Management Snap-In Installer; Directory Services For Active Directory - HP AB500A - Integrated Lights-Out Advanced User Manual

Management snap-in installer

The management snap-in installer installs the snap-ins required to manage iLO 2 objects in a Microsoft®
Active Directory Users and Computers directory or Novell ConsoleOne directory.
iLO 2 snap-ins are used to perform the following tasks in creating an iLO 2 directory:
•
Creating and managing the iLO 2 and role objects (policy objects will be supported at a later date)
•
Making the associations between iLO 2 objects and the role (or policy) objects

Directory services for Active Directory

The following sections provide installation prerequisites, preparation, and a working example of Directory
Services for Active Directory. HP provides a utility to automate much of the directory setup process. You
can download the HP Directories Support for Management Processors on the HP website
(http://h18004.www1.hp.com/support/files/lights-out/us/index.html).
Active Directory installation prerequisites
•
The Active Directory must have a digital certificate installed to allow iLO 2 to connect securely over
the network.
•
The Active Directory must have the schema extended to describe Lights-Out object classes and
properties.
•
The firmware version must be iLO v1.40 or later, or iLO v1.00 or later.
•
iLO 2 advanced features must be licensed.
You can evaluate iLO Advanced with a free evaluation license key that you can download from the
HP website (http://h10018.www1.hp.com/wwsolutions/ilo/iloeval.html).
Directory Services for iLO 2 uses LDAP over SSL to communicate with the directory servers. Before
installing snap-ins and schema for Active Directory, read and have available the following
documentation:
IMPORTANT:
schema. Extending the schema must be completed by an Active Directory Schema
Administrator.
•
Extending the Schema in the Microsoft® Windows® 2000 Server Resource Kit, available on the
Microsoft® website (http://msdn.microsoft.com).
•
Installing Active Directory in the Microsoft® Windows® 2000 Server Resource Kit
•
Microsoft® Knowledge Base Articles
These articles are accessed using the Knowledge Base Article ID Number Search option on the
Microsoft® website (http://support.microsoft.com/).
216999 Installing the Remote Server Administration Tools in Windows® 2000
o
314978 Using the Adminpak.msi to Install a Server Administration Tool in Windows® 2000
o
247078 Enabling SSL Communication over LDAP for Windows® 2000 Domain Controllers
o
321051 Enabling LDAP over SSL with a Third-Party Certificate Authority
o
299687 MS01-036: Function Exposed By Using LDAP over SSL Could Enable Passwords to Be
o
Changed
Installing Directory Services for iLO 2 requires extending the Active Directory
Directory services 147