Table of Contents

Advertisement

HPE Superdome Flex Server User Guide
Abstract
Product overview, initial setup, network configuration, and system management.
Part Number: 10-200003-Q122
Published: October 2021
Edition: 11

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Superdome Flex and is the answer not in the manual?

Questions and answers

Summary of Contents for Hewlett Packard Enterprise Superdome Flex

  • Page 1 HPE Superdome Flex Server User Guide Abstract Product overview, initial setup, network configuration, and system management. Part Number: 10-200003-Q122 Published: October 2021 Edition: 11...
  • Page 2 Copyright 2017, 2021 Hewlett Packard Enterprise Development LP Notices The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services.
  • Page 3 • Updated several illustrations P06152-002 June 2018 Added details about new support for partitionable systems. P06152-001 March 2018 Updated title to HPE Superdome Flex Server User Guide. 007-6489-001 December 2017 Published as HPE Superdome Flex Server Getting Started Guide.
  • Page 4: Table Of Contents

    Changing the factory-default IPMI password on the RMC....................22 Changing the factory-default passwords on the BMC......................23 Verifying the HPE Superdome Flex Server is running correctly and can boot................ 24 Configuring the RMC to forward SNMP alerts.............................26 SNMP alerts........................................26 Managing HPE Superdome Flex Server..............
  • Page 5 Cannot enable the Attempt Secure Boot option........................54 OS boot fails from boot manager...............................55 OS boot fails with security violation message at UEFI Shell....................56 OS update may fail on Superdome Flex servers running Linux with Secure Boot enabled......56 Websites..........................58 Support and other resources..................60 Accessing Hewlett Packard Enterprise Support............................60...
  • Page 6: Hpe Superdome Flex Server Overview

    HPE Superdome Flex Server overview The HPE Superdome Flex Server is a large-scale system that uses in-memory computing technology to enable real-time transactional and analytical processing for large enterprises. This computing system has the following characteristics. • The base chassis is the lowest chassis in the rack, carrying the overall system entitlement information.
  • Page 7: Post Installation Checklist

    HPE Superdome Flex Server OS Installation Guide for additional information. Procedure 1. Configure the HPE Superdome Flex Server on your site network. This manual, the HPE Superdome Flex Server User Guide, explains how to complete this configuration task. 2. Install an operating system on the server.
  • Page 8: Safety Considerations

    Safety considerations WARNING: Be sure to observe all Electrostatic Discharge (ESD) and safety requirements when you install or service Superdome Flex Server and RMC. General safety • Follow all warnings and instructions marked on the product and noted in the documentation included with this product.
  • Page 9 Hearing safety Wear proper hearing protection when you install or service a system. Chassis and system weight safety • A fully loaded chassis weighs approximately 110 lbs (50 kg). Use one of the following methods to move Superdome Flex Server safely: ◦...
  • Page 10 Stepladder safety Installing Superdome Flex Grid cables or accessing components located near the top of a rack might require using a stepladder. To properly use a stepladder: WARNING: Always exercise caution when using a stepladder. Failure to do so may result in serious personal injury.
  • Page 11: Configuring The Hpe Superdome Flex Server

    For more information about the physical specifications, see the HPE Superdome Flex QuickSpecs at www.hpe.com/ support/superdome-flex-quickspecs. 2. Coordinate with the site network administrator to connect the HPE Superdome Flex Server to a private server management network within your corporate LAN.
  • Page 12: Information For The Rmc And The Bmc

    P0005521-001 • Ethernet cables. You, the customer, must provide cables to connect each HPE Superdome Flex Server chassis to your network. Make sure that the cables are long enough to extend from each chassis to your LAN ports. For example, if you have two chassis, you need two Ethernet cables.
  • Page 13: Supported Superdome Flex Server Network Ports

    Hewlett Packard Enterprise recommends that you configure the same password for both the RMC administrator user and ipmi user. The BMC Superdome Flex chassis running FW 3.0.512 or later will use the RMC/eRMC local account to authenticate JViewer, KVM, and Virtual Media.
  • Page 14 The following procedure explains how to connect the RMC to a private server management network within a corporate LAN. 1. Locate the RMC at the back of the HPE Superdome Flex Server. • An RMC is a 1U rackmounted component.
  • Page 15 If the system uses an RMC, this sticker is on the rear of the 1U rackmounted component. Password • If the system uses an eRMC, the sticker is on the top-right rear corner of the base chassis (at the lowest U position in the rack). Configuring the HPE Superdome Flex Server...
  • Page 16 • If the system uses an eRMC, plug one end of the Ethernet cable into the MGMT port on the base chassis BMC. Plug the other end into the manageability network. Configuring the HPE Superdome Flex Server...
  • Page 17: Connecting The Mgmt Lan Port On The Bmc To The Manageability Network

    • You have a 1U RMC and you must use JViewer when installing the operating system software on the server. For more information about JViewer, see HPE Superdome Flex Server OS Installation Guide. • When JViewer is required, the monarch chassis must be connected to the management LAN.
  • Page 18: Configuring The Rmc On The Network

    AUX with cable—For more information, see Connecting the RMC to the network through an AUX with LAN cable. • More information Connecting the RMC to the network through a USB port Connecting the RMC to the network through an AUX with LAN cable Configuring the HPE Superdome Flex Server...
  • Page 19: Connecting The Rmc To The Network Through A Usb Port

    NOTE: If you are using a Windows laptop, you might need to load the driver for the eRMC serial port or the driver shim for the RMC serial port. For information about loading these drivers, see Accessing HPE Superdome Flex Server RMC or eRMC from Windows.
  • Page 20: Connecting The Rmc To The Network Through An Aux With Lan Cable

    Locate the RMC password sticker. If a customer changes this password, they assume responsibility for keeping this password known to their staff and to Hewlett Packard Enterprise representatives who might need the RMC password in the future.
  • Page 21 Locate the RMC password sticker. If a customer changes this password, they assume responsibility for keeping this password known to their staff and to Hewlett Packard Enterprise representatives who might need the RMC password in the future.
  • Page 22: Changing The Factory Default Ipmi Command Password Recommendations

    The IPMI 2.0 specification has inherent security weaknesses. Consider using the Redfish manageability standard in Superdome Flex Server, which is designed to replace IPMI. Hewlett Packard Enterprise recommends that if you do not need to use IPMI, it must remain disabled. If you must use IPMI, use a separate management LAN and change the IPMI command password.
  • Page 23: Changing The Factory-Default Passwords On The Bmc

    Changing the factory-default passwords on the BMC Hewlett Packard Enterprise recommends changing the password to a strong password for the administrator and ipmi on all BMCs. In addition, Hewlett Packard Enterprise recommends that the site-specific password you create match the password you chose for the RMC administrator user and the IPMI password for the RMC.
  • Page 24: Verifying The Hpe Superdome Flex Server Is Running Correctly And Can Boot

    Using another computer at your site that can reach the system over a network connection. NOTE: Hewlett Packard Enterprise recommends that you use the xterm terminal emulator. Some other terminal emulators do not accept the key sequences in the configuration procedures.
  • Page 25 If the output contains a message that is similar to the following, the BMCs are not configured properly. WARNING: 2 BMC(s) are not configured If you receive this warning message, or if the BMCs fail to present, go to Hewlett Packard Enterprise Support Center website.
  • Page 26: Configuring The Rmc To Forward Snmp Alerts

    The RMC and the BMCs manage SNMP alerts, with the RMC receiving the SNMP alerts that the BMCs generate. Hewlett Packard Enterprise also supports the Redfish standard, with Redfish Alerting and Eventing available for subscription as well. Selected events are sent over the network toward specified event receivers. The event receivers send a subscription request to the RMC/BMC containing the types of event that they are prepared to receive and process.
  • Page 27: Managing Hpe Superdome Flex Server

    Configuring a hard disk as virtual media Logging in with JViewer JViewer is a standalone Java application, and can be used to connect to HPE Superdome Flex Server. However, the RMC browser login is the recommended, more secure, connection method.
  • Page 28: Running Jviewer From A Privileged Account

    Windows 10, one approach is to access the Windows command line as the administrator user, and then run JViewer from that command line. For more information about using JViewer with vFolders, see the HPE Superdome Flex Server OS Installation Guide.
  • Page 29: Supported Jviewer Clients

    NOTE: java must be in your path, otherwise specify the full path to your installed java.exe file. Supported JViewer clients HPE Superdome Flex Server supports launching JViewer from the following client environments. Table 2: HPE Superdome Flex Server recommended JDK versions...
  • Page 30 From the console, enter the map -r command and search for filesystem devices (FS) that have a USB designator. Shell> map -r Mapping table FS0: Alias(s):HD1m0c0:;BLK1: PciRoot(0x0)/Pci(0x14,0x0)/USB(0xC) Shell> fs0: FS0:\> dir Directory of: FS0:\ 01/18/2019 06:35 10,660 fs0.txt 01/18/2019 06:34 README.txt 2 File(s) 10,724 bytes 0 Dir(s) Managing HPE Superdome Flex Server...
  • Page 31: Configuring A Hard Disk As Virtual Media

    A physical hard disk containing FAT or FAT32 partitions can be mounted as virtual media for UEFI. Prerequisites You are logged in as an administrator. See Logging on to the RMC with a browser. Procedure 1. Run the download jviewer-sa.jar. java -jar jviewer-sa.jar [-hostname BMC_HOSTNAME] [-u Managing HPE Superdome Flex Server...
  • Page 32 4. If the server is not powered on, power it on from the RMC. power on npar pnum=0 bootopt=Shell bootopt=Shell forces the console to stop at the UEFI Shell prompt. 5. Launch the KVM for console access. Managing HPE Superdome Flex Server...
  • Page 33 While the physical drive is connected, the logical partitions mounted as Virtual Media are not accessible from the machine running JViewer-sa.jar. To access the logical drives locally, you must first exit JViewer- sa.jar. You now have read and write access to the Virtual Media. More information Running JViewer from a privileged account Managing HPE Superdome Flex Server...
  • Page 34: Rmc Accounts And Passwords

    The dot (.) character is a valid character in user and group names. However, the Superdome Flex Rack Management Controller (RMC)/Embedded Rack Management Controller (eRMC) Command Line Interface (CLI) disallows the dot (.) in user and group names. As a result, LDAP group names with a dot (.) cannot be used by the Superdome Flex RMC/eRMC commands.
  • Page 35: Ldap User Authentication

    Administration Guide. LDAP configuration LDAP configuration is managed using the CLI on the RMC. Successfully configuring the HPE Superdome Flex Server for LDAP authentication requires providing the LDAP server details, associating group entries on the LDAP server with user roles, and enabling LDAP on the RMC. Any LDAP user account which is a member of an authorized group will be able to log into the RMC with the specified group role.
  • Page 36 If the user entries on the AD server do not contain uidNumber and gidNumber attributes, you may use the objectSID attribute by setting sid to the domain value of the server. See the Active Directory example below. Managing HPE Superdome Flex Server...
  • Page 37 NOTE: The space character for the DN string can be included by replacing space with \20 ( for example. backslash followed by the digits two and zero). In the following example, DN with OU customer service org is represented as customer\20service\20org. set ldap groupdn="ou=groups,ou=customer\20service\20org,dc=company,dc=com" More information Configuring LDAP server details Managing HPE Superdome Flex Server...
  • Page 38: Adding New Ldap Groups

    RMC cli> add ldap_group name=HPE_Superdome_Flex_users role=operator Updating LDAP configuration and restarting service if necessary... Added LDAP group: HPE_Superdome_Flex_users Modifying LDAP groups Procedure Change the privilege level for an LDAP group by using the modify ldap_group command. Managing HPE Superdome Flex Server...
  • Page 39: Removing Ldap Groups

    RMC cli> enable ldap Updating LDAP configuration and restarting service if necessary... LDAP is enabled Disabling LDAP authorization on the RMC Procedure Disable LDAP authorization on the RMC by using the disable ldap command. RMC cli> disable ldap Managing HPE Superdome Flex Server...
  • Page 40: Validating The Ldap Configuration

    Attempting LDAP search for user1 in ou=org,dc=company,dc=com DN scope... # LDAPTLS_REQCERT=allow # ldapsearch -LLL -v -x -l 90 -d 4 -H ldaps dir_server.company.com:636 -b "ou=org,dc=company,dc=com" "(&(objectClass=posixAccount)(uid=user1))" uid Entry for user1 was found. User Search Test was successful. LDAP Client Test ---------------- Managing HPE Superdome Flex Server...
  • Page 41: User Account Management With The Rmc Cli

    User account management with the RMC CLI You use the CLI on the RMC to manage user accounts on the HPE Superdome Flex Server system. You also use the RMC CLI to add users to or remove users from the system, and to change user roles and passwords.
  • Page 42: Displaying Rmc User Information

    2. Verify that new user account has been successfully added: show user list Removing RMC users Procedure 1. Remove RMC users using the remove user command. remove user name=USERNAME For example: RMC cli> remove user name=Mary_Albright Managing HPE Superdome Flex Server...
  • Page 43: Changing Rmc User Passwords

    RMC cli> remove user name=Mary_Albright Killing user processes. Removing user account. Removing user home directory. User removed. 2. Create the user account with a new role using the add user name command. add user name=USERNAME role=USER ROLE For example: Managing HPE Superdome Flex Server...
  • Page 44: Resetting The Administrator Password

    HPE Superdome Flex Server updates Updating HPE Superdome Flex Server firmware This topic describes how to update HPE Superdome Flex Server firmware using a system firmware bundle. For information about other update methods, see the "Firmware Update" section of the www.hpe.com/support/superdomeflex- management-whitepaper white paper.
  • Page 45: Updating The Operating System

    See the Running VMware vSphere on HPE Superdome Flex Server white paper at www.hpe.com/support/superdome- flex-vmware for information regarding installing and updating VMware. VMware on HPE Superdome Flex Server contains HPE value-add components requiring a custom ISO image to get the latest drivers and HPE components.
  • Page 46: Updating Hpe Foundation Software For Linux Systems

    Updating the I/O firmware and drivers on HPE Superdome Flex Server systems Procedure 1. Update the I/O firmware and drivers on the HPE Superdome Flex Server system by downloading the HPE Superdome Flex I/O Service Pack image. 2. Search for "Superdome Flex firmware," and then select Firmware (Entitlement Required).
  • Page 47: Hpe Persistent Memory On Hpe Superdome Flex Server

    HPE Persistent Memory on HPE Superdome Flex Server Hewlett Packard Enterprise supports HPE Persistent Memory on Superdome Flex Server with Intel Xeon 62xx and 82xx (Cascade Lake) processors. For details on supported PMM configurations and related administration and maintenance tasks, see HPE Persistent Memory Guide for HPE Superdome Flex Server.
  • Page 48: Configuring Iscsi Boot

    Configuring iSCSI boot Prerequisites The chassis must contain a Mellanox 100Gb IB/Eth 841QSFP28 card in the supported boot slot. Procedure At the UEFI Shell, use the dh command to list device details and verify that iSCSI components are present. Enter the UEFI Shell command exit to access the boot menu. Select Device Manager.
  • Page 49: Secure Boot

    Secure boot features When secure boot is enabled on Superdome Flex Server, system firmware verifies OS loader, driver, and UEFI application signatures before executing them. By default, secure boot is disabled. This default applies to systems shipped from the factory, and to newly created Superdome Flex Server partitions.
  • Page 50: Enabling Secure Boot With Boot Manager

    Procedure To enable Secure Boot: 1. Log in to the RMC CLI. 2. Enter one of the following commands: • If there are no nPartitions in the system, enter: create npar pnum=1 chassis=all secure_boot=on NOTE: chassis=all can be replaced by the chassis IDs. Example: chassis=r001i01b roo1i06b •...
  • Page 51: Disabling Secure Boot With Cli

    Custom Secure Boot Options menu Default secure boot keys Disabling Secure Boot with CLI Secure Boot can be enabled and disabled using RMC commands. Procedure To disable Secure Boot: 1. Log in to the RMC CLI. 2. Enter one of the following commands: •...
  • Page 52: Installing Or Reinstalling Default Secure Boot Keys

    Installing or reinstalling default Secure Boot keys When installing default keys, all secure boot data is overwritten with a default set for supported operating systems. Prerequisites A system must be in Setup mode (no keys installed) for the Install Default Keys option to be available. If a system has Secure Boot keys installed, delete the PK (platform key) to put the system in Setup mode.
  • Page 53: Custom Secure Boot Options Menu

    Current Secure Boot State Secure Boot enablement for the system, either enabled (keys are checked before UEFI execution) or disabled (keys not checked before execution). Attempt Secure Boot Option for enforcing Secure Boot. Checked indicates that Secure Boot will be enabled after the next system reset. You must reset the system after changing this option.
  • Page 54: Troubleshooting Os Secure Boot Issues

    Figure 3: UEFI Custom Secure Boot Options menu The custom Secure Boot key options are: PK Options Platform key options. Only one platform key may be enrolled. To enroll a different platform key, any existing platform key must first be deleted.
  • Page 55: Os Boot Fails From Boot Manager

    Secure Boot is configured, but the OS does not support Secure Boot. Action 1. Disable Secure Boot, or install an OS that supports Secure Boot. The Superdome Flex Server default secure keys permit execution of images signed by the following certificates: • HPE KEK 2016 •...
  • Page 56: Os Boot Fails With Security Violation Message At Uefi Shell

    OS update may fail on Superdome Flex servers running Linux with Secure Boot enabled Symptom On Superdome Flex servers running firmware version 3.0.512 on a Linux OS with Secure Boot enabled, an OS update may fail while trying to update the Secure Boot keys. The error message includes the text: Failed to create authenticated variable.
  • Page 57 Action 1. As a workaround, if using Linux on an HPE Superdome Flex Server with server firmware 3.0.512, do not update the OS while running with Secure Boot enabled. • To check if Secure Boot is enabled, at the RMC CLI enter the following command.
  • Page 58: Websites

    HPE Superdome Flex Server support documentation HPE Superdome Flex Server documentation for support specialists is available at www.hpe.com/support/superdome- flex-docs-restricted by signing in to the Hewlett Packard Enterprise Support Center with an entitled account. Related product websites HPE 9361-4i RAID Controller (Q2N11A) 1.
  • Page 59 General websites Hewlett Packard Enterprise Information Library www.hpe.com/info/EIL For additional websites, see Support and other resources. Websites...
  • Page 60: Support And Other Resources

    • For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website: https://www.hpe.com/info/assistance • To access documentation and support services, go to the Hewlett Packard Enterprise Support Center website: https://www.hpe.com/support/hpesc Information to collect • Technical support registration number (if applicable) •...
  • Page 61: Remote Support

    Additional regulatory information Hewlett Packard Enterprise is committed to providing our customers with information about the chemical substances in our products as needed to comply with legal requirements such as REACH (Regulation EC No 1907/2006 of the European Parliament and the Council). A chemical information report for this product can be found at: https://www.hpe.com/info/reach...
  • Page 62: Documentation Feedback

    Documentation feedback Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the documentation, use the Feedback button and icons (located at the bottom of an opened document) on the Hewlett Packard Enterprise Support Center portal (https://www.hpe.com/support/hpesc) to send any errors, suggestions, or comments.

Table of Contents

Save PDF