Dell IDRAC6 User manual

Integrated Dell™Remote
Access Controller 6 (iDRAC6)
Enterprise for Blade Servers
Version 2.1
User Guide

Notes and Cautions
NOTE: A NOTE indicates important information that helps you make better use of
your computer.
CAUTION: A CAUTION indicates potential damage to hardware or loss of data if
instructions are not followed.
__________________
Information in this document is subject to change without notice.
© 2009 Dell Inc. All rights reserved.
Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc.
is strictly forbidden.
Trademarks used in this text: Dell, the DELL logo, OpenManage, and PowerEdge are trademarks of
Dell Inc.; Microsoft, Windows, Windows Server, Internet Explorer, MS-DOS,Windows Vista, ActiveX
and Active Directory are either trademarks or registered trademarks of Microsoft Corporation in the
United States and/or other countries; Red Hat and Linux are registered trademarks of Red Hat, Inc.;
Novell and SUSE are registered trademarks of Novell Corporation. Intel is a registered trademark of
Intel Corporation; UNIX is a registered trademark of The Open Group in the United States and other
countries.
Copyright 1998-2009 The OpenLDAP Foundation. All rights reserved. Redistribution and use in
source and binary forms, with or without modification, are permitted only as authorized by the
OpenLDAP Public License. A copy of this license is available in the file LICENSE in the top-level
directory of the distribution or, alternatively, at www.OpenLDAP.org/license.html. OpenLDAP is a
registered trademark of the OpenLDAP Foundation. Individual files and/or contributed packages may
be copyrighted by other parties and subject to additional restrictions. This work is derived from the
UniversityofMichiganLDAPv3.3distribution.Thisworkalsocontainsmaterialsderivedfrom public
sources. Information about OpenLDAP can be obtained at www.openldap.org/. Portions Copyright
1998-2004 Kurt D. Zeilenga. Portions Copyright 1998-2004 Net Boolean Incorporated. Portions
Copyright 2001-2004 IBM Corporation. All rights reserved. Redistribution and use in source and
binaryforms,withorwithoutmodification,are permittedonlyasauthorized by the OpenLDAPPublic
License. Portions Copyright 1999-2003 Howard Y.H. Chu. Portions Copyright 1999-2003 Symas
Corporation. Portions Copyright 1998-2003 Hallvard B. Furuseth. All rights reserved. Redistribution
and use in source and binary forms, with or without modification, are permitted provided that this
noticeispreserved.Thenamesofthecopyrightholdersmaynotbeusedtoendorseorpromoteproducts
derived from this software without their specific prior written permission. This software is provided
"as is'' without express or implied warranty. Portions Copyright (c) 1992-1996 Regents of the
University of Michigan. All rights reserved. Redistribution and use in source and binary forms are
permittedprovidedthatthisnoticeispreservedandthatduecreditisgiventotheUniversityofMichigan
at Ann Arbor. The name of the University may not be used to endorse or promote products derived
from this software without specific prior written permission. This software is provided "as is'' without
express or implied warranty. Other trademarks and trade names may be used in this document to refer
toeithertheentitiesclaimingthemarksandnamesortheirproducts.DellInc.disclaimsanyproprietary
interest in trademarks and trade names other than its own.
August 2009

Contents 3
Contents
1 iDRAC6 Enterprise Overview . . . . . . . . . . 29
IPv6 Ready Logo Certification . . . . . . . . . . . . . . 30
iDRAC6 Security Features . . . . . . . . . . . . . . . . 30
iDRAC6 Enterprise and vFlash Media . . . . . . . . . . 31
Supported Platforms . . . . . . . . . . . . . . . . . . . 33
Supported Operating Systems . . . . . . . . . . . . . . 34
Supported Web Browsers . . . . . . . . . . . . . . . . 34
Supported Remote Access Connections . . . . . . . . 34
iDRAC6 Ports . . . . . . . . . . . . . . . . . . . . . . . 34
Other Documents You May Need . . . . . . . . . . . . 35
2 Configuring iDRAC6 Enterprise . . . . . . . . 39
Before You Begin . . . . . . . . . . . . . . . . . . . . 39
Interfaces for Configuring iDRAC6 . . . . . . . . . . . 39
Configuration Tasks . . . . . . . . . . . . . . . . . . . 43
Configure the Management Station . . . . . . . . 43
Configure iDRAC6 Networking . . . . . . . . . . . 43
Configure iDRAC6 Users . . . . . . . . . . . . . . 44
Configure Active Directory . . . . . . . . . . . . . 44
Configure IP Filtering and IP Blocking . . . . . . . 44

4Contents
Configure Platform Events . . . . . . . . . . . . . 45
Enabling or Disabling Local
Configuration Access . . . . . . . . . . . . . . . . 45
Configure iDRAC6 Services . . . . . . . . . . . . . 45
Configure Secure Sockets Layer (SSL) . . . . . . . 46
Configure Virtual Media. . . . . . . . . . . . . . . 46
Configure a vFlash Media Card . . . . . . . . . . . 46
Install the Managed Server Software . . . . . . . 46
Configure the Managed Server for the
Last Crash Screen Feature . . . . . . . . . . . . . 46
Configuring Networking Using the
CMC Web Interface . . . . . . . . . . . . . . . . . . . 47
Launching iDRAC6 Web Interface
From the CMC . . . . . . . . . . . . . . . . . . . . 47
Configuring Networking for iDRAC6 . . . . . . . . 49
Viewing FlexAddress Mezzanine Card
Fabric Connections . . . . . . . . . . . . . . . . . . . 50
FlexAddress MAC for iDRAC6 . . . . . . . . . . . 51
Remote Syslog . . . . . . . . . . . . . . . . . . . . . . 52
Remote File Share . . . . . . . . . . . . . . . . . . . . 53
Updating iDRAC6 Firmware . . . . . . . . . . . . . . . 55
Downloading the Firmware or
Update Package . . . . . . . . . . . . . . . . . . 55
Executing the Firmware Update . . . . . . . . . . 56
Verifying the Digital Signature
for Linux DUPs . . . . . . . . . . . . . . . . . . . 57
Using iDRAC6 Web Interface . . . . . . . . . . . . 60
Updating iDRAC6 Firmware
Using RACADM . . . . . . . . . . . . . . . . . . . 61
Using the DOS Update Utility . . . . . . . . . . . . 62
Clear Your Browser’s Cache . . . . . . . . . . . . 63

Contents 5
Updating the USC Repair Package . . . . . . . . . . . 63
Configuring iDRAC6 For Use
With IT Assistant. . . . . . . . . . . . . . . . . . . . . 63
Using iDRAC6 Configuration Utility
to Enable Discovery and Monitoring . . . . . . . . . . 63
Using iDRAC6 Web Interface to Enable
Discovery and Monitoring . . . . . . . . . . . . . . . . 64
Using IT Assistant to View iDRAC6
Status and Events . . . . . . . . . . . . . . . . . . . . 66
3 Configuring the Management
Station . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Management Station Set Up Steps . . . . . . . . . . . 67
Management Station Network Requirements . . . . . 67
Configuring a Supported Web Browser . . . . . . . . . 68
Opening Your Web Browser . . . . . . . . . . . . 68
Configuring Your Web Browser to
Connect to the Web Interface . . . . . . . . . . . 68
Adding iDRAC6 to the List of
Trusted Domains . . . . . . . . . . . . . . . . . . 71
Viewing Localized Versions of the
Web Interface . . . . . . . . . . . . . . . . . . . 71
Setting the Locale in Linux . . . . . . . . . . . . . 72
Disabling the Whitelist Feature in Firefox . . . . . 73
Installing iDRAC6 Software on the
Management Station. . . . . . . . . . . . . . . . . . . 74
Installing and Removing RACADM on
a Linux Management Station . . . . . . . . . . . . 74
Installing RACADM . . . . . . . . . . . . . . . . . 74
Uninstalling RACADM . . . . . . . . . . . . . . . 75

6Contents
Installing a Java Runtime Environment (JRE) . . . . . . 75
Installing Telnet or SSH Clients . . . . . . . . . . . . . 76
Telnet with iDRAC6 . . . . . . . . . . . . . . . . . 76
Configuring the Backspace Key
For Telnet Sessions . . . . . . . . . . . . . . . . . 77
SSH With iDRAC6 . . . . . . . . . . . . . . . . . . 77
Installing a TFTP Server . . . . . . . . . . . . . . . . . 79
Installing Dell OpenManage IT Assistant . . . . . . . . 79
Installing Dell Management Console . . . . . . . . . . 80
4 Configuring the Managed
Server . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Installing the Software on the
Managed Server . . . . . . . . . . . . . . . . . . . . . 81
Configuring the Managed Server to
Capture the Last Crash Screen. . . . . . . . . . . . . . 82
Disabling the Windows Automatic
Reboot Option . . . . . . . . . . . . . . . . . . . . . . 83
5 Configuring iDRAC6 Enterprise
Using the Web Interface . . . . . . . . . . . . . 85
Accessing the Web Interface . . . . . . . . . . . . . . 86
Logging In . . . . . . . . . . . . . . . . . . . . . . 86
Logging Out . . . . . . . . . . . . . . . . . . . . . 87
Using Multiple Browser Tabs
and Windows . . . . . . . . . . . . . . . . . . . . 87

Contents 7
Configuring iDRAC6 NIC . . . . . . . . . . . . . . . . . 88
Configuring the Network, IPMI
and VLAN Settings . . . . . . . . . . . . . . . . . 88
Configuring IP Filtering and IP Blocking . . . . . . 92
Configuring Platform Events. . . . . . . . . . . . . . . 94
Configuring Platform Event Filters (PEF) . . . . . . 95
Configuring Platform Event Traps (PET) . . . . . . 95
Configuring E-Mail Alerts. . . . . . . . . . . . . . 96
Configuring IPMI Over LAN . . . . . . . . . . . . . . . 97
Adding and Configuring iDRAC6 Users . . . . . . . . . 98
Securing iDRAC6 Communications Using
SSL and Digital Certificates . . . . . . . . . . . . . . . 101
Secure Sockets Layer (SSL) . . . . . . . . . . . . 102
Certificate Signing Request (CSR) . . . . . . . . . 102
Accessing the SSL Main Menu . . . . . . . . . . 103
Generating a New Certificate
Signing Request . . . . . . . . . . . . . . . . . . 104
Uploading a Server Certificate . . . . . . . . . . . 105
Viewing a Server Certificate . . . . . . . . . . . . 106
Configuring and Managing Active
Directory Certificates . . . . . . . . . . . . . . . . . . 107
Configuring Active Directory (Standard
Schema and Extended Schema) . . . . . . . . . . 108
Viewing an Active Directory
CA Certificate . . . . . . . . . . . . . . . . . . . . 113
Enabling or Disabling Local
Configuration Access . . . . . . . . . . . . . . . . . . 113
Enabling Local Configuration Access . . . . . . . 113
Disabling Local Configuration Access . . . . . . . 113

8Contents
Configuring iDRAC6 Services . . . . . . . . . . . . . 114
Updating iDRAC6 Firmware . . . . . . . . . . . . . . 116
Updating iDRAC6 Firmware
Using the CMC . . . . . . . . . . . . . . . . . . 118
iDRAC6 Firmware Rollback . . . . . . . . . . . . 118
6 Using iDRAC6 With Microsoft
Active Directory . . . . . . . . . . . . . . . . . . 121
Prerequisites for Enabling Active
Directory Authentication for iDRAC6 . . . . . . . . . 122
Supported Active Directory
Authentication Mechanisms. . . . . . . . . . . . . . 122
Extended Schema Active Directory Overview . . . . 123
Extending the Active Directory Schema . . . . . 123
Active Directory Schema Extensions. . . . . . . 123
Overview of iDRAC6 Schema Extensions. . . . . 124
Active Directory Object Overview . . . . . . . . 124
Accumulating Privileges Using
Extended Schema. . . . . . . . . . . . . . . . . 126
Configuring Extended Schema
Active Directory to Access iDRAC6 . . . . . . . 127
Installing the Dell Extension to the
Active Directory Users and
Computers Snap-In . . . . . . . . . . . . . . . . 133
Adding iDRAC6 Users and Privileges
to Active Directory . . . . . . . . . . . . . . . . 134
Configuring Active Directory With
Extended Schema Using iDRAC6
Web Interface. . . . . . . . . . . . . . . . . . . 136
Configuring Active Directory With
Extended Schema Using RACADM . . . . . . . . 138

Contents 9
Standard Schema Active Directory
Overview . . . . . . . . . . . . . . . . . . . . . . . . . 140
Single Domain Versus Multiple
Domain Scenarios . . . . . . . . . . . . . . . . . 142
Configuring Standard Schema Active
Directory to Access iDRAC6 . . . . . . . . . . . . 143
Configuring Active Directory With
Standard Schema Using iDRAC6
Web Interface . . . . . . . . . . . . . . . . . . . 143
Configuring Active Directory With
Standard Schema Using RACADM . . . . . . . . . 146
Testing Your Configurations . . . . . . . . . . . . . . . 148
Enabling SSL on a Domain Controller . . . . . . . . . . 149
Exporting the Domain Controller Root
CA Certificate to iDRAC6 . . . . . . . . . . . . . . 149
Importing iDRAC6 Firmware SSL
Certificate. . . . . . . . . . . . . . . . . . . . . . 150
Using Active Directory to Log In to iDRAC6 . . . . . . . 151
Using Active Directory Single Sign-On . . . . . . . . . 152
Configuring iDRAC6 to Use Single Sign-On . . . . 152
Logging Into iDRAC6 Using Single Sign-On . . . . 154
Frequently Asked Questions. . . . . . . . . . . . . . . 154
Active Directory Log In Issues . . . . . . . . . . . 154
Active Directory Certificate Validation . . . . . . . 158
Extended and Standard Schema . . . . . . . . . . 158
Miscellaneous . . . . . . . . . . . . . . . . . . . 159

10 Contents
7 Configuring Smart Card
Authentication . . . . . . . . . . . . . . . . . . . . 161
Configuring Smart Card Login in iDRAC6 . . . . . . . 161
Logging Into iDRAC6 Using Active
Directory Smart Card Authentication . . . . . . . . . 163
Troubleshooting the Smart Card
Logon in iDRAC6 . . . . . . . . . . . . . . . . . . . . 163
8 Enabling Kerberos Authentication . . . . 167
Prerequisites for single sign-on and Active
Directory Authentication Using Smart Card. . . . . . 168
Configuring iDRAC6 for single sign-on and
Active Directory Authentication
Using Smart Card. . . . . . . . . . . . . . . . . . . . 170
Configuring Active Directory Users for
single sign-on Logon. . . . . . . . . . . . . . . . . . 170
Logging Into iDRAC6 Using single sign-on
for Active Directory Users . . . . . . . . . . . . . . . 170
Configuring Active Directory Users
for Smart Card Logon. . . . . . . . . . . . . . . . . . 171
iDRAC6 Login Scenarios with TFA and SSO. . . . . . 172
9 Viewing the Configuration and
Health of the Managed Server . . . . . . . 173
System Summary . . . . . . . . . . . . . . . . . . . . 173
Main System Enclosure . . . . . . . . . . . . . . 173
Integrated Dell Remote Access
Controller 6 - Enterprise. . . . . . . . . . . . . . 174