configuration Administrator rights on the device OID 1 2 840 113556 1 8000 1280 1 1 2 5 Boolean LDAPTYPE_BOOLEAN 1 3 6 1 4 1 1466 115 121 1 7 TRUE Attribute delIsLogClearAdmin Description TRUE if the user has Clear Logs Administrator rights on the device OID 1 2 840 113556 1 800...

Page 122: ...er LDAPTYPE_INTEGER Installing Dell Extension to the Active Directory Users and Computers Snap In When you extend the schema in Active Directory you must also extend the Active Directory Users and Computers Snap in so the administrator can manage RAC CMC devices users and user groups RAC associations and RAC privileges When you install your systems management software using the Dell Systems Manage...

Page 123: ...MC user privileges see Types of Users Creating Association Object The Association Object is derived from a Group and must contain a Group Type The Association Scope specifies the Security Group Type for the Association Object When you create an Association Object choose the Association Scope that applies to the type of objects you intend to add For example if you select Universal the association o...

Page 124: ...ended Schema Using CMC Web Interface To configure Active Directory with extended schema using CMC Web interface NOTE For information about the various fields see the CMC Online Help 1 In the system tree go to Chassis Overview and then click User Authentication Directory Services 2 Select Microsoft Active Directory Extended Schema The settings to be configured for extended schema is displayed on th...

Page 125: ...resses to be obtained automatically by the DHCP server Manually configure a DNS server IP address by leaving the Use DHCP to Obtain DNS Server Addresses check box unchecked and then typing your primary and alternate DNS server IP addresses in the fields provided 12 Click Apply Changes The Active Directory settings for extended schema is configured Configuring Active Directory With Extended Schema ...

Page 126: ...mands racadm config g cfgLanNetworking o cfgDNSServersFromDHCP 0 racadm config g cfgLanNetworking o cfgDNSServer1 primary DNS IP address racadm config g cfgLanNetworking o cfgDNSServer2 secondary DNS IP address The Extended Schema feature configuration is complete Configuring Generic LDAP Users CMC provides a generic solution to support Lightweight Directory Access Protocol LDAP based authenticati...

Page 127: ...e default attribute is uid 3 If more than one object is found then the process returns an error 4 Unbind and perform a bind with the user s DN and password 5 If the bind fails then the login fails If these steps succeed the user is authenticated Authorization of LDAP Users To authorize a user 1 Search each configured group for the user s domain name within the member or uniqueMember attributes An ...

Page 128: ...AP Role Group page is displayed 6 Specify the group domain name and privileges for the role group 7 Click Apply to save the role group settings click Go Back To Configuration page and then select Generic LDAP 8 If you have selected Certificate Validation Enabled option then in the Manage Certificates section specify the CA certificate to validate the LDAP server certificate during SSL handshake an...

Page 129: ...following query is used to search the DNS for SRV records _ldap _tcp domainname com ldap in the above query is the cfgLDAPSRVLookupServiceName property cfgLDAPSRVLookupDomainName is configured to be domainname com For more information about the RACADM objects see the RACADM Command Line Reference Guide for iDRAC7 and CMC available at dell com support manuals 129 ...

Page 130: ...130 ...

Page 131: ... well If you want to disable all other login interfaces navigate to the Services page and disable all or some login interfaces Microsoft Windows 2000 Windows XP Windows Server 2003 Windows Vista Windows 7 and Windows Server 2008 can use Kerberos as the authentication mechanism for SSO and smart card login For information on Kerberos see the Microsoft website Related Links System Requirements Prere...

Page 132: ... each CMC configured to use Kerberos DES encryption but not pre authentication Configure the browser for SSO or smart card login Register the CMC users to the Key Distribution Center with Ktpass this also outputs a key to upload to CMC Related Links Configuring Standard Schema Active Directory Configuring Extended Schema Active Directory Configuring Browser For SSO Login Generating Kerberos Keytab...

Page 133: ...g Browser For SSO Login Single Sign On SSO is supported on Internet Explorer versions 6 0 and later and Firefox versions 3 0 and later NOTE The following instructions are applicable only if CMC uses Single Sign On with Kerberos authentication Internet Explorer To configure Internet Explorer for Single Sign On 1 In the Internet Explorer select Tools Internet Options 2 On the Security tab under Sele...

Page 134: ...pply The settings are saved You can test the Active Directory using Kerberos authentication using the RACADM command testfeature f adkrb u user domain where user is a valid Active Directory user account A command success indicates that CMC is able to acquire Kerberos credentials and access the user s Active Directory account If the command is not successful resolve the error and run the command ag...

Page 135: ...ring CMC SSO Login Or Smart Card Login For Active Directory Users Using RACADM In addition to the steps performed while configuring Active Directory run the following command to enable SSO racadm g cfgActiveDirectory o cfgADSSOEnable 1 In addition to the steps performed while configuring Active Directory use the following objects to enable smart card login cfgSmartCardLogonEnable cfgSmartCardCRLEn...

Page 136: ...136 ...

Page 137: ...Secure Shell SSH client connections RACADM command support Built in connect command connecting to the serial console of servers and I O modules also available as racadm connect Command Line editing and history Session timeout control on all console interfaces CMC Command Line Commands When you connect to the CMC command line you can enter these commands Table 26 CMC Command Line Commands Command D...

Page 138: ...SSH using Putty exe Running OpenSSH at the Windows command prompt does not provide full functionality that is some keys do not respond and no graphics are displayed For Linux run SSH Client Services to connect to CMC with any shell Four simultaneous SSH sessions are supported at a time The session timeout is controlled by the cfgSsnMgtSshIdleTimeout property For more information see the database p...

Page 139: ... adding new public keys ensure that the existing keys are not already at the index where the new key is added CMC does not perform checks to ensure previous keys are deleted before a new one is added As soon as a new key is added it is automatically in effect as long as the SSH interface is enabled When using the public key comment section of the public key remember that only the first 16 characte...

Page 140: ...for using the public key Save the public key to a file to upload later Copy and paste the text from the Public key for pasting window when adding the account using the text option Generating Public Keys for Linux The ssh keygen application for Linux clients is a command line tool with no graphical user interface Open a terminal window and at the shell prompt type ssh keygen t rsa b 1024 C testing ...

Page 141: ...nicom Hilgraeve s HyperTerminal Private Edition version 6 3 Perform the steps in the following subsections to configure the required type of terminal software Configuring Linux Minicom Minicom is a serial port access utility for Linux The following steps are valid for configuring Minicom version 2 0 Other Minicom versions may differ slightly but require the same basic settings See the information ...

Page 142: ...nnecting to Servers or I O Modules Using Connect Command The CMC can establish a connection to redirect the serial console of server or I O modules For servers serial console redirection can be accomplished using CMC command line and the connect or racadm connect command For more information see RACADM Command Line Reference Guide for iDRAC7 and CMC iDRAC Web interface serial console redirection f...

Page 143: ... see the server s console redirection through CMC s serial port that includes both the BIOS serial console and the operating system serial console NOTE To see the BIOS boot screens serial redirection has to be enabled in the servers BIOS Setup Also you must set the terminal emulator window to 80x25 Otherwise the screen is garbled NOTE Not all keys work in the BIOS setup screens so provide appropri...

Page 144: ...llowing steps are specific to the Linux GRand Unified Bootloader GRUB Similar changes are necessary for using a different boot loader NOTE When you configure the client VT100 emulation window set the window or application that is displaying the redirected console to 25 rows x 80 columns to ensure proper text display otherwise some text screens may be garbled Edit the etc grub conf file as follows ...

Page 145: ...on add the following line to all options console ttyS1 57600 The example shows console ttyS1 57600 added to only the first option Configuring Linux for Server Serial Console Redirection After Boot Edit the file etc inittab as follows Add a new line to configure agetty on the COM2 serial port co 2345 respawn sbin agetty h L 57600 ttyS1 ansi The following example shows the file with the new line ini...

Page 146: ...l it pr 12345 powerokwait sbin shutdown c Power Restored Shutdown Cancelled Run gettys in standard runlevels co 2345 respawn sbin agetty h L 57600 ttyS1 ansi 1 2345 respawn sbin mingetty tty1 2 2345 respawn sbin mingetty tty2 3 2345 respawn sbin mingetty tty3 4 2345 respawn sbin mingetty tty4 5 2345 respawn sbin mingetty tty5 6 2345 respawn sbin mingetty tty6 Run xdm in runlevel 5 xdm is now a sep...

Page 147: ...odule is moved to a chassis that does not support FlexAddress the factory assigned WWN MAC IDs is used The FlexAddress feature card contains a range of MAC addresses Before installing FlexAddress you can determine the range of MAC addresses contained on a FlexAddress feature card by inserting the SD card into an USB Memory Card Reader and viewing the pwwn_mac xml file This clear text XML file on t...

Page 148: ... delivered on a Secure Digital SD card that must be inserted into CMC to activate the feature To activate the FlexAddress feature software updates may be required if you are not activating FlexAddress these updates are not required The updates listed in the following table include server module BIOS I O mezzanine BIOS or firmware and CMC firmware You must apply these updates before you enable Flex...

Page 149: ...he single CMC module for a non redundant system NOTE If CMC firmware that supports FlexAddress version 1 10 or later is not installed the feature is not activated See the Chassis Management Controller CMC Secure Digital SD Card Technical Specification document for SD card installation instructions NOTE The SD card contains a FlexAddress feature Data contained on the SD card is encrypted and may no...

Page 150: ...sage Actions No feature card inserted Check CMC to verify that the SD card was properly inserted In a redundant CMC configuration ensure that the CMC with the SD feature card installed is the active CMC and not the standby CMC The feature card inserted is valid and contains the following feature s FlexAddress The feature card is bound to this chassis No action required The feature card inserted is...

Page 151: ...ature is deactivated and no change is made to the card To deactivate the FlexAddress feature and restore the SD card racadm feature d c flexaddress The command returns the following status message if it is successfully deactivated feature FlexAddress is deactivated on the chassis successfully If the chassis is not powered down prior to execution the command fails with the following error message E...

Page 152: ...er management MAC address NOTE If Fabric A is enabled unpopulated slots display chassis assigned MAC addresses for Fabric A and MAC or WWNs for Fabrics B and C if they are in use by populated slots WWN MAC Addresses Displays FlexAddress configuration for each slot in the chassis Information displayed includes iDRAC management controller is not a fabric but its FlexAddress is treated like one Slot ...

Page 153: ...server Selected slots have FlexAddress enabled for all fabrics that are enabled For example it is not possible to enable Fabric A and B and have Slot 1 be FlexAddress enabled on Fabric A but not on Fabric B NOTE Make sure that the Blade Servers are powered off before changing the fabric level A B C or DRAC flex address Related Links Wake On LAN with FlexAddress Configuring FlexAddress for Chassis ...

Page 154: ...disable slots use the following RACADM command racadm setflexaddr i slot state where slot 1or 16 and state 0 or 1 0 is disable and 1 is enable For more information on setflexaddr command see the RACADM Command Line Reference Guide for iDRAC7 and CMC Configuring FlexAddress for Server Level Slots At the server level you can enable or disable the FlexAddress feature for individual slots Configuring ...

Page 155: ...and slot persistent WWN MAC addresses to various fabrics and slots within the chassis This feature is enabled on a per fabric and per slot basis NOTE For more information on the FlexAddress feature see CMCNoble_About Flexaddress WWN MAC Addresses The WWN MAC Address section displays the WWN MAC information that is assigned to all servers even if those server slots are currently empty Location disp...

Page 156: ...lotstate ERROR Insufficient user privileges to perform operation Deactivating FlexAddress feature with chassis powered ON racadm feature d c flexaddress ERROR Unable to deactivate the feature because the chassis is powered ON Guest user tries to deactivate the feature on the chassis racadm feature d c flexaddress ERROR Insufficient user privileges to perform operation Changing the slot fabric Flex...

Page 157: ...r or network or loan rent lease or transfer them to another user except as permitted by this agreement LIMITED WARRANTY Dell warrants that the Software disks is free from defects in materials and workmanship under normal use for ninety 90 days from the date you receive them This warranty is limited to you and is not transferable Any implied warranties are limited to ninety 90 days from the date yo...

Page 158: ... only those rights set forth herein Contractor manufacturer is Dell Products L P One Dell Way Round Rock Texas 78682 GENERAL This license is effective until terminated It terminates upon the conditions set forth above or if you fail to comply with any of its terms Upon termination you agree that the Software and accompanying materials and all copies thereof is destroyed This agreement is governed ...

Page 159: ... C2 denotes Fabric Cin bank 2 The chassis supports three fabric or protocol types The IOMs and Mezzanine Cards in a group must have the same or compatible fabric types Group A IOMS are always connected to the servers on board Ethernet adapters the fabric type of Group A is always Ethernet For Group B the IOM slots are permanently connected to the first MC slot in each server module For Group C the...

Page 160: ...invalid hardware configurations For example An Ethernet MC connected to a Fibre Channel IOM is an invalid configuration However an Ethernet MC connected to both an Ethernet switch and an Ethernet pass through IOM installed in the same IOM group is a valid connection A Fibre Channel pass through IOM and a fibre channel switch IOM in slots B1 and B2 is a valid configuration if the first MCs on all o...

Page 161: ...le fabric type from an IOM already installed in its group CMC holds the newly installed IOM in powered off state causes the IOM s error LED to blink and logs entries in CMC and hardware logs about the mismatch Fresh Power up Scenario When the chassis is plugged in and powered up the I O modules have priority over the servers The first IOM in each group is allowed to power up before the others At t...

Page 162: ... CMC is not saved to the switch s permanent startup configuration To save the IP address configuration permanently you must enter the connect switch n command or racadm connect switch n RACADM command or use a direct interface to the IOM GUI to save this address to the startup configuration file 4 Click Apply The network settings are configured for the IOM s NOTE For IOMs that are manageable you c...

Page 163: ...view Update Chassis Overview Chassis Controller Update Chassis Overview iKVM Update The Firmware Update page is displayed which provides a link to access the IOM Firmware and Software page 2 In the IOM Firmware and Software page in the IOM Software section select the checkbox in the Update column for the IOM you want to update the software and click Apply Software Update Alternatively to rollback ...

Page 164: ...tup VLAN Manager The VLAN Manager page displays the IOM s that are powered on and the available ports 2 In the Select I O Modulesection select the configuration type from the drop down list and then select the required IOM s For information about the fields see CMC Online Help 3 In the Specify Port Range section select the range of fabric ports to be assigned to the selected IOM s For information ...

Page 165: ...gged VLANs for IOM s using the CMC Web interface 1 In the system tree go to I O Module Overview and click Setup VLAN Manager The VLAN Manager page is displayed 2 In the Select I O Module section select the required IOMs 3 In the Specify Port Range section select the range of fabric ports to be assigned to the selected IOM s For information about the fields see CMC Online Help 4 Select the Selector...

Page 166: ...Ns are updated with the configurations of the newly assigned untagged VLAN An Operation Successful message is displayed The current VLAN settings that are assigned to the IOMs are displayed in the VLAN Assignment Summary field Resetting VLANs for IOMs Using CMC Web Interface To reset VLANs for IOM s to default configurations using the CMC Web interface 1 In the system tree go to I O Module Overvie...

Page 167: ...ss is denied until the correct password is entered to reactivate OSCAR Scanning Allows you to select a list of servers which are displayed in the order selected while OSCAR is in scan mode Server Identification CMC assigns unique slot names for all the servers in the chassis Although you can assign names to the servers using the OSCAR interface from a tiered connection CMC assigned names take prec...

Page 168: ...e front panel connection remains active while the ACI connection is disabled If you have ACI and rear connections the ACI connection takes precedence Tiering Through ACI Connection The iKVM allows tiered connections with servers and the iKVM s CMC command line console either locally through a Remote Console Switch port or remotely through the Dell RCS software The iKVM supports ACI connections fro...

Page 169: ...terface and returns to selected server In a message box it closes the pop up box and returns to the current dialog box Alt Opens dialog boxes selects or checks options and executes actions when used in combination with underlined letters or other designated characters Alt X Closes the current dialog box and returns to the previous dialog box Alt O Selects OK and returns to the previous dialog box ...

Page 170: ...strict access to servers Enables a screen saver and set an inactivity time before the screen saver appears and set the screen save mode Flag Changes display timing color or location of the status flag Language Changes the language for all OSCAR screens Broadcast Sets up to simultaneously control multiple servers through keyboard and mouse actions Scan Sets up a custom scan pattern for up to 16 ser...

Page 171: ...and shows the name of the selected server or the status of the selected slot Use the Flag dialog box to configure the flag to display by server or to change the flag color opacity display time and location on the desktop Flag Description Flag type by name Flag indicating that the user is disconnected from all systems Flag indicating that Broadcast mode is enabled To set the display of the status f...

Page 172: ...WERTY QWERTZ AZERTY and Japanese 109 layouts VGA monitors with DDC support Standard USB pointing devices Self powered USB 1 1 hubs connected to the local USB port on the iKVM Powered USB 2 0 hubs connected to the Dell M1000e chassis front panel console NOTE You can use multiple keyboards and mice on the iKVM local USB port The iKVM aggregates the input signals If there are simultaneous input signa...

Page 173: ...server name establish it as unique and press Enter twice To select the previous server press Print Screen and then Backspace This key combination toggles between the previous and current connections To disconnect the user from a server do one of the following Press Print Screen to access OSCAR and then click Disconnect Press Print Screen and then Alt 0 This leaves you in a free state with no serve...

Page 174: ...s are disabled If the monitor is disabled that is removed from the front panel or disabled by a CMC command the ACI connection becomes active while the rear panel KVM remains disabled Related Links iKVM Connection Precedences Enabling or Disabling Access to iKVM from Front Panel Preemption Warning Normally a user connected to a server console through the iKVM and another user connected to the same...

Page 175: ...ccess the Security dialog box 1 Press Print Screen The Main dialog box appears 2 Click Setup and then Security The Security dialog box appears Setting Password To set the password 1 Single click and press Enter or double click in the New field 2 Type the new password and press Enter Passwords are case sensitive and require 5 12 characters They must include at least one letter and one number Legal ...

Page 176: ...nter or double click in the New field 3 Leave the New field empty and press Enter 4 Single click and press Enter or double click in the Repeat field 5 Leave the Repeat field empty and press Enter 6 Click OK Enabling Screen Saver Mode With No Password Protection NOTE If your console is password protected you must first remove password protection Remove the password before enabling screen saver mode...

Page 177: ...ADM Command Line Reference Guide for iDRAC7 and CMC Changing the Language Use the Language dialog box to change the OSCAR text to display in any of the supported languages The text immediately changes to the selected language on all of the OSCAR screens To change the OSCAR language 1 Press Print Screen The Main dialog box appears 2 Click Setup and then Language The Language dialog box appears 3 Se...

Page 178: ...before the scan moves to the next server in the sequence 5 Click Add Remove and then click OK Removing Server from Scan List To remove a server from the Scan list 1 In the Scan dialog box do one of the following Select the server to be removed Double click the server name or slot Click Clear to remove all servers from the Scan list 2 Click Add Remove and then click OK Starting the Scan Mode To sta...

Page 179: ...eens Since these conditions are extremely difficult to achieve broadcasting mouse movements to multiple servers may have unpredictable results NOTE You can broadcast up to 16 servers at a time To broadcast to servers 1 Press Print Screen The Main dialog box is displayed 2 Click Setup and then Broadcast The Broadcast dialog box is displayed 3 Enable mouse and or keyboard for the servers that are to...

Page 180: ...ble clear the Front Panel USB Video Enabled option 3 Click Apply to save the setting Enabling or Disabling Access to iKVM From Front Panel Using RACADM To enable or disable access to the iKVM from the front panel using RACADM open a serial Telnet SSH text console to CMC log in and type racadm config g cfgKVMInfo o cfgKVMFrontPanelEnable value where value is 1 enable or 0 disable For more informati...

Page 181: ...ver modules and the associated enclosure infrastructure The PowerEdge M1000e enclosure can be configured for any of three redundancy policies that affect PSU behavior and determine how chassis Redundancy state is reported to administrators You can also control Power management through the Power Measure Mitigate and Manage Console PM3 When PM3 controls power externally CMC continues to maintain Red...

Page 182: ...stem continues to operate without any degradation AC redundancy also tolerates failures of individual PSUs NOTE Since one role of AC redundancy is to provide seamless server operation despite failure of a whole power grid the most power is available to maintain AC redundancy when the capacities of the two grids are approximately equal NOTE AC redundancy is only met when the load requirements do no...

Page 183: ... supply redundancy is selected CMC does not require the PSU units to be present in any specific PSU slot positions NOTE Dynamic Power Supply Engagement DPSE allows PSUs to be placed in standby The standby state indicates a physical state that of not supplying power When you enable DPSE the extra PSUs may be placed in Standby mode to increase efficiency and save power Figure 6 Power Supply Redundan...

Page 184: ...nline PSUs that are not needed are placed in standby mode PSU Redundancy mode with DPSE also provides power efficiency At least two supplies are online with one PSU required to power the configuration and one to provide redundancy in case of PSU failure PSU Redundancy mode offers protection against the failure of any one PSU but offers no protection in the event of an AC grid loss AC Redundancy mo...

Page 185: ...the mirrored configuration needed for dual grid redundancy NOTE With DPSE Enabled the Standby PSUs are brought Online to reclaim power if power demand increases in all three Power Redundancy policy modes Default Redundancy Configuration The default redundancy configuration for a chassis depends on the number of PSUs it contains as shown in the following table Table 34 Default Redundancy Configurat...

Page 186: ...MC allocates power to the CMC infrastructure and the servers in the chassis CMC infrastructure consists of components in the chassis such as fans I O modules and iKVM if present The chassis may have up to 16 servers that communicate to the chassis through the iDRAC For more information see the iDRAC7 User s Guide at support dell com manuals iDRAC provides CMC with its power envelope requirements b...

Page 187: ... additional power Insertion of I O modules and iKVM also increases the power needs of the modular enclosure A fairly small amount of power is consumed by servers even when they are powered down to keep the management controller powered up Additional servers can be powered up in the modular enclosure only if sufficient power is available The System Input Power Cap can be increased any time up to a ...

Page 188: ...ity for one multiple or all servers The default value is 1 You can assign the same priority level to multiple servers 3 Click Apply to save your changes Assigning Priority Levels to Servers Using RACADM Open a serial Telnet SSH text console to CMC log in and type racadm config g cfgServerInfo o cfgServerPriority i slot number priority level where slot number 1 16 refers to the location of the serv...

Page 189: ...dundancy status is No and the overall power health is Critical This is because the system is not able to operate in accordance with the configured redundancy policy NOTE CMC does not perform a pre check of these conditions when you change the redundancy policy to or from AC redundancy So configuring the redundancy policy may immediately result in redundancy lost or a regained condition Related Lin...

Page 190: ...d power that is less than the worst case power needed and the new server is allowed to power up If the worst case power requirement cannot be met power is reduced to the lower priority servers until enough power is freed to power up the new server The following table provides the actions taken by CMC when a new server is powered on in the scenario described earlier Table 35 CMC Response When a Ser...

Page 191: ...on Power supply presence was asserted Removal Power supply presence was de asserted AC input received Power supply input lost was de asserted AC input lost Power supply input lost was asserted DC output produced Power supply failure was de asserted DC output lost Power supply failure was asserted Unacknowledged 110V operation detected Power supply low input voltage 110 was asserted 110V operation ...

Page 192: ...e configured with the same priority level CMC decreases power to servers in increasing slot number order For example if the servers in slots 1 and 2 have the same priority level the power for the server in slot 1 is decreased before that of the server in slot 2 NOTE You can assign a priority level to each server in the chassis assigning a number from 1 through 9 for each server The default priorit...

Page 193: ... can set CMC to use 110 V PSUs using the Web interface or RACADM Power supply entries are logged to the SEL log When 110V power supplies are detected or removed When the 110V AC input operation is enabled or disabled The overall power health is at least in Non Critical state when the chassis is operating in 110V mode and the user has not enabled the 110V operation The Warning icon is displayed on ...

Page 194: ...PM3 controls compatible server power allocations CMC no longer controls the Maximum Power Conservation Mode Hence this selection is disabled When the Maximum Power Conservation Mode is enabled the CMC sets the System Input Power Capacity to the maximum that the chassis can handle CMC does not allow power to exceed the highest capacity However PM3 handles all other power capacity limitations When P...

Page 195: ...command sets the redundancy policy to 1 racadm config g cfgChassisPower o cfgChassisRedundancyPolicy 1 To set the power budget value type racadm config g cfgChassisPower o cfgChassisPowerCap value where value is a number between 2715 16685 representing the maximum power limit in watts The default is 16685 For example the following command sets the maximum power budget to 5400 watts racadm config g...

Page 196: ...having been previously configured Logging to one or more remote syslog hosts must be enabled otherwise power consumption is logged This can be done either through the web GUI or the RACADM CLI For more information see the remote syslog configuration instructions To enable remote power management by PM3 type racadm config g cfgChassisPower o cfgChassisServerBasedPowerMgmtMode 1 To restore CMC power...

Page 197: ...elnet SSH text console to CMC log in and type racadm chassisaction m chassis action where action is powerup powerdown powercycle nongraceshutdown or reset Executing Power Control Operations on a Server You can remotely perform power management actions for multiple servers at a time or an individual server in the chassis NOTE To perform power management actions you must have Chassis Configuration A...

Page 198: ... Using RACADM To execute power control operations on a server using RACADM open a serial Telnet SSH text console to CMC log in and type racadm serveraction m module action where module specifies the server by its slot number server 1 through server 16 in the chassis and action is the operation you want to execute powerup powerdown powercycle graceshutdown or hardreset Executing Power Control Opera...

Page 199: ...ol operations on an IOM using RACADM open a serial Telnet SSH text console to CMC log in and type racadm chassisaction m switch n action where n is a number 1 6 and specifies the IOM A1 A2 B1 B2 C1 C2 and action indicates the operation you want to execute powercycle or reset 199 ...

Page 200: ...200 ...

Page 201: ...nistrator password Saving and restoring Chassis configuration settings and certificates Error codes and logs Gathering Configuration Information and Chassis Status and Logs Using RACDUMP The racdump subcommand provides a single command to get comprehensive chassis status configuration state information and the historic event logs The racdump subcommand displays the following information General sy...

Page 202: ... click Network Services SNMP The SNMP Configuration section is displayed 2 Click Save to download the CMC MIB file to your local system For more information on the SNMP MIB file see the Dell OpenManage Server Administrator SNMP Reference Guide at dell com support manuals First Steps to Troubleshooting a Remote System The following questions are commonly used to troubleshoot high level problems in ...

Page 203: ...ot power on Resolution A Check the system input power cap setting it might be configured too low to allow any additional servers to be powered up Resolution B Check for 110V operation If any power supplies are connected to 110V branch circuits you must acknowledge this as a valid configuration before servers are allowed to power on For more details see the power configuration settings Resolution C...

Page 204: ... describing the particular error is logged in the trace log However since SNMP does not confirm delivery of traps use a network analyzer or a tool such as Microsoft s snmputil to trace the packets on the managed system Related Links Configuring CMC To Send Alerts Viewing Event Logs You can view hardware and CMC logs for information on system critical events that occur on the managed system Related...

Page 205: ...o clear the hardware log click Clear Log NOTE CMC creates a new log entry indicating that the log was cleared Viewing Hardware Logs Using RACADM To view the hardware log using RACADM open a serial Telnet SSH text console to CMC log in and type racadm getsel To clear the hardware log type racadm clrsel Viewing CMC Log CMC generates a log of the chassis related events NOTE To clear the CMC log you m...

Page 206: ... a standby CMC is present and a chassis is fully redundant a failover occurs causing the standby CMC to become active 3 To reset the iDRAC only without rebooting the Operating System in the Reset Server section click iDRAC Reset in the Reset drop down menu for the servers whose iDRAC you want to reset and then click Apply Selections This resets the iDRACs for the servers without rebooting the oper...

Page 207: ...n 8 20 02 40 cmc ntpd 1423 synchronized to LOCAL 0 stratum 10 You can also check the ntpd status by typing the following racadm command racadm getractime n If the is not displayed for one of the configured servers the settings may not be configured correctly The output of this command contains detailed NTP statistics that may be useful in debugging the problem If you attempt to configure a Windows...

Page 208: ...SNMP Management Information Base MIB File Table 38 LED Color and Blinking Patterns Component LED Color Blinking Pattern Meaning CMC Green glowing steadily Powered on Green blinking Firmware is being uploaded Green dark Powered off Blue glowing steadily Active Blue blinking User enabled module identifier Amber glowing steadily Not used Amber blinking Fault Blue dark Standby iKVM Green glowing stead...

Page 209: ...ng steadily Normal Blue blinking User enabled module identifier Amber glowing steadily Not used Amber blinking Fault Blue dark No fault Fan Green glowing steadily Fan working Green blinking Not used Green dark Powered off Amber glowing steadily Fan type not recognized update CMC firmware Amber blinking Fan fault tachometer out of range Amber dark Not used PSU Oval Green glowing steadily AC OK Oval...

Page 210: ...eplaced An image corruption In this case upload the CMC firmware image to recover the CMC NOTE A normal CMC boot or reset takes over a minute to fully boot into its operating system and be available for login The blue LED is enabled on the active CMC In a redundant two CMC configuration only the top green LED is enabled on the standby CMC Obtain Recovery Information From DB 9 Serial Port If the bo...

Page 211: ...g information DHCP Traces packets sent to and received from a DHCP server DDNS Traces dynamic DNS update requests and responses Configuration changes to the network interfaces The trace log may also contain CMC firmware specific error codes that are related to the internal CMC firmware not the managed system s operating system Resetting Administrator Password CAUTION Many repairs may only be done ...

Page 212: ...n property values as follows cfgSerialBaudRate 115200 cfgSerialConsoleEnable 1 cfgSerialConsoleQuitKey cfgSerialConsoleIdleTimeout 0 cfgSerialConsoleNoAuth 0 cfgSerialConsoleCommand cfgSerialConsoleColumns 0 1 Press the CMC release latch on the handle and move the handle away from the module front panel Slide the CMC module out of the enclosure NOTE Electrostatic discharge ESD events can damage CM...

Page 213: ...eset CMC warm boot and click Apply CMC automatically fails over to the redundant module and that module now becomes active 5 Log into the active CMC using the default administrator username root and password calvin and restore any necessary user account settings The existing accounts and passwords are not disabled and are still active 6 Perform the required management actions including creating a ...

Page 214: ...214 ...

Page 215: ...CD screen 2 selection check button 3 scroll buttons 4 4 status indicator LED Related Links LCD Navigation Diagnostics LCD Hardware Troubleshooting Front Panel LCD Messages LCD Error Messages LCD Module and Server Status Information LCD Navigation The right side of the LCD panel contains five buttons four arrow buttons up down left and right and a center button To move between screens use the right...

Page 216: ...ter button to accept a change and return to the previous screen Skip Next Highlight and press the center button to skip any changes and go to the next screen No Highlight and press the center button to answer No to a question and go to the next screen Rotate Highlight and press the center button to switch between the front and rear graphical views of the chassis NOTE The amber background indicates...

Page 217: ...ow buttons to highlight an item in the menu or highlight the Back icon if you want to return to the Main menu Press the center button to activate your selection Language Setup Screen The Language Setup screen allows you to select the language used for LCD panel messages The currently active language is highlighted with a light blue background 1 Use the up down left and right arrow buttons to highl...

Page 218: ...s To return to the Main Menu use the arrow buttons to highlight the Back icon and press the center button Graphical Module Status Screen The Graphical Module Status screen displays all modules installed in the rear of the chassis and provides summary health information for each module Module health is indicated by the color of each module icon as follows Gray module is off or on standby with no er...

Page 219: ...s to scroll through the list Use the left and right arrow buttons to scroll selected messages that are longer than the screen Use the up and down arrow buttons to select the Back icon and press the center button to return to the Enclosure menu Diagnostics The LCD panel helps you to diagnose problems with any server or module in the chassis If there is a problem or fault with the chassis or any ser...

Page 220: ... Responding and LED is solid amber or is off LCD module communications is stuck during a CMC fail over or reboots Review the hardware log using the GUI or RACADM commands Look for a message that states Can not communicate with LCD controller Reseat the LCD module ribbon cable Screen text is scrambled Defective LCD screen Replace the LCD module LED and LCD is off The LCD cable is not connected prop...

Page 221: ... Critical The CMC number battery failed CMC CMOS battery is missing or has no voltage Critical CMC number LAN heartbeat was lost The CMC NIC connection has been removed or is not connected Warning A firmware or software incompatibility detected between iDRAC in slot number and CMC Firmware between the two devices does not match in order to support one or more features Warning A firmware or softwar...

Page 222: ...Fan Status Screens Severity Message Cause Critical Fan number RPM is operating less than the lower critical threshold The speed of the specified fan is not sufficient to provide enough cooling to the system Critical Fan number RPM is operating greater than the upper critical threshold The speed of the specified fan is too high usually due to a broken fan blade Table 45 IOM Status Screens Severity ...

Page 223: ...reshold Server temperature is getting too hot Critical The system board Current Latch current is outside of the allowable range Current crossed a failing threshold Critical The system board battery failed CMOS battery is not present or has no voltage Warning The storage battery is low ROMB battery is low Critical The storage battery failed CMOS battery is not present or has no voltage Critical The...

Page 224: ...imer expired because no response was received from Host and the action is set to power off Critical The watchdog timer power cycled the system The iDRAC watchdog detected that the system has crashed timer expired because no response was received from Host and the action is set to power cycle Critical Log is full The SEL device detects that only one entry can be added to the SEL before it is full W...

Page 225: ...tion entered a non recoverable state Non Recoverable CPU machine check detected The processor machine check entered a non recoverable state Critical Memory redundancy is lost Critical A bus fatal error was detected on a component at bus number device number function number Fatal error is detected on the PCIe bus Critical A software NMI was detected on a component at bus number device number functi...

Page 226: ...re Status Item Description User Define Name Example Dell Rack System This is settable via CMC CLI or Web GUI Error Messages If no errors occur then No Errors is displayed otherwise error messages are listed critical errors first then warnings Model Number Example PowerEdgeM1000 Power Consumption Current power consumption in watts Peak Power Peak power consumed in watts Minimum Power Minimum power ...

Page 227: ...r On Model Model of the IOM Fabric Type Networking type IP address Only shows if IOM is On This value is zero for a pass through type IOM Service Tag The factory assigned service tag Table 54 iKVM Status Item Description Name iKVM No Error If there are no errors then No Errors is displayed otherwise error messages are listed The critical errors are listed first and then the warnings For more infor...

Page 228: ...rsion 1 01 is displayed as 1 1 There is no iDRAC version 1 10 IP4 enabled disabled Displays the current IPv4 enabled state IP4 Address address acquiring Only displays if IPv4 is enabled IP6 enabled disabled Only displays if iDRAC supports IPv6 Displays current IPv6 enabled state IP6 Local Address address Only displays if iDRAC supports IPv6 and IPv6 is enabled IP6 Global Address address Only displ...

Page 229: ...ay racadm command failed Type racadm gettracelog for debugging information While using remote RACADM the prompt changes to a and the prompt is not displayed again If a non matched double quotation mark or a non matched single quotation is used in the command the CLI changes to the prompt and queue all commands To return to the prompt type Ctrl d An error message Not Found is displayed while using ...

Page 230: ...eb interface a security warning stating that the SSL certificate was issued by a certificate authority that is not trusted is displayed CMC includes a default CMC server certificate to ensure network security for the Web interface and remote RACADM features This certificate is not issued by a trusted certificate authority To address this security concern upload a CMC server certificate issued by a...

Page 231: ...there any restrictions on Domain Controller SSL configuration Yes All SSL certificates for Active Directory servers in the forest must be signed by the same root certificate authority signed certificate because CMC only allows upload of one trusted certificate authority signed SSL certificate The Web interface does not launch after a new RAC certificate is created and uploaded If Microsoft Certifi...

Page 232: ...ge No features active on the chassis ERROR read only file system What happens if there isn t an SD card in the active CMC module The racadm featurecard s command returns this message No feature card inserted What happens to FlexAddress feature if the server BIOS is updated from version 1 xx to version 2 xx The server module needs to be powered down before it can be used with FlexAddress After the ...

Page 233: ...nel Why The front panel connection has been disabled by CMC Enable the front panel using either the CMC Web interface or RACADM To enable the front panel using the CMC Web interface go toiKVM Setup tab select the Front Panel USB Video Enabled option and click Apply to save the setting To enable the front panel using RACADM open a serial Telnet SSH text console to CMC log in and type racadm config ...

Page 234: ...witching over to the standby CMC or reprogramming In this case simply wait until CMC finishes initializing The slot name for a server is displayed as Initializing in OSCAR and it cannot be selected it Why Either the server is initializing or the iDRAC on that server failed initialization Initially wait for 60 seconds If the server is still initializing the slot name appears as soon as initializati...