Dell Chassis Management Controller Firmware Version 3.2 User’s Guide Notes and Cautions NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed. ____________________ Information in this publication is subject to change without notice. © 2011 Dell Inc. All rights reserved. Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden. Trademarks used in this text: Dell™, the DELL logo, FlexAddress™, OpenManage™, PowerEdge™, and PowerConnect™ are trademarks of Dell Inc. Microsoft®, Active Directory®, Internet Explorer®, Windows®, Windows Server®, and Windows Vista® are either trademarks or registered trademarks of Microsoft Corporation in the United States and other countries. Red Hat® and Red Hat Enterprise Linux® are registered trademarks of Red Hat, Inc. in the United States and other countries. Novell® is a registered trademark and SUSE ™ is a trademark of Novell Inc. in the United States and other countries. Intel® is a registered trademark of Intel Corporation. UNIX® is a registered trademark of The Open Group in the United States and other countries. Avocent® is a trademark of Avocent Corporation. OSCAR® is a registered trademark of Avocent Corporation or its affiliates. Copyright 1998-2006 The OpenLDAP Foundation. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. A copy of this license is available in the file LICENSE in the top-level directory of the distribution or, alternatively, at http://www.OpenLDAP.org/license.html. OpenLDAP is a registered trademark of the OpenLDAP Foundation. Individual files and/or contributed packages may be copyrighted by other parties and subject to additional restrictions. This work is derived from the University of Michigan LDAP v3.3 distribution. This work also contains materials derived from public sources. Information about OpenLDAP can be obtained at http://www.openldap.org/. Portions Copyright 1998-2004 Kurt D. Zeilenga. Portions Copyright 1998-2004 Net Boolean Incorporated. Portions Copyright 2001-2004 IBM Corporation. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. Portions Copyright 1999-2003 Howard Y.H. Chu. Portions Copyright 1999-2003 Symas Corporation. Portions Copyright 1998-2003 Hallvard B. Furuseth. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that this notice is preserved. The names of the copyright holders may not be used to endorse or promote products derived from this software without their specific prior written permission. This software is provided "as is'' without express or implied warranty. Portions Copyright (c) 1992-1996 Regents of the University of Michigan. All rights reserved. Redistribution and use in source and binary forms are permitted provided that this notice is preserved and that due credit is given to the University of Michigan at Ann Arbor. The name of the University may not be used to endorse or promote products derived from this software without specific prior written permission. This software is provided "as is'' without express or implied warranty. Other trademarks and trade names may be used in this publication to refer to either the entities claiming the marks and names or their products. Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own. 2011 - 03 Contents 1Overview . 19 What’s New For This Release . 19 CMC Management Features . 20 Security Features . 21 Chassis Overview . 22 Hardware Specifications . 23 TCP/IP Ports . 23 Supported Remote Access Connections . 24 Supported Platforms . 24 Supported Web Browsers . 25 Supported Management Console Applications . 25 WS-Management Support . 25 Other Documents You May Need . 27 2 Installing and Setting Up the CMC . 29 Before You Begin . 29 Installing the CMC Hardware . 29 Checklist for Integration of a Chassis . 30 Basic CMC Network Connection . 30 Contents 3 Daisy-chain CMC Network Connection . 31 Installing Remote Access Software on a Management Station . 35 Installing RACADM on a Linux Management Station . 35 Uninstalling RACADM From a Linux Management Station . 36 Configuring a Web Browser . 36 Proxy Server . 37 Microsoft Phishing Filter . 38 Certificate Revocation List (CRL) Fetching . 38 Downloading Files From CMC With Internet Explorer . 38 Allow Animations in Internet Explorer . 39 Setting Up Initial Access to the CMC . 39 Configuring the CMC Network . 40 Configuring Networking Using the LCD Configuration Wizard . 41 Accessing the CMC Through a Network . 48 Installing or Updating the CMC Firmware. 49 Downloading the CMC Firmware . 49 Updating CMC Firmware Using the Web Interface. 50 Updating the CMC Firmware Using RACADM . 50 Configuring CMC Properties . 51 Configuring Power Budgeting . 51 Configuring CMC Network Settings . 51 Adding and Configuring Users . 52 Adding SNMP and E-mail Alerts . 52 Configuring Remote Syslog . 52 4 Contents Understanding the Redundant CMC Environment. 53 About the Standby CMC . 53 Active CMC Election Process . 54 Obtaining Health Status of Redundant CMC . 54 3 Configuring CMC to Use Command Line Consoles . 57 Command Line Console Features on the CMC . 57 Using a Serial, Telnet, or SSH Console . 58 Using a Telnet Console With the CMC . 58 Using SSH With the CMC . 58 Enabling SSH on the CMC . 59 Changing the SSH Port . 59 Enabling the Front Panel to iKVM Connection . 60 Configuring Terminal Emulation Software . 61 Configuring Linux Minicom . 61 Connecting to Servers or I/O Modules With the Connect Command . 63 Configuring the Managed Server BIOS for Serial Console Redirection . 64 Configuring Windows for Serial Console Redirection . 65 Configuring Linux for Server Serial Console Redirection During Boot. 65 Configuring Linux for Server Serial Console Redirection After Boot . 67 Contents 5 4 Using the RACADM Command Line Interface . 71 Using a Serial, Telnet, or SSH Console . 71 Logging in to the CMC . 72 Starting a Text Console . 72 Using RACADM. 72 RACADM Subcommands . 73 Accessing RACADM Remotely . 77 Enabling and Disabling the RACADM Remote Capability. 78 Using RACADM Remotely. 78 RACADM Error Messages . 79 Using RACADM to Configure the CMC. 80 Configuring CMC Network Properties. 80 Setting Up Initial Access to the CMC . 80 Viewing Current Network Settings . 81 Configuring the Network LAN Settings . 82 Configuring the Network Security Settings (IPv4 Only) . 88 Using RACADM to Configure Users . 89 Before You Begin . 89 Adding a CMC User . 90 Using RACADM to Configure Public Key Authentication over SSH. 91 Before You Begin . 91 Generating Public Keys for Windows. 92 Generating Public Keys for Linux . 93 RACADM Syntax Notes for CMC . 94 Viewing the Public Keys . 94 Adding the Public Keys . 94 6 Contents Deleting the Public Keys . 95 Logging in Using Public Key Authentication . 95 Enabling a CMC User With Permissions . 96 Disabling a CMC User . 96 Configuring SNMP and E-mail Alerting . 96 Configuring Multiple CMCs in Multiple Chassis . 97 Creating a CMC Configuration File . 98 Parsing Rules . 100 Modifying the CMC IP Address. 102 Using RACADM to Configure Properties on iDRAC . 103 Troubleshooting . 104 5 Using the CMC Web Interface . 107 Accessing the CMC Web Interface . 107 Logging In. 108 Logging Out . 109 Configuring Basic CMC Settings . 109 Setting the Chassis Name . 109 Setting the Date and Time on CMC . 110 Enabling Removable Flash Media . 110 Chassis Health Page . 111 Using Chassis Group. 112 Chassis Group Features . 112 Setting up a Chassis Group. 113 Removing a Member from the Leader . 114 Disbanding a Chassis Group . 114 Contents 7 Disabling an Individual Member at the Member Chassis . 115 Launching a Member Chassis’s or Server’s web page . 115 Chassis Component Summary . 116 Chassis Graphics . 116 Chassis Health . 118 Selected Component Information . 119 Monitoring System Health Status . 125 Viewing Chassis and Component Summaries . 125 Viewing Power Budget Status . 126 Viewing Server Model Name and Service Tag . 126 Viewing the Health Status of All Servers . 126 Editing Slot Names . 130 Using Server’s Host Name as the Slot Name . 131 Setting the First Boot Device for Servers. 131 Viewing the Health Status of an Individual Server . 133 Viewing the Health Status of IOMs . 138 Viewing the Health Status of the Fans . 139 Viewing the iKVM Status . 141 Viewing the Health Status of the PSUs . 143 Viewing Status of the Temperature Sensors . 145 Viewing the LCD Status . 147 Viewing World Wide Name/Media Access Control (WWN/MAC) IDs. 148 Fabric Configuration . 148 WWN/MAC Addresses . 148 8 Contents Configuring CMC Network Properties . 149 Setting Up Initial Access to CMC. 149 Configuring the Network LAN Settings. 149 Configuring CMC Network Security Settings . 157 Configuring VLAN . 159 Adding and Configuring CMC Users. 160 User Types . 160 Adding and Managing Users . 166 Configuring and Managing Microsoft Active Directory Certificates . 169 Common Settings . 169 Standard Schema Settings . 173 Extended Schema Settings . 174 Managing Active Directory Certificates . 174 Kerberos Keytab . 175 Configuring and Managing Generic Lightweight Directory Access Protocol Services . 176 Selecting Your LDAP Servers . 178 Managing LDAP Group Settings. 179 Managing LDAP Security Certificates . 179 Securing CMC Communications Using SSL and Digital Certificates . 180 Secure Sockets Layer (SSL) . 180 Certificate Signing Request (CSR) . 181 Accessing the SSL Main Menu . 181 Generating a New Certificate Signing Request . 182 Contents 9 Uploading a Server Certificate . 186 Uploading Webserver Key and Certificate . 186 Viewing a Server Certificate . ..