User Accounts And Access - HP AB500A - Integrated Lights-Out Advanced User Manual

iLO 2 provides support for the TPM mezzanine module in ProLiant 100 and ProLiant 300/500 series
servers.
On a supported system, iLO 2 decodes the TPM record and passes the configuration status to iLO 2, CLP,
and XML interface. The System Status page displays the TPM configuration status. If the host system or
System ROM does not support TPM, TPM Status is not displayed in Status Summary page. The Status
Summary displays the following TPM status information:
•
Not Present—A TPM module is not installed.
•
Present—when:
A TPM module is installed but it is disabled.
o
A TPM module is installed and enabled.
o
A TPM module is installed, enabled, and Expansion ROM measuring is enabled. If Expansion
o
ROM measuring is enabled, the Update iLO 2 Firmware page displays a legal warning message
when you click Send firmware image.

User accounts and access

iLO 2 supports the configuration of up to 12 local user accounts. Each of these accounts can be managed
through the use of the following features:
•
Privileges (on page 44)
•
Login security (on page 44)
iLO 2 can be configured to use a directory to authenticate and authorize its users. This configuration
enables a virtually unlimited number of users, and easily scales to the number of Lights-Out devices in an
enterprise. Additionally, the directory provides a central point of administration for Lights-Out devices and
users, and the directory can enforce a stronger password policy. iLO 2 enables you to use local users,
directory users, or both.
Two configuration options are available: using a directory that has been extended with HP Schema
("Setting up HP schema directory
(schema-free ("Setup for Schema-free directory
Privileges
iLO 2 allows the administrator to control user account access to iLO 2 functions through the use of
privileges. When a user attempts to use a function, the iLO 2 system verifies that the user has the privilege
before the user is allowed to perform the function.
Each feature available through iLO 2 can be controlled through privileges, including Administer User
Accounts, Remote Console Access, Virtual Power and Reset, Virtual Media, and Configure iLO 2 Settings.
Privileges for each user can be configured on the User Administration page of the Administration tab.
Login security
iLO 2 provides several login security features. After an initial failed login attempt, iLO 2 imposes a delay
of five seconds. After a second failed attempt, iLO 2 imposes a delay of 10 seconds. After the third failed
attempt, and any subsequent attempts, iLO 2 imposes a delay of 60 seconds. All subsequent failed login
attempts cycles through these values. An information page is displayed during each delay. This will
continue until a valid login is completed. This feature assists in defending against possible dictionary
attacks against the browser login port.
integration" on page 142) or using the directory's default schema
integration" on page 138)).
Configuring iLO 2 44