Firmware CD Supplemental Update / Online ROM Flash Component for Linux - HP Integrated Lights-Out 3

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

•  Intermittent termination of a network connection might occur on some servers while connecting from CLI.
•  iLO 3 might be unable to synchronize date and time with Onboard Administrator
•  Integrated Remote Console might fail to open and display “HTTP error: The operation has timed out”.
•  An Unhandled Exception Error might be displayed when toggling and applying FIPS Mode settings.
•  Disabled HTTP TRACE method in iLO 3 webserver. Having it enabled caused few security scanners to report it as a vulnerability.
•  Some security scanners could make iLO 3 webserver unresponsive and trigger a watchdog reset. The message "iLO 3 reset by watchdog" would be seen in the event log.
•  After upgrading to firmware v1.50 on blades, iLO 3 date could be off by 70 years (1942 instead of 2012)
•  iLO 3 Certificate Signing Request (CSR) countryName object is now PrintableString. The original countryName object was UTF8 which caused some Certificate Authorities to reject the iLO 3 CSR.
•  The Pre-failure video playback might end without showing video.
•  A user with insufficient privileges might be able to modify network settings through iLO Command Line Interface.
•  Increased buffer size to allow the importing of a X.509 certificate file up to 3072 bytes long (Base64 encoded).

• Added the ability to send the pre-failure video of a server to a remote webdav or IIS server through the CLI.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

The following issues are resolved with iLO 3 firmware version 1.50:

• SSH key import problem in which SSH key blobs include extra space after the user name.
• Host Power Saver efficiency mode did not sync-up with the XML script.
• Percent symbol was missing in the DesiredSpeed field for fan speed in the CLI.
• iLO incorrectly displayed the DesiredSpeed for fan as 100 when one of the fans in a redundant configuration stopped working.
• The Network Time Protocol (NTP) Timezone dropbox was active when the DHCP was enabled.
• Error=400; Out of memory error in iLO' message displayed in the iLO GUI web interface while trying to add a new SSL certificate.
• iLO power meter might not return to normal even after deactivating the e-brake.
• DNS Domain name might accept some invalid characters in iLO CLI.
• The IPMI Serial Over LAN (SOL) session might stop responding at iLO RBSU during a server reboot.
• iLO did not decode special characters such as &, <, >, ', " in password through RIBCL.
• iLO might stop responding occasionally when a Web Server setting was changed.
• Adding/Removing SSH key for a user might generate an improper event log in iLO.
• iLO might not display Asset Tag information through the IPMIUTIL FRU command on Windows Client.
• Changing the boot order in the iLO web interface might not work properly with arrow keys in Microsoft Internet Explorer 7.0.
• XML entries with unsupported characters for Computer Lock configuration were accepted in iLO web interface and converted as valid key entries.
• DHCP supplied time zone was not applied to the time iLO obtained from an NTP server.
• Intermittent Unknown status for System Health, Server Power and UID was displayed in the iLO web interface Overview page.
• RIBCL failed with a login error when password contained a "%" character.
• The numeric keypad did not work correctly in some situations.
• Get_All_Languages.xml file did not work with CPQLOCFG.
• iLO displayed an error message, "The Group SID is not valid", when SID was modified with a disabled directory.
• HP ProLiant BL460c G7 with Microsoft Windows Server 2008 R2, HP ProLiant Support Pack v8.60 and iLO 3 driver version 3.3.0.0 might randomly report hpilo3 driver errors in the system event log.
• iLO 3 Gateway IP address could be displayed as 0.0.0.0 in RBSU.
• iLO 3 could randomly fail to respond from the Channel Interface.
• iLO 3 could discard an imported SSL certificate that contains the SerialNumber field in the Subject.
• iLO 3 could attempt to shut down the server, if ambient temperature drops below zero Celsius.
• iLO 3 is marked with critical error in HPSIM and SMH when iLO 3 NIC is disabled.
• When trying to use IPMI tool via iLO 3 in Serial Over LAN (SOL) mode, the "Send break" command was not functional.

Added support for the following features in iLO 3 firmware version 1.50:

• IPv6 network communications - dedicated network connection only
  • Supported Networking Features
    • IPv6 Static Address Assignment
    • IPv6 SLAAC Address Assignment
    • IPv6 Static Route Assignment
    • Integrated Remote Console
    • OA Single Sign-On
    • Web Server
    • SSH Server
    • SNTP Client
    • DDNS Client
  • Networking Features not supported by IPv6 in this release
    • Shared Network Port Connections
    • DHCPv6 Address Assignment
    • DHCPv6 Domain, DNS, and NTP Configuration
    • Scriptable Virtual Media
    • CLI/RIBCL Key Import over IPv6
    • RIBCL over IPv6
    • CPQLOCFG/HPLOMIG over an IPv6 connection
    • Authentication using LDAP and Kerberos over IPv6
    • HP-SIM Single Sign-On
    • SNMP
    • IPMI
    • NETBIOS-WINS
    • WinDBG Support
• Customizable login security banner
• SSL custom certificate for RIBCL/CLI
• RIBCL command to remove SSH keys
• Special keys (function) for TextCons/Java IRC
• Hard drive temperature monitoring for HP Smart Array P222, P420 and P421 controllers
• Scripting command to read the asset tag
• IPMI-based hard drive health monitoring
• Federal Information Processing Standard compliance

Implemented the following enhancements in iLO 3 firmware version 1.50:

• SSL certificates signed with SHA256, SHA384 and SHA512 can now be imported into iLO 3.
• iLO now displays the iLO DNS name or IP address in the browser title bar/tab for all supported browsers.
• The sort order in the iLO Event Log and Integrated Management Log now displays events by severity.
• Simple Network Time Protocol now support Fully Qualified Domain Name and IPv6.
• SET_HOST_APO.XML now uses iLO user permissions.
• A Boot order page added to the iLO 3 Web Interface.
• iLO 3 now support Hot Keys for Remote Console.
• Integrated Management Log (iLO web interface) now has the following capabilities:
  • The status of Critical or Caution events can be changed to Repaired
  • Maintenance Note can be added to the IML log

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

• iLO 3 web server might run out of SSL sessions. This situation might occur if client opens HTTPS connection to iLO 3 but never does the SSL handshake and keeps the TCP session open forever.
• iLO 3 might disconnect SSH session when using “ServerAliveInterval” option.
• VSP session was restricted to a maximum of 100 characters when pasting text.  The limit is now increased to 250 characters.
• iLO 3 might fail to resolve DNS name, if DNS server replies via TCP with a large number of records (100 or more).
• iLO 3 might reject subsequent power ON requests from the OA when the following conditions exist within an enclosure:
  • AC power restored to an enclosure where a blade server was auto-powered ON 
  • When the blade server was manually powered off via the OA
• When an SSH certificate was for an Administrator account, it could not be imported via XML.
• iLO 3 ROM-Based Setup Utility (RBSU) might display “Resetting iLO, please wait” for 10 minutes after exiting iLO RBSU with changes that cause iLO 3 to reset.
• iLO 3 web GUI doesn’t show “Drives” information for a second SAS expander in the HP DL385 G7 server.
• iLO 3 might become slow to respond after closing SSH session.
• CLI via SSH might lock up after very quickly typing in commands.
• Unable to generate Certificate Signing Request (CSR) after iLO 3 DNS name was changed.
• Spurious over- temperature readings were seen in HP DL580 G7 and DL980 G7 servers.
• Improper value displayed in Power Meter when the server is OFF.
• Could not install Solaris 10 though Virtual Media.
• Web GUI might stop responding when SSO login contains key larger than 1024 bits.
• Could not change Gateway address.
• The User Administration page exhibited a script vulnerability.
  
   

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

Customers that are using iLO 3 v1.25 are recommended to update their iLO's to v1.26.

Problems Fixed:
     v1.26
• The Auto Power On setting on HP ProLiant Blade Servers was reversed.  This issue was introduced in version 1.25.  See Customer Advisory:
   http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?locale=en_US&objectID=c02913412     
• HP ProLiant Blade Servers might request maximum power from the Onboard Administrator. This issue was introduced in version 1.25. Depending on how much power the enclosure has available, OA could reject Power On requests from other blades in the enclosure.  http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02975068    
• Running Secure Shell (SSH) using a Digital Signature Algorithm (DSA) private key larger than 2048 bit might make Integrated Lights Out 3 (iLO 3) web server and SSH stop responding. 
• Virtual Media thread might randomly stop responding after connecting a drive, folder or image.  Virtual media would be unavailable until iLO 3 is rebooted.     
• Virtual Media thread might stop responding after running an XML script that changes any of the iLO3 Global Settings. Virtual media would be unavailable until iLO 3 is rebooted.    
• Invoking Virtual Serial Port (VSP) or Textcons might take up to two minutes to work if DNS servers in iLO  3 are improperly configured or DNS servers are unreachable.     
• After rebooting the server the following error message might display during POST: “Warning – iLO 3 not responding. System health monitoring disabled.”     
• Pasting text into a VSP session may not work properly if the server is in ROM Based Setup Utility (RBSU) CLI mode.
• In a VMware ESXi 4.0 or 4.1 environment on the HP ProLiant DL360 G7, HP ProLiant DL380 G7, and the HP ProLiant DL580 G7 servers iLO 3 may report an erroneous 9006 condition.
• After performing a warm boot on the HP ProLiant BL460c G7, the blade might randomly fail to discover all the installed memory DIMMs.
• Nessus Security Scanner might cause the iLO web server to stop responding.
      
     
     v1.25
• Opening a Java Remote Console and attempting to acquire an in-use Remote Console session caused Java and Internet Explorer to stop responding.      
• Opening a .NET Integrated Remote Console from a Windows 7 client caused the language icon on the Taskbar to disappear.      
• The Configure iLO privilege is required for users to successfully run any XML script containing the <RIB_INFO> tag.      
• Running an XML script to change one iLO 3 port number caused a "Port assignment must be unique" failure.      
• Using an XML script to apply a new SNTP Time zone setting would not work.      
• Using RIBCL and running GET_EmHealth.xml caused an incorrect power supply status.      
• Using RIBCL and running CERT_Request.xml from HPONCFG or LOCFG.pl caused a failure.      
• Using fence_ipmilan to power down the server caused a server reboot.      
• Users were unable to add multiple IP addresses for the Directory Server Address field in the Web GUI.

Note: For users that previously upgraded to v1.25, HP recommends that those users update to v.1.26 at their earliest convenience.

• Added support for Microsoft Internet Explorer versions 7, 8, and 9.  Microsoft Internet Explorer 6 will no longer be supported     
• Added the capability to restart the server operating system following a power interruption (Brown-Out) that is short enough to reset the OS, but not long enough to reset iLO.  Restarting the server after a power interruption long enough to reset iLO (Black-Out) was already supported.   
• Added support for SSL Certificate customization, allowing the user to enter customer-specific data for Country, State, City or Locality, Organization Name, Organizational Unit and Common Name.
• Added support for Hard Drive Health Monitoring on HP ProLiant G7 ML/DL/BL servers to provide drive status under the iLO UI Drives tab on the System Information page.    
    

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

Problems Fixed:

Disabled SSL/TLS renegotiation to protect iLO 3 against SSL/TLS plaintext injection attacks (CVE-2009-3555).

Fixed an issue where McAfee Vulnerability Manager (formerly FoundStone) could make iLO 3 webserver and SSH stop responding.

Fixed an issue where users with "Virtual Power and Reset" only privilege could not power on/off the server from the Command Line Interface.

Fixed an issue where Directory Group Names and Privileges could not be removed using XML script.

Fixed an issue where browsing the iLO 3 SNTP setting page would return an error.

Fixed an issue where lower case "v" characters are missing from iLO 3 hostname after entering a new one from the Administration->Network page.

Fixed an issue where a false power supply failed message could be returned when executing Get_EmHealth.xml script.

Fixed an issue where Linux serial console via iLO 3 Virtual Serial Port could stop responding when iLO 3 is rebooted.

Fixed an issue where iLO 3 login page could stop responding if login is attempted with a LDAP user member of several groups.

Enhancements/New Features:

Kerberos directory authentication support

2-Factor authentication support via Kerberos

Enterprise One Voice UI – One look and feel for your HP web page user interfaces

Language Pack support - Japanese as the first Language Pack
    

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

• Fixed an issue where iLO may be unavailable during POST mostly seen on the HP ProLiant BL460c G7
• Fixed a Windows blue screen that could occur during system boot
• Fixed an issue where XML returns "Feature Not Supported" for iLO Functionality Disabled tag
• Fixed iLO 3 (F8) which provides The Disable iLO Functionality Option on Blade Units
  

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

Problems Fixed:

• Fixed an issue that would allow iLO 3 to become unresponsive after using HPONCFG
• Fixed an issue where the Integrated Remote Console will not open after changing the HTTP and HTTPs port
• Fixed an issue where the Java Remote Console will not open after changing the HTTP and HTTPs ports
• Fixed an issue where Java Remote Console randomly displays through Hot Keys
• Fixed an issue where changes made to the DHCP/DNS Advanced Settings in the iLO 3 RBSU would not get saved
• Fixed an issue where iLO 3 would become unreachable from a different subnet when shared network port is enabled
• Fixed an issue where changing the virtual Media boot order via the CLP/CLI would not boot from the selected device
• Improved Support for International keyboards in the Integrated Remote Console and the Java Remote Console by addressing issues occurring with some special keys
• Fixed an issue ensuring that iLO 3 reacts similar to iLO 2 where by the Command Line Interface (CLI) "power off" performs the full 4s press and hold of the power button that causes an immediate power off the server, instead of an OS shutdown of the server
• Corrected an issue where the IPMI BMC Watchdog would not time out as long as there was constant IPMI KCS traffic to ILO. This is the case under the Linux IPMI drivers
• Corrected an issue where the IPMI BMC Watchdog "pre-timeout" function did not work as expected
• Provided better compatibility with the Linux "ipmitool fru print" command such that the SMBIOS data is displayed in a standard IPMI FRU format
• Provided better compatibility with the Linux "ipmitool chassis" commands used to set boot options (e.g. one time PXE boot) and booting
• Resolved a compatibility issue with the Red Hat Cluster Suite when trying to use the tool, "fence_ipmi".   The tool would send multiple IPMI power off requests which occasionally power the server on

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

Problems Fixed:

• Resolved an issue that resulted in the Integrated Remote Console (IRC) closing prematurely when cancelling a URL-mounted virtual media image
• Resolved an issue that occurred when "one time boot order" change via RIBCL resulted in the host booting to a different target than the specified iLO 3 RIBCL script
• Resolved an issue that allowed iLO 3 configuration settings to become corrupted, preventing iLO from restarting after a reset
• Resolved an issue that prevented the iLO Hostname from validating when updated from the Command Line Interface (CLI)
• Resolved an issue that caused the Command Line Interface (CLI) to become unresponsive after executing "help windbg_enable" command
• Resolved an issue where no log entry was initiated when the iLO 3 firmware was upgraded through SSH
       

Enhancements/New Features:

• Improved storage management of HP SIM Single Sign-On certificates and settings
• Improved iLO hostname validation in the Command Line Interface (CLI)
• Improved RIBCL support for LOM object fields 64 characters and longer
• Improved error reporting and messaging that can occur when virtual media is in use
• Improved Command Line Interface (CLI) authorization of SSH public keys

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

Problems Fixed:
     Fixed an issue not allowing a "space" in Virtual Media Scripting paths or names
     Fixed an issue that did not report Computer Lock configuration correctly when set from HPONCFG/CPQLOCFG 
     Fixed an issue causing no event entry in the log when Virtual Folder is disconnected
     Fixed an issue where iLO3 Logs were not getting cleared through System Management Homepage 
     

Enhancements/New Features:
     Added Single Sign On (SSO) support for HP SIM access
     Added support for 5 concurrent Secure Shell (SSH) sessions
     Added support to allow import of SSH Keys
     Added HTTPS support (Secure) access for Virtual Media
     Added the firmware version running on iLO 3 to login page
     Added event log messages to identify enclosure communication errors

     Updated keyboard handling for Japanese keyboard layout

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

Initial Release

 Turbo-charged Performance

• 8x faster remote console for best in class remote management performance
• 3x faster Virtual Media for high performance remote deployments and updates
• High-performance Windows Integrated Remote Console
• Full-featured Java Integrated Remote Console
• 250 MHz iLO 3 CPU
• 128 MB ECC DDR iLO 3 memory

 Streamlined Interface

• Web 2.0 Interface using JSON technology
• Remote Console Direct Access for immediate iLO 3 access to critical systems

 Enhanced Standards Support

• IPMI 2.0 over LAN/DCMI support for simple server control in scale-out environments
• AES Encryption in HW industrial strength security without the performance hit
• Simple Network Time Protocol support