Contents Accessing the command line interface..................... 9 Remote access to the Onboard Administrator....................9 Local access to the Onboard Administrator ....................9 Command line..........................11 Command line overview........................... 11 Command line conventions........................11 HP Integrity server blade restrictions......................12 Access level and privileges ........................12 Account authentication ........................
Page 4
Two-Factor Authentication commands.................... 28 DISABLE CRL............................28 DISABLE TWOFACTOR..........................28 DOWNLOAD CA CERTIFICATE ........................ 28 DOWNLOAD USER CERTIFICATE ......................29 REMOVE CA CERTIFICATE ........................29 REMOVE USER CERTIFICATE ........................29 SHOW CA CERTIFICATES........................29 SHOW TWOFACTOR INFO ........................30 Directory commands ........................31 ADD LDAP CERTIFICATE ..........................
Page 5
DISABLE EBIPA............................49 ENABLE EBIPA ............................49 REMOVE EBIPA ............................50 SET EBIPA .............................. 50 SHOW EBIPA ............................51 Enclosure network configuration commands ................... 53 ADD OA DNS ............................53 ADD SNMP TRAPRECEIVER ........................53 ADD SSHKEY ............................53 ADD TRUSTED HOST..........................54 CLEAR NTP ............................
Page 6
TEST ALERTMAIL ............................. 69 TEST SNMP ............................69 Enclosure management commands ....................70 CLEAR SYSLOG ............................70 DISABLE GUI_LOGIN_DETAIL ........................70 DISABLE LLF ............................70 ENABLE GUI_LOGIN_DETAIL ........................71 ENABLE LLF ............................71 RESTART OA ............................71 SET DATE ............................... 71 SET DISPLAY EVENTS ..........................
Page 7
POWERON SERVER ..........................96 REBOOT SERVER ............................ 97 SET NIC..............................97 SET SERVER BOOT ..........................97 SET SERVER BOOT ONCE ........................98 SET SERVER POWERDELAY ........................98 SET SERVER UID............................99 SHOW SERVER BOOT ..........................99 SHOW SERVER INFO..........................99 SHOW SERVER LIST ..........................
Page 8
SET ENCLOSURE POWER_CAP_BAYS_TO_EXCLUDE ................124 SHOW ENCLOSURE POWER_CAP......................125 SHOW ENCLOSURE POWER_CAP_BAYS_TO_EXCLUDE................125 Event notifications ........................126 Enclosure event notifications ........................126 Command line event notifications ......................126 Technical support........................129 Before you contact HP..........................129 HP contact information ........................... 129 Time zone settings ........................
Accessing the command line interface Remote access to the Onboard Administrator The Onboard Administrator CLI can be accessed remotely through any Telnet or SSH session. Telnet session Open a command-line window from a network-connected client. At the prompt, telnet to the IP address of the Onboard Administrator and press Enter. For example, telnet 192.168.100.130, where the IP address is the address of your Onboard Administrator.
Page 10
Name Signal direction Description <<-- Receive data -->> Transmit data -->> Data terminal ready System ground <<-- Data set ready -->> Request to send <<-- Clear to send <<-- Ring indicator Use any standard communication software to launch a terminal emulation session with the following parameters: Parameter Value...
Command line Command line overview The CLI can be used as an alternative method for managing the Onboard Administrator. Using the CLI can be useful in the following scenarios: • HP Management Applications (for example: Systems Insight Manager, Insight Control tools, and so on) can query the Onboard Administrator for information these tools need to present a complete management view of HP BladeSystem enclosures and the devices contained within.
HP Integrity server blade restrictions HP Integrity server blades do not support all commands. See specific commands for restrictions on HP Integrity server blades. The following commands are not applicable to HP Integrity server blades • Hponcfg • Set Server Boot •...
Page 13
Account classification Capabilities Account name / Bays selected for this Privilege level account Administrator • Administrator / All commands administrator • Local account, not LDAP • Only account remaining after a reset Onboard Administrator to factory defaults (account retains configured Administrator password) •...
Account classification Capabilities Account name / Bays selected for this Privilege level account administrator • username / administrator No OA bays and only Can perform all selected device bays and operations to interconnect bays permitted device bays and interconnect bays including virtual power and console access...
• This is the default setting. Local user accounts are directly authenticated against a password for each account stored on the active Onboard Administrator. • Account modifications are automatically synchronized between both Onboard Administrator modules if two are present. • Local users may be disabled if LDAP is enabled, leaving the Administrator account as the only local account that cannot be disabled.
Rack commands SET RACK NAME • Command: SET RACK NAME <rack name> • Description: Sets the rack name • Access level/Bay level: OA administrator, OA operator • Restrictions: The <rack name> must be a maximum of 32 characters long and includes all alphanumeric, the dash, and the underscore characters.
Page 19
• Access level/Bay level • Restrictions: None Example SHOW TOPOLOGY Detecting linked enclosures ..Rack Topology (top-down) Rack UUID: 090987654321 Rack Name: UnnamedRack Enclosure Name Status Local IP Address UUID -------------------------------- -------- ----- --------------- ------------- Shorty 16.84.190.253 090987654321 OA-0018FE2F998B 172.16.211.101 09USE644285C Rack commands 19...
User account commands ADD USER • Command: ADD USER "<user name>" ["<password>"] • Description: Adds a user to the system. If you do not provide a password, you are prompted for one. If SCRIPT MODE is enabled and the password is not provided, the password is assigned an unmatched string. This unmatched string requires an enclosure administrator to change the password to allow the new user to access the system.
ASSIGN OA • Command: ASSIGN OA {"<user name>" | LDAP GROUP "<LDAP group name>"} • Description: Assigns the Onboard Administrators specified to an existing user or group • Access level/Bay level: OA administrator • Restrictions: The <user name> is case sensitive. DISABLE USER •...
ENABLE STRONG PASSWORDS • Description: When enabled, this command requires that a user's password contain at least one character from three of the four categories. The four categories include: Uppercase Lowercase Numeric Nonalphanumeric • Access level/Bay level: OA administrator • Restrictions: Only Administrators with Onboard Administrator permission are allowed to manage strong passwords...
REMOVE USER {ALL | "<user name>" | CERTIFICATE "<user name>"} • Description: Removes a user from the system and/or any certificate mapped to the user. If you specify ALL, then the command is run for all users except the default system accounts. •...
• Access level/ Bay level: OA administrator • Restriction: Valid session timeout values range from 10 to 1440 minutes (24 hours). SET USER ACCESS • Command: SET USER ACCESS "<user name>" {ADMINISTRATOR | OPERATOR | USER} • Description: Sets the user access level. Additionally, use the ASSIGN command to give the user access rights to the Onboard Administrator, server bays, and interconnect bays.
OA administrator, OA operator All users can modify their own full name. • Restrictions: The <user name> is case sensitive. The <full name> must be a maximum of 20 characters long and includes all alphanumeric, the dash, the underscore, and the space characters. The default full name is blank.
SHOW SESSION TIMEOUT • Command: SHOW SESSION TIMEOUT • Description: Displays the current Onboard Administrator user session timeout. The session timeout is the number of minutes before inactive sessions are removed. • Access level/Bay level: • Restriction: None Example >SHOW SESSION TIMEOUT Session Timeout: 1440 minutes SHOW USER •...
SLEEP • Command: SLEEP <seconds> • Description: Pauses the sessions for a fixed period of time. This command is useful for adding delays to scripts. After the pause has started, you cannot continue the session before time runs out. However, you can terminate the session and start another session.
DOWNLOAD USER CERTIFICATE • Command: DOWNLOAD USER CERTIFICATE "<user name>" <url> • Description: Downloads an x.509 certificate for the user from <url>. The file at <url> must be a Base64 PEM encoded file. Downloads a CA certificate used in Two-Factor Authentication •...
Directory commands ADD LDAP CERTIFICATE • Command: ADD LDAP CERTIFICATE <end marker> <certificate> <end marker> • Description: Adds an LDAP certificate on the command line. To add the certificate: Start with a string that does not appear within the certificate (the end marker) Paste in the certificate Terminate the command with the end marker •...
Assigns the bay to a specified LDAP group, providing access to the bay at the access level of the group • Access level/Bay level: OA administrator • Restrictions: None ASSIGN OA LDAP GROUP • Command: ASSIGN OA {"<user name>" | LDAP GROUP "<LDAP group name>"} •...
• Access level/Bay level: OA administrator • Restrictions: None ENABLE LDAP NOTE: If LDAP is enabled, local accounts are disabled, and the LDAP server becomes unavailable, you can recover by booting into Lost Password mode. When booting in Lost Password mode, the local Administrator password will be reset, LDAP is disabled, and Local Logins are re-enabled •...
OA administrator • Restrictions: Before you can enable the LDAP group, configuration must be complete. SET LDAP GROUP ACCESS • Command SET LDAP GROUP ACCESS "<group name>" {ADMINISTRATOR | OPERATOR | USER} • Description: Sets the LDAP group access level. Additionally, use the ASSIGN OA command to give a user or group rights to the Onboard Administrator.
SET LDAP PORT • Command: SET LDAP PORT <port number> • Description: Sets the TCP port number of the LDAP SSL service. Port 636 is the standard value. • Access level/Bay level: OA administrator • Restrictions: The valid port number range is 1 to 65535 SET LDAP SEARCH •...
OA administrator • Restrictions: None Example OA-0016355E560A> SHOW LDAP CERTIFICATE 1 Certificate name: 17D6A5ECBF51A1A47D44C1CDD29D19EE.pem -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIKFTKZbQAAAFx1EDANBgkqhkiG9w0BAQUFADB4MRMwEQYK CZImiZPyLGQBGRYDbmV0MRcwFQYKCZImiZPyLGQBGRYHY3BxY29ycDEbMBkGCgmS JomT8ixkARkWC2FzaWFwYWNpZmljMSswKQYDVQQDEyJIUFEgSXNzdWluZyBDQSBB c2lhLVBhY2lmaWMgUmVnaW9uMB4XDTA3MTAyMDIyMzU0M1oXDTA5MTAxOTIyMzU0 M1owKTEnMCUGA1UEAxMeY2NlZ2NhbTAxLmFtZXJpY2FzLmhwcWNvcnAubmV0MIGf MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNYsB8T6rJhJQXbKvM5JLi6EXNAtFL ayV11QVyrtjRtOjRGySwFCk9KNzRS7PIP/p9gH20Ic+ZvgX0fRPnnU/2imMeTGr2 raIYGRSFBJ4sCpAP87m/7Hzk0kiyZ+7KJq92Q61Pipkea....-----END CERTIFICATE----- SHOW LDAP GROUP • Command: SHOW LDAP GROUP {LIST | "<group name>"} • Description: This command displays the LDAP group information.
• Restrictions: None Example OA-0018FE27577F> show ldap info Directory Services (LDAP) Enabled : Disabled Local Users Enabled : Enabled NT Name Mapping : Disabled Directory Server Directory Server SSL Port : 0 Search Context #1 Search Context #2 Search Context #3 Search Context #4 Search Context #5 Search Context #6...
Page 38
• Description: Disables access to the Onboard Administrator for the group specified • Access level/Bay level: OA administrator • Restrictions: None Directory commands 38...
HP SIM commands ADD HPSIM CERTIFICATE • Command: ADD HPSIM CERTIFICATE <end marker> <certificate> <end marker> • Description: Adds an HP SIM certificate on the command line. Start with a string that does not appear within the certificate (the end marker). Paste in the certificate.
The <certificate name> can be obtained using the SHOW HPSIM INFO command. • Access level/Bay level: OA administrator • Restrictions: None SET HPSIM TRUST MODE • Command: SET HPSIM TRUST MODE {CERTIFICATE [ON] | DISABLED [OFF]} • Description: Enables or disables the HP SIM SSO mode. When enabled, the trusted applications can access the Onboard Administrator GUI data without requiring additional authentication.
General management commands DOWNLOAD OA CERTIFICATE • Command: DOWNLOAD OA CERTIFICATE [<bay number>] <url> • Description: Downloads a CA supplied pkcs#7 file to replace the current security certificate on Onboard Administrator specified by <bay number>. If you omit <bay number>, then the current Onboard Administrator is targeted.
OA Host Name (CN) Organization Name (O) City or Locality (L) State or Province (ST) Country (C) Organizational Unit Contact Person Email Address Surname Given Name Initials DN Qualifier Challenge Password Unstructured Name • Access level/Bay level: OA administrator • Restrictions: This command is not valid in SCRIPT MODE Generate certificate prompts...
Prompt Description Restrictions State or Province (ST) The state or province where Must be 1 to 30 characters long the Onboard Administrator is located. Country (C) The two-character country Must be a two-character country code code that identifies the country where the Onboard Administrator is located.
The <ip address> must be in the form ###.###.###.###, where each ### ranges from 0 to 255. SET DEVICE SERIAL_NUMBER BLADE • Command: SET DEVICE SERIAL_NUMBER BLADE <bay number> "<serial number>" • Description: Sets the serial number of the specified Storage, Tape, or I/O expansion blade. •...
SHOW ALL • Command: SHOW ALL • Description: Executes all SHOW commands in succession • Access level/Bay level: • Restrictions: This command only displays the bays for which you have privileges. To save the output, you must configure your telnet software to log the session to a file or increase the history buffer size so that the output can be copied and pasted into another file.
Page 46
>SHOW SERVER DVD ALL DVD Drive: Present DVD Media: Present Server DVD connections: Bay Connected Device or image URL --- --------- -------------------- [Bay empty] [Bay empty] [Bay empty] [Bay empty] [Bay empty] [Bay empty] [Non-server blade] [Bay empty] >SHOW SERVER POWERDELAY ALL Current PowerDelay Status: Not in Progress Device PowerDelay State...
Page 47
Rack UUID: 090987654321 Rack Name: UnnamedRack Enclosure Name Status Local IP Address UUID -------------------------------- -------- ----- --------------- -------------- OA-0018FE27577F Degraded Yes 16.84.189.205 090987654321 USE644285C 172.16.91.187 09USE644285C >SHOW USER (current user) Local User "Administrator" Information: Full name: System Administrator Contact Info: User Rights: Admin Account Status: Enabled Server Bay Access List: 1 1A 1B 2 2A 2B 3 3A 3B 4 4A 4B 5 5A 5B 6 6A 6B...
Enclosure Bay IP Addressing commands ADD EBIPA • Command: ADD EBIPA {SERVER | INTERCONNECT} DNS <ip address> • Description: Adds a DNS server IP address to the list of DNS servers for either SERVER bays or INTERCONNECT bays • Access Level/Bay level: Administrator, Operator •...
CAUTION: This command cycles power to the interconnect and causes a loss of connectivity. • Command: ENABLE EBIPA {SERVER|INTERCONNECT} [ALL | <bay number> [{ , | - } <bay number>]] • Description: Enables the Onboard Administrator to provide IP addresses to the devices in the bays using DHCP. If you do not specify any bay numbers, then EBIPA is enabled for all bays.
• Access level/Bay level: Administrator, Operator • Restrictions: The <IP address> and <netmask> must be in the form ###.###.###.###, where each ### ranges from 0 to 255. The <domain name> is a string containing letters (a–z, A–Z), digits (0–9), or a dash (-). SHOW EBIPA •...
Page 52
DNS Server1: 0.0.0.0 Server2: 0.0.0.0 Server3: 0.0.0.0 NTP Server1: 0.0.0.0 Server2: 0.0.0.0 Bay Enabled EBIPA Address Current Address Module Type --- ------- --------------- --------------- ------------ 16.84.189.31 Ethernet [Absent] [Absent] [Absent] Enclosure Bay IP Addressing commands 52...
Enclosure network configuration commands ADD OA DNS • Command: ADD OA DNS [<bay number>] <ip address> • Description: Adds an IP address of a DNS server to the list. DNS servers are used if the system is configured to use a static IP address. If a bay number is not specified, the command defaults to the active Onboard Administrator.
Locate a string that does not appear in the key, to use as the end marker. Paste in the SSHKEY string. Finish the command with the end marker. Failure to give a proper end marker before and after the certificate might cause the interface to wait for the appropriate end marker indefinitely.
Active and Standby Onboard Administrators retain their current IP addresses. After disabling Enclosure IP Mode and a takeover occurs, there will no longer be a single IP address for the enclosure. • Access level/Bay level: OA administrator, Operator • Restrictions: None DISABLE HTTPS •...
OA administrator, OA operator • Restrictions: None DISABLE SNMP • Command: DISABLE SNMP • Description: Disables SNMP support for the Onboard Administrator. Does not clear the SNMP trap receivers that have been configured. SNMP trap receivers can still be added and removed. If you disable SNMP, then Insight Manager Agents do not work properly.
DISABLE XMLREPLY • Command: DISABLE XMLREPLY • Description: Disables XML reply data return over the HTTP port • Access level/Bay level: OA administrator, OA operator • Restrictions: None DOWNLOAD CONFIG • Command: DOWNLOAD CONFIG <url> • Description: Downloads a saved configuration file from a specific IP host. The file is not checked for errors but is automatically executed in SCRIPT MODE.
ENABLE ALERTMAIL • Command: ENABLE ALERTMAIL • Description: Enables the sending of alert emails when an event occurs • Access level/Bay level: OA administrator, OA operator • Restrictions: You can only issue this command if the configuration has been set up. ENABLE ENCLOSURE_IP_MODE •...
ENABLE TRUSTED HOST • Command: ENABLE TRUSTED HOST • Description: Enables IP security for the Onboard Administrator • Access level/Bay level: OA administrator, OA operator • Restrictions: None ENABLE XMLREPLY • Command: ENABLE XMLREPLY • Description: Enables XML reply data over an HTTP connection •...
Removes an IP address from the list of systems that receive SNMP traps. If the same IP address is listed multiple times with different communities, all instances of the IP address disappear unless <community> specifies which one is to be removed. •...
• Restrictions: None SET ALERTMAIL SMTPSERVER • Command: SET ALERTMAIL SMTPSERVER <ip address> • Description: Sets the AlertMaill SMTP server. This is the mail server where the Onboard Administrator delivers its email-based events. • Access level/Bay level Administrator, OA operator •...
SET OA UID • Command: SET OA UID [<bay number>] {ON | OFF} • Description: Sets the Onboard Administrator UID on or off. If you do not specify a bay number, the command defaults to the active Onboard Administrator. • Access level/Bay level: •...
• Access level/Bay level: OA administrator, OA operator • Restrictions: Poll time should be between 60 and 86,400 seconds. SET NTP PRIMARY • Command: SET NTP PRIMARY <ip address> • Description: Sets the primary server used for synchronizing time and date using the NTP protocol •...
SET SNMP COMMUNITY • Command: SET SNMP COMMUNITY {READ | WRITE} "<community name>" • Description: Sets the community name for the read or write SNMP community. If a blank write community name is given, then SNMP set commands are disabled until a non-empty community name is given. •...
MAC address HTTP and HTTPS server status SNMP status SSH status Telnet status NTP status Trusted Host status • Access level/Bay level: • Restrictions: None Example OA-0018FE27577F> SHOW NETWORK Onboard Administrator Network Settings: DHCP: Enabled - Dynamic DNS IP Address: 16.84.190.253 Netmask: 255.255.252.0 Gateway Address: 16.84.188.1 Primary DNS: 16.110.135.52...
Location Contact Read community name Write community name List of the trap destinations • Access level/Bay level: OA administrator, OA operator • Restrictions: None Example OA-0018FE27577F> SHOW SNMP SNMP Configuration: Status: Disabled System Name: Shorty System Location: System Contact: Read Community Name: public Write Community Name: No trap receivers specified.
• Restrictions: None Example Firmware Version: 2.20 Built: 04/14/2008 @ 14:04 OA Bay Number: OA Role: Active Authenticating with public key "rsa-key-123456789" TEST ALERTMAIL • Command: TEST ALERTMAIL • Description: Sends a test AlertMail message to the configured email address •...
Enclosure management commands CLEAR SYSLOG CAUTION: You cannot restore this information after you delete it. • Command: CLEAR SYSLOG {ENCLOSURE | OA <bay number>} • Description: Clears the Onboard Administrator system log. If you do not specify a bay number, the Active Onboard Administrator system log is cleared.
• Restrictions: You must have OA permission to perform this command. ENABLE GUI_LOGIN_DETAIL • Command: ENABLE GUI_LOGIN_DETAIL • Description: Enables extended enclosure information available in the GUI on the login page • Access level/Bay level: OA administrator • Restriction: None ENABLE LLF •...
SET DATE MMDDhhmm [[CC]YY][TZ] • Description: Sets the date of the enclosure with the following definitions: MM: Month DD: Day hh: Hour (24-hour time) mm: Minute CC: Century YY: Year TZ: Time zone If you leave the time zone variable blank, then the current time zone is left in effect. •...
The default enclosure asset tag is blank • Access level/Bay level: OA administrator, OA operator • Restrictions: The <asset tag> must be 1 to 32 characters long and includes all alphanumeric, underscore (_), and dash (-) characters. SET ENCLOSURE NAME •...
SET OA USB • Command: SET OA USB {FRONT | BACK} • Description: Allows the Onboard Administrator to select which USB controller to enable. The FRONT controller enables the internal DVD drive and the front USB connector. The BACK controller enables the two USB ports on the rear of the KVM Option Module. This command has no effect on c3000 Onboard Administrator boards that are hardware revision level 'CO' and later as displayed with SHOW OA INFO.
OA administrator, OA operator • Restrictions: None SET POWER SAVINGS • Command: SET POWER SAVINGS {ON | OFF} • Description: Turns power savings mode on or off. Power savings mode turns unneeded power supplies off. The increased load on the remaining power supplies increases their efficiency, resulting in less power consumption.
Page 77
None Example OA-0018FE27577F> show config #Script Generated by Administrator #Generated on: Tue Aug 18 03:49:24 2009 #Set Enclosure Time SET TIMEZONE CST6CDT #SET DATE MMDDhhmm{{CC}YY} #Set Enclosure Information SET ENCLOSURE ASSET TAG "" SET ENCLOSURE NAME "OA-0018FE27577F" SET RACK NAME "trinity-ExDS-RACK" SET POWER MODE REDUNDANT SET POWER SAVINGS ON #Power limit must be within the range of 950-8750...
Page 78
#Configure Trusted Hosts #REMOVE TRUSTED HOST ALL DISABLE TRUSTED HOST #Configure NTP SET NTP PRIMARY 0.0.0.0 SET NTP SECONDARY 0.0.0.0 SET NTP POLL 720 DISABLE NTP #Set SNMP Information SET SNMP CONTACT "" SET SNMP LOCATION "" SET SNMP COMMUNITY READ "public" SET SNMP COMMUNITY WRITE ""...
#REMOVE USERS ALL #Create Users ADD USER "chris" SET USER CONTACT "chris" "" SET USER FULLNAME "chris" "" SET USER ACCESS "chris" ADMINISTRATOR ASSIGN INTERCONNECT 1,2,3,4 "chris" ASSIGN OA "chris" ENABLE USER "chris" #Password Settings DISABLE STRONG PASSWORDS SET MINIMUM PASSWORD LENGTH 3 #Session Timeout Settings SET SESSION TIMEOUT 1440 #Set LDAP Information...
Date: 2008-04-15T10:36:46-05:00 Time Zone: CST6CDT SHOW DISPLAY EVENTS • Command: SHOW DISPLAY EVENTS • Description: Displays whether event notification is on or off • Access level/Bay level: • Restrictions: None Example OA-0018FE27577F> SHOW DISPLAY EVENTS Display Events is set to OFF. SHOW ENCLOSURE FAN •...
SHOW ENCLOSURE INFO • Command: SHOW ENCLOSURE INFO • Description: Displays: Enclosure name Enclosure type Onboard Administrator hardware version Enclosure part number Serial number Asset tag Onboard Administrator MAC address • Access level/Bay level: • Restrictions: None Example OA-0018FE27577F> SHOW ENCLOSURE INFO Enclosure Information: Enclosure Name: Shorty Enclosure Type: BladeSystem c3000 Enclosure...
Example OA-0018FE27577F> SHOW ENCLOSURE LCD Status Display Name BladeSystem c3000 Insight Display Spare Part# : 441831-001 Manufacturer: Fw Version Diagnostic Status: Internal Data SHOW ENCLOSURE POWERSUPPLY_SUMMARY • Command: SHOW ENCLOSURE POWER_SUMMARY • Description: Displays a detailed summary of the enclosure's present power state. •...
YOUR-EYZCGYAYBB ------- Interconnect Bay Power Summary: Name Power Allocated (Watts DC) -------------------------------- -------------------------- GbE2c Ethernet Blade Switch ------- Fan Power Summary: Total Fans Fan Rule Present Power Power Allocated (Number of Fans) (Number of Fans) (Watts DC) (Watts DC) ---------------- ---------------- -------------- ---------------...
Product Ver: Diagnostic Status: Internal Data Device Failure Power Cord SHOW ENCLOSURE STATUS • Command: SHOW ENCLOSURE STATUS • Description: Displays the basic health and status of the enclosure subsystem • Access level/Bay level: • Restrictions: None Example OA-0018FE27577F> SHOW ENCLOSURE STATUS Enclosure: Status: OK Unit Identification LED: Off...
Temperature in degrees Celsius for all temperature sensors • Access level/Bay level: Bay specific • Restrictions: None Example OA-0018FE27577F> SHOW ENCLOSURE TEMP Locale Temp Status Temp Caution Critical -------------------------- ----------- -------- ------- -------- Enclosure 26C/ 78F Onboard Administrator 1 OK 26C/ 78F Blade Bay 7 N/A...
Page 86
Part Number: 448589-B21 Spare Part Number: 441832-001 Firmware Version: 2.40 HwVersion: A0 Blade Model: ProLiant BL480c G1 Manufacturer: HP Serial Number: USM64204B1 Part Number: 416667-B21 Spare Part Number: 410293-001 Blade Model: Integrity BL860c Manufacturer: hp Serial Number: CSJ0634214 Part Number: AD323A Spare Part Number: AD217-60001 Blade Model: ProLiant BL460c G1...
Model: Active Cool 200 Fan Part Number: 412140-B21 Spare Part Number: 413996-001 Power Supply Model: 438203-001 Serial Number: 531300ALL00233 Spare Part Number: XXXXXX-001 Power Supply Model: 438203-001 Serial Number: 531300ALL00014 Spare Part Number: XXXXXX-001 Power Supply Model: 438203-001 Serial Number: 531300ALL00399 Spare Part Number: XXXXXX-001 Insight Display Model: BladeSystem c3000 Insight Display...
Subject: Common Name (CN): OA-1234FE27577F Country (C): State or Province (ST): City or Locality (L): Organization Name (0): Hewlett-Packard Organizational Unit: Onboard Administrator SHOW OA INFO • Command: SHOW OA INFO [ALL | <bay number> [{ , | - } <bay number>]] •...
• Restrictions: None Example OA-0018FE27577F> SHOW OA NETWORK Onboard Administrator #1 Network Information: Name: OA-1234E2124L7F DHCP: Enabled - Dynamic DNS IP Address: 16.84.190.253 Netmask: 123.456.78.9 Gateway Address: 123.58.36.44 Primary DNS: 12.345.65.78 Secondary DNS: 12.345.67.88 MAC Address: 00:18:FE:27:57:7F Link settings: Forced 100 Mbit - Full Duplex Link Status: Active Enclosure IP Mode: Not Supported SHOW OA STATUS...
This command has no effect on HP c3000 OA boards that are hardware revision level C0 and later. Hardware revision is found using the SHOW OA INFO command. • Access level/Bay level: OA Administrator • Restrictions: None Example OA-0018FE27577F> SHOW OA USB Onboard Administrator USB setting = FRONT SHOW POWER •...
• Restrictions: You must have access to the specified bay Examples OA-0016355E560A> SHOW SYSLOG SERVER 1 Retrieving Server syslog(s) ... Server 1 Syslog: <EVENT_LOG DESCRIPTION="Integrated Management Log"> <EVENT SEVERITY="Informational" CLASS="Maintenance" LAST_UPDATE="02/12/2007 18:01" INITIAL_UPDATE="02/12/2007 18:01" COUNT="1" DESCRIPTION="IML Cleared (iLO 2 user:Administrator)" OA-0016355E560A>...
Aug 10 07:36:23 OA: chris logged into the Onboard Administrator from 16.81.53.53 Aug 10 07:37:52 OA: chris logged into the Onboard Administrator from 16.81.53.53 Aug 10 07:53:38 OA: chris logged into the Onboard Administrator from 16.81.53.53 Aug 10 08:42:42 OA: chris logged into the Onboard Administrator from 16.81.53.53 Aug 10 08:47:19 OA: chris logged into the Onboard Administrator from 16.81.53.53 Aug 10 10:52:56...
• Restrictions: The <url> can be any of the following: http://host/path ftp://host/path ftp://username:password@host/path tftp://host/path Host is a fully qualified domain name or an IP address. Path is the pathname of the flash image to download. The URL must be formatted as protocol://host/path/filename. If your FTP server does not support anonymous connections, then you can specify a user name and password by replacing host in the previous format with username:password@host/path/filename.
Blade management commands CONNECT SERVER • Command: CONNECT SERVER [SERIAL] <bay number> • Description: Opens a Text Console session to the iLO specified. If the optional argument SERIAL is specified, a Virtual Serial Port session is started. • Access level/Bay level: Bay specific •...
This command is not applicable to HP Integrity server blades. POWEROFF SERVER CAUTION: This command can cause a server blade to lose data or become unstable. • Command: POWEROFF SERVER {ALL | <bay number> [{ - | , } <bay number>]} [FORCE] •...
REBOOT SERVER • Command: REBOOT SERVER {ALL | <bay number> [{ - | , } <bay number>]} [FORCE] [{NORMAL |PXE | HDD | RBSU}] • Description: Sends a request to the blade to perform a graceful shutdown. The blade is then powered on. If no blade is in the specified bay, you are notified that the bay is empty.
Bay specific • Restrictions: You must have access to the specified bay number. This command is not applicable to storage blades This command is not applicable to HP Integrity server blades. This setting is only valid on present blades and cleared if the blade is removed. SET SERVER BOOT ONCE •...
SET SERVER UID • Command: SET SERVER UID {ALL | <bay number> [{ - | , } <bay number>]} {ON | OFF} • Description: Turns a server blade UID LED on or off • Access level/Bay level: Bay specific • Restrictions: You must have access to the specified bay number.
Page 100
Name Installed OS Part number Serial number Asset tag BIOS version All CPU types and associated maximum speeds Memory NIC #1 MAC NIC #2 MAC iLO name, and iLO IP address • Access level/Bay level: Bay specific • Restrictions: You must have access to the specified bay number. Example OA-0018FE27577F>...
Page 101
Part Number: 435460-B21 System Board Spare Part Number: 438453-001 Serial Number: USM65103VJ UUID: 34353334-3036-5355-4D36-35313033564A Server Name: test45667 Asset Tag: [Unknown] ROM Version: I14 11/03/2008 CPU 1: Quad-Core Intel Xeon 1333 MHz CPU 2: Quad-Core Intel Xeon 2666 MHz Memory: 2048 MB Embedded Ethernet NIC 1 MAC Address: 00:19:BB:34:A1:5A NIC 2 MAC Address: 00:19:BB:34:91:FE...
Server Blade #8 Information: Server Blade Type: No Server Blade Installed SHOW SERVER LIST • Command: SHOW SERVER LIST • Description: Displays a brief description of all server blades to which the current user has access • Access level/Bay level: Administrator, operator Bay specific •...
Bay Server Name Serial Number Status Power UID Partner --- ----------------------------- --------------- -------- ------- --- ------- 1 First89123HostNameInILO USM64204B1 2 Integrity BL860c CSJ0634214 3 [Absent] 4 [Absent] 5 [Subsumed] 6 [Subsumed] 7 YOUR-EYZCGYAYBB USM62401EP 8 [Absent] Totals: 3 server blades installed, 3 powered on. SHOW SERVER PORT MAP •...
Bay specific • Restrictions: You must have access to the specified bay number. Example OA-0018FE27577F> show server powerdelay all show server powerdelay all Current PowerDelay Status: Not in Progress Device PowerDelay State Delay (seconds) -------------------------------- ---------------- --------------- ProLiant BL480c G1 Disabled Absent Disabled...
Page 105
You must have access to the specified bay number. Example OA-0018FE27577F> show server status all Blade #1 Status: Power: On Current Wattage used: 212 Health: OK Unit Identification LED: Off Diagnostic Status: Internal Data Management Processor OK I/O Configuration Power Cooling Location Device Failure...
SHOW SERVER TEMP • Command: SHOW SERVER TEMP {ALL | <bay number> [{ , | - } <bay number>]} • Description: Displays the temperature sensor information for a specified server blade or range of server blades • Access level/Bay level: Bay specific •...
• Restrictions: You must have explicit access to a bay given by the ASSIGN INTERCONNECT command. POWEROFF INTERCONNECT • Command: POWEROFF INTERCONNECT {ALL | <bay number> [{ - | , } <bay number>]} • Description: Sends a request to power off the interconnect module •...
SET INTERCONNECT POWERDELAY • Command: SET INTERCONNECT POWERDELAY {ALL | <bay number> [{ - | , } <bay number>]} {number of seconds to delay power | NOPOWERON} • Description: Sets the PowerDelay status for the specified interconnect or range of interconnects. If the delay is zero, the delay has no effect on the device.
• Access level/Bay level: Bay specific • Restrictions: You must have explicit access to a bay given by the ASSIGN INTERCONNECT command. Example OA-0018FE27577F> show interconnect info all 1. Ethernet Product Name: GbE2c Ethernet Blade Switch Width: Single URL to Management interface: In-Band IPv4 Address: 16.84.189.81 User Assigned Name: Part Number: 410917-B21...
• Access level/Bay level: • Restrictions: None Example OA-0018FE27577F> SHOW INTERCONNECT LIST Bay Interconnect Type Manufacturer Power Health Management IP --- ----------------- -------------------- ----- -- 1 Ethernet Cisco Systems, Inc. Off 16.84.189.31 2 [Absent] 3 [Absent] 4 [Absent] Totals: 1 interconnect modules installed, 1 powered on. SHOW INTERCONNECT PORT MAP •...
Displays the PowerDelay status for the specified interconnects or range of interconnects • Access level/Bay level: Bay specific • Restrictions: None Example OA-0018FE27577F> show interconnect powerdelay all show interconnect powerdelay all Current PowerDelay Status: Not in Progress Device PowerDelay State Delay (seconds) -------------------------------- ----------------...
Enclosure DVD commands SET SERVER DVD • Command: SET SERVER DVD {CONNECT | DISCONNECT} [USB://url] {ALL | <bay number> [{ , | - } <bay number>]} • Description: Connects or disconnects the specified server or range of servers from the enclosure DVD drive. The DISCONNECT argument detaches any URL in addition to the enclosure DVD.
Page 117
[Bay empty] [Bay empty] 7 No [Non-server blade] Enclosure DVD commands 117...
Remote syslog commands DISABLE SYSLOG REMOTE • Command: DISABLE SYSLOG REMOTE • Description: Disables remote system logging • Access level/Bay level: OA administrator Restrictions: Must be operator or administrator with OA permission to perform this command. ENABLE SYSLOG REMOTE • Command: ENABLE SYSLOG REMOTE •...
SET REMOTE SYSLOG SERVER • Command: SET REMOTE SYSLOG SERVER <server> • Description: Sets the IP address or DNS name for remote system log messages. • Access level/Bay level: OA administrator • Restrictions: None SHOW SYSLOG SETTINGS • Command: SHOW SYSLOG SETTINGS •...
Remote syslog example The remote syslog consists of a date and time stamp, the Onboard Administrator IP address, text, and a priority number. The date and time stamp, and the text match the Onboard Administrator syslog entry. 9 16:00:28 10.128.126.204 OA: Remote system logging enabled to server 16.83.33.81, port 514 (priority 13) Remote syslog commands 120...
USB support commands DOWNLOAD CONFIG using USB key • Command: DOWNLOAD CONFIG <url> • Description: Downloads a saved configuration file from a specific IP host. The file is not checked for errors but is automatically executed in SCRIPT MODE. Supported protocols are HTTP, FTP, TFTP, and USB. Format the <url>...
• Description: Displays a list of Firmware images, configuration scripts, and ISO images present on the enclosure USB media • Access level/Bay level: OA administrator • Restriction: None Example OA-00215AB195CB> show usbkey Firmware Image Files Image Version --------------------------------------- ------------- usb://d1/hpoa225.bin 2.25 Configuration Script Files ---------------------------------------...
The URL must be formatted as protocol://host/path/filename. If your FTP server does not support anonymous connections, then you can specify a user name and password by replacing host in the previous format with username:password@host/path/filename. Use FORCE to enable downgrading firmware even if settings and passwords might be lost. UPLOAD CONFIG using USB key •...
Enclosure Dynamic Power Cap commands SET ENCLOSURE POWER_CAP • Command: SET ENCLOSURE POWER_CAP [< number> | OFF ] • Description: Sets the Enclosure Dynamic Power Cap in watts AC. OFF disables Enclosure Dynamic Power Cap. • Access level/Bay level: OA administrator, OA operator •...
SHOW ENCLOSURE POWER_CAP • Command: SHOW ENCLOSURE POWER_CAP • Description: Displays the current Enclosure Dynamic Power Cap in watts. • Access level/Bay level: • Restriction: None Example OA-0018FE27577F> show enclosure power_cap Enclosure Dynamic Power Cap: Disabled Allowable Enclosure Dynamic Power Cap: 1794 - 4378 Watts AC SHOW ENCLOSURE...
Event notifications Enclosure event notifications Enclosure events produce screen messages with the show events option enabled. If you are directly affected by an event, a message is produced whether the show events option is enabled or disabled. Event messages include the device affected, the device name, and the date and time of the event. Some examples of event messages are: •...
Page 127
Event Cause Enclosure Status Change A change in status has occurred because of a change in the state of one or more hardware components or server readings. Enclosure Name Change The name of the enclosure was changed. Fan Status Change The status of a fan has changed.
Page 128
Event Cause Rack Topology Enclosures were connected or disconnected from the enclosure link. Thermal Status Change A thermal sensor has changed state. User Removed A user was removed from the Onboard Administrator. If you are logged in as this user, you are disconnected from the Onboard Administrator.
Technical support Before you contact HP Be sure to have the following information available before you call HP: • Technical support registration number (if applicable) • Product serial number • Product model name and number • Product identification number • Applicable error messages •...
Time zone settings Universal time zone settings IMPORTANT: Time zones must be entered exactly as they appear. The following table provides the Universal time zone settings that are supported by the Onboard Administrator. Etc/GMT-2 Etc/GMT+7 Etc/GMT-13 CST6CDT Etc/GMT+2 Etc/GMT-8 Etc/GMT-14 MST7MDT Etc/GMT-3 Etc/GMT+8...
Africa/Blantyre Africa/Harare Africa/Maseru Africa/Wjndhoek AfricaBrazzaville Africa/Johannesburg Africa/Mbabane Egypt Africa/Bujumbura Africa/Kampala Africa/Mogadishu Libya Africa/Cairo Africa/Khartoum Africa/Monrovia — Africa/Casablanca Africa/Kigali Africa/Nairobi — Americas time zone settings IMPORTANT: Time zones must be entered exactly as they appear. The following table provides the Americas time zone settings that are supported by the Onboard Administrator.
Australia/Melbourne Kwajalein Pacific/Midway — Australia/North Pacific/Nauru — Europe time zone settings IMPORTANT: Time zones must be entered exactly as they appear. The following table provides the European time zone settings that are supported by the Onboard Administrator. Eire Europe/Helsinki Europe/Paris Europe/Vaduz Europe/Amsterdam Europe/Istanbul...
Acronyms and abbreviations BIOS Basic Input/Output System certificate authority Command Line Interface central processing unit DDNS Dynamic Domain Name System DHCP Dynamic Host Configuration Protocol domain name system EBIPA Enclosure Bay IP Addressing field replaceable unit file transfer protocol graphical user interface HP SIM HP Systems Insight Manager Acronyms and abbreviations 135...
Page 136
HTTP hypertext transfer protocol HTTPS hypertext transfer protocol secure sockets interface adapter ICMP Internet Control Message Protocol iLO 2 Integrated Lights-Out 2 Internet Protocol LDAP Lightweight Directory Access Protocol light-emitting diode Media Access Control network interface controller network time protocol operating system power distribution unit PKCS...
Page 137
Preboot Execution Environment RBSU ROM-Based Setup Utility RIBCL Remote Insight Board Command Language SNMP Simple Network Management Protocol SOAP Simple Object Access Protocol Secure Shell single sign-on TFTP Trivial File Transfer Protocol unit identification uniform resource locator extensible markup language Acronyms and abbreviations 137...
Index command, ADD SSHKEY 53 command, ADD TRUSTED HOST 54 command, ADD USER 20 accessing the CLI 9 command, ASSIGN 20 account authentication 14 command, ASSIGN for LDAP 31 account level 12 command, ASSIGN INTERCONNECT 109 ADD EBIPA 49 command, ASSIGN OA 21 ADD HPSIM CERTIFICATE 39 command, ASSIGN OA LDAP GROUP 32 ADD LDAP CERTIFICATE 31...
Page 139
command, ENABLE GUI_LOGIN_DETAIL 71 command, SET ENCLOSURE command, ENABLE HTTPS 59 POWER_CAP_BAYS_TO_EXCLUDE 124 command, ENABLE LDAP 33 command, SET ENCLOSURE SERIAL_NUMBER 74 command, ENABLE LLF 71 command, SET ENCLOSURE UID 74 command, ENABLE NTP 59 command, SET FACTORY 44 command, ENABLE SECURESH 60 command, SET HPSIM TRUST MODE 40 command, ENABLE SNMP 60 command, SET INTERCONNECT...
Page 140
command, SHOW CONFIG 76 command, SHOW SSHKEY 68 command, SHOW DATE 79 command, SHOW SYSLOG 90 command, SHOW DEVICE SERIAL NUMBER command, SHOW SYSLOG OA 91 BLADE 48 command, SHOW SYSLOG SERVER 106 command, SHOW DISPLAY EVENTS 80 command, SHOW SYSLOG SETTINGS 119 command, SHOW EBIPA 51 command, SHOW TOPOLOGY 18 command, SHOW ENCLOSURE FAN 80...
Page 141
DISABLE USER 21 Group Administration 126 DISABLE XMLREPLY 58 DOWNLOAD CA CERTIFICATE 28 DOWNLOAD CONFIG 58 HELP 16 DOWNLOAD CONFIG using USB key 121 help resources 129 DOWNLOAD HPSIM CERTIFICATE 39 HISTORY 22 DOWNLOAD LDAP CERTIFICATE 32 HP SIM commands 39 DOWNLOAD OA CERTIFICATE 41 HPONCFG 95 DOWNLOAD SSHKEY 58...
Page 142
REMOVE LDAP CERTIFICATE 33 SET OA USB 75 REMOVE LDAP GROUP 33 SET PASSWORD 23 REMOVE OA DNS 61 SET POWER LIMIT 75 REMOVE SNMP TRAPRECEIVER 61 SET POWER MODE 75 REMOVE TRUSTED HOST 62 SET POWER SAVINGS 76 REMOVE USER 22 SET RACK NAME 18 REMOVE USER CERTIFICATE 29 SET REMOTE SYSLOG PORT 118...
Page 143
SHOW LDAP INFO 36 UNASSIGN FOR LDAP 37 SHOW NETWORK 66 UNASSIGN OA 27 SHOW OA 87 UNASSIGN OA LDAP GROUP 37 SHOW OA CERTIFICATE 87 UNASSIGN SERVER 107 SHOW OA INFO 88 universal time zone 130 SHOW OA NETWORK 88 UPDATE 92 SHOW OA STATUS 89 UPDATE ILO 93...