Drivers & software

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

The following issues are resolved in this version:

- Addressed the security vulnerability reported in the HPE Security Bulletin HPESBHF03831.
- Ensured iLO 2 resets when the Command Line Interface command oemhp_enforce_aes value has changed from the configured setting.
- Removed the text "3DES" from the iLO 2 log when the Security Encryption Enforcement Setting "Enforce AES Encryption" is configured.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• OpenSSH protocol negotiation handshake fails if the option "macs hmac-sha1" is specified.

• Added the ability to disable and enable WS Management (Web Services for Management) access in the iLO 2 Command Line Interface (CLI) and the iLO 2 Remote Insight Board Command Language (RIBCL).

  • For more information, please see published advisory at: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00040721en_us

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• Addressed the security vulnerabilities reported in the HPE Software Security Response Team Security Bulletin HPESBHF03797.

• Added the ability to disable and enable WS Management (Web Services for Management) access in the iLO 2 Web Interface.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• Issues published in HPE Security Bulletin Document ID HPESBHF03705.
• "Application Blocked by Java Security" Java applet errors. If the applet displays an "Error: Click for details" and the details are a "ClassNotFoundException" application error, please select the "Reload" button. 

• Added AES128-CTR, AES256-CTR ciphers and HMAC-SHA2-256 authentication to the SSH server.
• Added the SHA256 algorithm for the CSR signature.
• Added option to import a Trusted CA Certificate for Directory Servers using LDAPS.
• CBC ciphers used by the SSH server can now be disabled by setting the 'Enforce AES Encryption' option.
• 3DES ciphers used by the webserver can now be disabled by setting the 'Enforce AES Encryption' option.
• Added the ability to disable and enable the iLO 2 HTTPS web server in the Command Line Interface. The HTTPS web server is disabled when the SSL port is set to 0 in the CLI. WARNING: Disabling the iLO 2 HTTPS web server will result in reduced functionality. The iLO 2 web interface, single sign on, directory logins, and some iLO 2 utilities like the HP Lights-Out Configuration Utility will no longer function if the ILO 2 HTTPS web server is disabled.

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

• The Java IRC will not start when JRE versions 7 or 8 are installed and TLS 1.1/1.2 is enabled.
• Addressed the vulnerability mentioned in CVE-2015-4000 and SSRT102268 (client-side SSL/TLS connections)

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

-Fixes
• Addressed possible security vulnerabilities mentioned in the HP Software Security Response Team reports SSRT101745 and SSRT101886.
• Disabled SSL version 3. iLO 2 2.27 and later supports only TLS 1.0.
• Addressed CVE-2014-0224 false positive.
• The current user cannot be deleted by using the RIBCL command DELETE_CURRENT_USER.

-Enhancements
• Added a CLI command to enable or disable the SSLv3 cryptographic protocol. The command is "set /map1/config1 oemhp_ssl_v3_enable=yes" to enable SSLv3 or "set /map1/config1 oemhp_ssl_v3_enable=no" to disable SSLv3. iLO will reset if the command state transitions from yes to no or from no to yes.
• Hard drive status reporting on the System Health Summary web page now displays smart errors.
• Added additional permission attributes to the JAR Manifest file for the Java Remote Console and Virtual Media applets.
• Added a watchdog timer for firmware lockups. iLO 2 will reboot if the firmware does not respond for 60 minutes.
• Added support for retrieving a certificate from a trusted HP SIM 7.0 and later server.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

• iLO 2 might stop responding after security scanners run the Heartbleed OpenSSL bug detection scan.
  • Note: iLO 2 is not vulnerable to the HeartBleed OpenSSL bug because the iLO 2 RSA SSLC library does not support the TLS Heartbeat extension.
• iLO 2 might authenticate users with incorrect passwords when it is configured with Linux LDAP.
• The Integrated Remote Console could fail to launch with Internet Explorer 11.
• Hard drive status reporting in the iLO web interface, CLI, and RIBCL now matches iLO 3 reporting.
• The SCSI command 0x51 (GET DISC INFORMATION) added in version 2.23 was removed as it caused problems when an ISO is mounted on Windows systems.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• When the iLO DNS name was changed the updated DNS name would not appear in the OA until after a system reset.
• Users were unable to mount a Virtual CD/DVD-ROM in SLES 11 SP3.
• The following message appears when the Java IRC is started: This application will be blocked in a future Java security update because the JAR file manifest does not contain the Permissions
  attribute.  This message will continue to appear when you run Java 7 unless you install an SSL certificate that is signed by a trusted Certification Authority.
• After importing a SSL certificate the iLO 2 webGUI could become slow to respond.
   

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

This release allows IPMI over LAN to be disabled. The ability to disable IPMI over LAN is needed to address CVE-2013-4786.

• iLO 2 did not allow IPMI over LAN to be disabled on c-Class blade servers.
• The IPMI over LAN feature would continue to function on ML/DL servers after the iLO 2 was rebooted despite the feature being disabled.
• iLO 2 on c-Class blade servers failed to reboot after being reset to the factory defaults via the Onboard Administrator CLI.
• iLO 2 RIBCL scripts that contained the command CERT_SIGNATURE_ALGORITHM were not displayed in Microsoft Internet Explorer.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• The minimum password length setting could reset to zero from the previously set minimum length when MIN_PASSWORD tag isn’t specified in the XML script. This occurs in version 2.12 and later.
• Path MTU Discovery not working in iLO 2 versions 2.12 and later.
• Virtual Media could randomly fail to mount in SUSE Linux Enterprise Server 11.
• Option to switch between 'UHCI' and 'System USB' for iLO 2 Virtual Keyboard and Mouse was missing for HP ProLiant DL585 G5/G6 Servers.
• iLO 2 Login webpage could display unsupported browser error message when using Internet Explorer 10.
• iLO 2 constantly rebooting after upgrading to version 2.12 or 2.15 on p-Class Blade Servers.
  Note: Last supported iLO 2 firmware version for p-Class servers is 1.82 as stated in the Customer Advisory http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02843213
• SSH to iLO 2 could fail with clients running OpenSSH 6.2p1, OpenSSL 1.0.1e.

• iLO 2 firmware now includes the option to send a Gratuitous ARP on boot.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

• SSH to iLO 2 might fail with clients running OpenSSH 5.9 and OpenSSL 1.0.1.
• ActiveX Integrated Remote Console App (DVC.dll) is now signed.
• Virtual Media Java applet running on a Linux 64-bit operating system might stop responding when attempting to connect to a CD ROM.
• Power supply (P/N. 506822-201) might return 0 watts power consumption intermittently on HP ProLiant DL/ML servers.
• The HP Online Configuration Utility (HPONCFG) may exit abnormally with an error after locking the iLO configuration using the sample script lock_configuration.xml.

• Added an option to switch between 'UHCI' and 'System USB' for iLO 2 Virtual Keyboard and Mouse on every HP ProLiant G5/G6 platform except for the system(s) noted in the Known Issues section of the Release Notes tab.
   

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• Enabled SSL empty fragments by default to address the CBC-mode cipher IV weakness mentioned in CVE-2011-3389.
• Addressed vulnerabilities mentioned in CVE-2011-4576, CVE-2012-2110 and CVE-2012-2131.
• Added countermeasures for the ICMP blind connection-reset attack mentioned in CVE-2004-0790.
• CLI may show incorrect boot source list when there is a sixth bootable device in the system.
• Increased the randomness of the initial seeding of the Pseudo-Random Number Generator to improve the security of the self-signed SSL certificates.
• iLO 2 may become inaccessible on Blade servers after a Virtual Connect failover.
• Added countermeasures for the ASF/RMCP ping pong attack. iLO 2 now remains responsive during ping pong attacks and iLO 2 no longer replies to malformed ASF ping requests.
• Improved the iLO 2 Browser Cookie behavior. Login and session cookies are cleaned up and are marked with the 'secure' attribute.
• Fixed a VSP Log lock up issue when a user presses and holds a key while browsing the log.
• Increased VSP buffer size to prevent iLO 2 from dropping characters during POST and GRUB.
• Fixed a segmentation fault seen in Solaris 10 when using ipmitool to read the FRU.

• Added SHA1 Signing Algorithm as an option under Administrator->Security->SSL Certificate.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

• Hard Drive status reporting is now consistent across webGUI, CLI and RIBCL.
• Added missing properties in CLI under /map1/blade1 target on c-Class blades.
• VSP on serial port no longer remains connected after invoking stop /system1/oemhp_vsp1.
• iLO 2 firmware could not be upgraded when using IE9 browser.
• iLO 2 clock would jump from Dec 30th to Jan 1st during leap years.
• iLO 2 never sent out an ARP before replying to a ping request. It could cause iLO 2 to be unreachable from outside subnets when the gateway has redundant NICs and a NIC failover occurred.
• SSH to iLO 2 would fail with clients running OpenSSH 5.8p2 and later.
• Virtual Floppy image could not be mounted through Integrated Remote Console on Microsoft Windows Vista/Windows 7.
• Unable to save files to a virtual USB drive mounted through Integrated Remote Console on Microsoft Windows Vista/Windows 7.
• Changed the privilege level of the IPMI power control commands from user to operator.
• Ambient temperatures below zero Celcius were reported as large positive values, causing iLO 2 to log System Overheating error messages and shut down the server.
• iLO 2 firmware could randomly stop responding and then two minutes later reboot after executing IPMI power commands.
• iLO 2 may stop responding on a HP ProLiant WS460c G6 while shutting down Microsoft Windows 7 Operating System.
• HP ProLiant servers may stop responding or display a red screen during POST. However, this issue has only been observed on HP ProLiant WS460c G6 Workstation Blade.
• HP ProLiant ML330 G6 with non-redundant Power Supply cannot be powered OFF after upgrading iLO 2 firmware to version 2.06 or 2.07.
• Set autocomplete parameter to off in the iLO 2 login webpage.
• Missing characters when pasting text into the serial CLI.

• Added Virtual Serial Port logging feature. Advanced License is required for this feature.
• Enhanced the CLI prompt. It can now be configured to show the server name.
• Added TCP Keep-Alive support.
• Added System Event Logging for IPMI watchdog timer events.

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

• The ipmitool for Linux might report the memory sensor as "disabled" on HP ProLiant G6 servers.
• Textcons in HP ProLiant G6 servers with Intel processors might display "unsupported text mode" during POST.
• Integrated Lights Out (iLO) 2 might stop responding in the HP ProLiant DL785 G5/G6, if Linux ceases to respond and the PCI bus fails to respond.
• Onboard Administrator might fail to retrieve Integrated Management Log /iLO Event Log/Server Information from iLO 2 when Two-Factor Authentication is enabled.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

The following problems have been resolved in iLO 2 version 2.06 firmware:

• Disabled SSL/TLS renegotiation to protect iLO 2 against SSL/TLS plaintext injection attacks (CVE-2009-3555).
• Fixed security vulnerabilities mentioned in CVE-2008-7270 and CVE-2010-4180.
• Fixed an issue with ROM randomly fails to communicate to iLO 2 during POST causing some Mezzanine cards on blades to get misconfigured.
• Fixed an issue where the iLO 2 login page could be requested and displayed in HTTP mode instead of HTTPS secure mode.
• Fixed an issue with Set_Pwreg_Alert_Threshold.xml doesn't validate parameters correctly.
• Fixed an issue with Set_Pwreg_Alert_Threshold.xml gives false message when server is in aux power.
• Fixed an issue with iLO 2 accepting invalid value for warning_duration.
• Fixed an issue where user cannot exit from serial CLI when login prompt is shown.
• Fixed an issue where pressing ESC + SHIFT 9 key sequence and ESC + SHIFT Q key sequence multiple times can cause serial CLI to stop responding.
• Fixed an issue where the Linux console via iLO 2 Virtual Serial Port could no longer work after iLO 2 reboots.
• Fixed an issue where mounting Scripting Virtual Media using an invalid hostname in the URL can cause iLO 2 network to stop responding.
  

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

iLO 2 v2.05 replaces v2.01 to address issues with iLO stops responding on different scenarios.

Problems Fixed

The following problems have been resolved in iLO 2 version 2.05 firmware:

• iLO 2 now has the ability to change the server's boot order via XML script. 
• Ambient temperature history is now displayed properly. 
• Get System Boot Options IPMI command is now working. 
• Fixed an issue where the Average Power could exceed the CAP. 
• Disabling Power Capping via iLO 2 GUI on ML370 G5 is now working. 
• Fixed the 'Script Failed' error message when running Get_EmHealth.xml via HPONCFG. 
• Fixed an issue where iLO 2 could stop responding when running Nessus Scanner, FoundStone or similar port scan tool in the iLO2 network.
• Fixed an issue where iLO 2 could stop responding after receiving an Ethernet packet with protocol type 0x8874.
• Fixed an issue introduced in iLO 2 v1.81 where resetting iLO 2 could randomly cause Windows Server 2003 to hang on shutdown.
• Fixed an issue where scr een capture feature would not capture the Fault buffer on a blade after cold boot.
• Fixed an issue where iLO2 Virtual Serial Port could make GRUB drop characters.
• Fixed an issue introduced in iLO 2 v2.00 where resetting iLO 2 to factory defaults could erase the Administrator account and/or show no MAC address.
• Fixed an issue in iLO 2 where attempting to remove LDAP schema-less DIR_GROUP names and privileges using XML scripts could fail.
• Fixed an issue where iLO 2 would reply ARPs to the host which MAC address is in the Ethernet header instead of replying the ARP to the host which MAC address is in the ARP body.
• Fixed an issue where iLO 2 could randomly crash when copying files via Secure Scripting Virtual Media (HTTPs).
• Fixed an issue where iLO 2 would crash when Secure Scripting Virtual Media is used with the BOOT_ONCE option and the server reboots.
• Fixed an issue introduced in iLO2 2.00 where iLO 2 could become unresponsive, if EMS console is set to iLO 2 Virtual Serial Port and during boot, BitLocker requests the user to type-in the recovery key.
  

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

iLO 2 v2.01 replaces v2.00 to address an issue that would prohibit an HPSUM firmware update to future releases

Problems Fixed

The following problems have been resolved in iLO 2 version 2.01 firmware:

• iLO 2 v2.00 would not allow an HPSUM upgrade to future iLO 2 firmware releases.
• While iLO 2 is being rebooted, iLO 2 could stop responding after the physical Power Button was pressed to power-on an HP ProLiant ML and/or DL G6 server
• The Virtual Media Applet from the HP BladeSystem Setup Wizard may fail to launch
• iLO 2 could stop functioning when connecting the Virtual Media CDROM through the Command Line Interface (CLI) and inserting a space (%) in the path
• After iLO 2 is reset on a system running Linux, the Virtual Serial Port (VSP) session may never return
• When the iLO 2 DNS client name contains a leading numeric character, the iLO 2 DNS client may not be able to resolve a Directory Server
• iLO 2 could log multiple instances of a server Reset event in the iLO 2 event log for a single actual occurrence
• RIBCL could intermittently add a '/' character to the end of the XML output tag
• When the Virtual Keyboard/Mouse is set to the System USB Port on HP ProLiant DL385 G5p and HP ProLiant DL385 G6 servers, iLO 2 could stop responding
• The screen capture feature could randomly fail to capture a server fault event
• The screen capture file could not be uploaded to a Microsoft IIS web server
• The CLI command show /system1/memory would always show the DIMM information of slot #1, regardless of the number used
• The Scripting Virtual Media interface could disconnect when simultaneously booting multiple BladeSystem servers from the Firmware Deployment Tool
• Virtual Media performance improvements
• Virtual Serial Port session performance improvements
  

Enhancements/New Features

Added the following new features:

• New HP Intelligent Power Distribution Unit 
• Fully Qualified Domain Name (FQDN) for imported certificates
• A Recovery Payload that will help users recover iLO 2 from a failed firmware upgrade via FTP. Additional details can be found in the new User Guide which can be found at http://www.hp.com/go/ilo
• "IPMI over LAN" functionality. The IPMI 2.0 RMCP+ (or Linux ipmitool "lanplus") protocol is supported with this release.
• IPMI Serial Over LAN (SOL)
• Data Center Manageability Interface (DCMI) v1.0 specification
• Enhanced the "in band" Intelligent Platform Management Interface (IPMI) to comply with the IPMI specification version 2.0
  

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

This is the latest maintenance/bug fix release for iLO 2.

Firmware Dependency:
     This update also requires version 1.12.0.0 of the "hpqilo2.sys" (health) device driver.

Problems Fixed:
     Fixed an issue prompting Windows ID 57 "Communication Timeout" errors in the Windows Event Viewer.
     Issue was caused when iLO was extremely busy servicing Virtual Media requests and
     an "hpqilo2.sys" (health) driver IPMI request timed out. This caused the iLO 2 FW
     and the "hpqilo2.sys" driver lose synchronization between the incoming request and
     the outgoing response. The visible indicator of this issue is multiple "ID 57" errors
     logged in the Windows Event Viewer by the hpqilo2.sys driver. This update also requires
     version 1.12.0.0 of the "hpqilo2.sys" (health) device driver.
     
     Fixed an issue that could cause iLO 2 UHCI controller to halt after detecting a PCI
     timeout error on HP DL385 G5p and HP DL385 G6 servers. Symptoms of this issue are: 1) iLO 2
     Virtual Keyboard/Mouse stop responding, 2) Windows Server 2003 hangs when shutting down,
     3) Windows Server 2003 suddenly stops responding.
     
     Fixed an issue introduced in iLO 2 v1.81 where the iLO 2 Virtual Keyboard/Mouse could
     fail to initialize when installing Linux or VMWare ESX 4.0.
     

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

Optional: Users should update to this firmware version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

Addressed an issue that could cause the fans on a c-Class enclosure to spin up and remain close to 100% when iLO 2 does not obtain HDD temperature data for more than one minute

Addressed an issue that could cause a system with redundant fans to shut down when one fan rotor failed before POST

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

Update Requirements - Optional: Users should update to this firmware version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

PROBLEMS FIXED SINCE LAST RELEASE:
     - Fixed an issue in LDAP schemaless authentication code that can cause iLO 2 to stop responding.
     - Addressed an issue with iLO interfering with a flash of the G6 SAS Backplane and causing the flash to fail.
     - Addressed an issue that could cause the fans on a c-Class enclosure to spin up when the Smart Array controllers are disabled.

UPDATES:
     - Enabled Power Metering on DL785
     - Enabled Power Capping on DL785

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

• Fixed an issue that would corrupt the iLO 2 firmware image if a Remote Console session was opened while the flash was in progress.  Additional information can be obtained from the following customer advosory:

• Fixed an iLO 2 hang that would occur when the On-Board Administrator requested a server name change using a string larger than 32 characters.
• Fixed an issue where the iLO 2 would become unresponsive during a broadcast storm.  This could also cause the HP agents for Linux to seg-fault.

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

• Addressed a problem introduced in iLO 2 v1.60 that prevented the network interface to iLO on the p-Class blade SUVI dongle from working
• Fixed an issue in the iLO 2 TCP/IP stack that could cause iLO 2 to stop servicing a listening port after receiving a rogue TCP packet with RST flag set
• Fixed an issue where iLO could cause the ASR timer to trigger during a broadcast storm

• Dynamic Power Capping extended to support G6 systems
• iLO 2 manages fan control and system cooling in G6 systems
• Support for expanded health monitoring in G6 systems, including monitoring Hard Drive and DIMM temperatures
• Support for industry standard NC-SI Shared Network Port for embedded network interface controllers
  

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• Addressed a possible iLO Fatal exception after attempting a FW upgrade
• Improved presentation of multiple properties in the iLO 2 SMASH CLP
• Improved the gathering of historical power consumption data
• Improved several communication paths that cause blades to lose communication with the Onboard Administrator, resulting in a "red X" presented in the OA
• Fixed iLO SSH interface defect that could reset iLO and lose any active connections
• Improved the robustness of firmware update to prevent potential corruption if iLO 2 is reset during a flash or the firmware update fails to complete
• Improved IRC by allowing multiple users so simultaneously access .iso image files

The firmware flash engine has been revised in version 1.70(B). If you have previously upgraded your target system to firmware version 1.70, then you do not need to upgrade to 1.70(B)

New licensable features in iLO 2 v1.70 include:

• HP Dynamic Power Capping
• iLO Text Console
• iLO Video Player

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

• Addressed a possible iLO Fatal exception after attempting a FW upgrade
• Improved presentation of multiple properties in the iLO 2 SMASH CLP
• Improved the gathering of historical power consumption data
• Improved several communication paths that cause blades to lose communication with the Onboard Administrator, resulting in a "red X" presented in the OA
• Fixed iLO SSH interface defect that could reset iLO and lose any active connections
• Improved the robustness of firmware update to prevent potential corruption if iLO 2 is reset during a flash or the firmware update fails to complete
• Improved IRC by allowing multiple users so simultaneously access .iso image files

New licensable features in iLO 2 v1.70 include:

• HP Dynamic Power Capping
• iLO Text Console
• iLO Video Player

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

Addressed an issue where the system ROM can experience communication loss with iLO 2 during a cold boot.
This prevents several side-effects:
1) iLO receives large power consumption data which can result in oversubscription
   and the inability to power-on all blades.
2) iLO fails to retain virtual MAC addresses for some adapters
3) Host ROM cannot record events to the Integrated Management Log
4) Additional adapters appear in RBSU and under device management

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

Fixed an issue using the delete command to delete a user via the CLP which may confuse the
pointer to the correct target.

Added a message to report reason when there is a failure to import SSH DSA key.

Fixed an issue that at times will cause a "console is in use" message when switching
between Remote Console and Integrated Remote Console.

Fixed an issue that under certain circumstances would cause the iLO firmware to crash when mounting a virtual
media image via the Integrated Remote Console or the Virtual Media applet.

Fixed an issue that would cause the user to receive an error message when opening multiple IRC sessions from the OA.

Fixed a memory leak in the iLO2 SSH server engine that would cause iLO2 to stop responding after few hours of repeating login/logout

Fixed an issue where OpenVMS SSH clients would fail to connect to iLO2 SSH.

Fixed duplicated files shown by Virtual Folder.

Fixed an issue that caused iLO2 to stop responding after an OA failover.

Fixed a vulnerability where using a blank username and password results in a successful login to the serial port CLI interface.

Fixed an issue where iLO2 would become unresponsive after using HPASMCLI to set computer name in Solaris

Added the ability to install SSH keys using the scripted RIBCL interface

iLO 2 can co-exist on an IPV4 and IPV6 mixed network environment.
iLO 2 continues to support IPv4 only.

Updated iLO2 SSH server engine and now support 3 simultaneous connections

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

•    Addresses certain issues involving poor virtual media performance.
•    Addresses issue involving iLO 2 firmware upgrade failures on certain servers.
•    Corrects a problem in reconnecting via the Virtual Serial Port after the first
     session is terminated.
•    Resolves an issue with Virtual Media installations of Linux on certain servers.
•    Addresses an issue where the iLO 2 web server stops responding after using the
     Remote Console Acquire button.
•    Reduces the time required to mount a USB key larger than 4 GB.
•    Resolves an issue with the appearance of the Remote Console button and options
     after a minimum resize of the remote console window.
•    Corrects a problem where iLO 2 loses its IP address under certain circumstances.
•    Resolves an issue in launching the Virtual Media applet from with the Blade
     System Configuration Wizard.
•    Resolves an issue in using the CLP to change the 'oemhp_powerreg' property.
•    Adds Shared Network Port status to the CLP.
•    Fixes the 'Last Used Remote Console' status to reflect accurate status.
•    Resolves a problem in RIBCL where a Network port change fails to complete if
     the XML file contains only one port to change.
•    Resolves some problems in mounting a Virtual Media image via the Virtual Media
     Applet.
•   Corrects a problem where attempting to write to Virtual Media throws a VC++
     runtime error.

   Adds Shared Network Port switching support of the network port options
   card on the HP ProLiant ML310 G5.  

   Enhances Virtual Serial Port support to automatically enable and disable
   software flow control. By default, this behavior is disabled. This behavior
   can be enabled via user configuration (via RIBCL only).  

   Enhances the Integrated Remote Console Media dropdown menu such that the
   available drives are updated in real time.

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP Integrated Lights-Out (iLO 2) version 1.43 fixes an issue with version 1.42 firmware and does not require the purchase of a licensed feature upgrade. The current feature set available on the management processor will remain intact after installing this firmware.

iLO 2 version 1.43 addresses an issue with the Virtual Serial Port that causes a timeout of the Microsoft Windows 2003 Server OS selection menu when multiple choices are present and certain BIOS settings are selected.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

iLO 2 v1.42 is a standard feature enhancement/bug fix release and does not require the purchase of a licensed feature upgrade.  The current feature set available on the management processor will remain intact after installing this firmware.

Microsoft Windows Hardware Error Architecture (WHEA)

• iLO2 supports the 'Error Record Persistence' feature of the WHEA architecture.
• This allows the Windows Operating System to save and retrieve hardware error records to/from battery-backed non-volatile storage (NVRAM).
• This improves hardware error diagnosis by allowing otherwise un-loggable events to be retrieved upon next OS boot to be reviewed and logged to operating system logs.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

Microsoft Windows Hardware Error Architecture (WHEA)

• iLO2 supports the 'Error Record Persistence' feature of the WHEA architecture.
• This allows the Windows Operating System to save and retrieve hardware error records to/from battery-backed non-volatile storage (NVRAM).
• This improves hardware error diagnosis by allowing otherwise un-loggable events to be retrieved upon next OS boot to be reviewed and logged to operating system logs.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

None

Virtual Serial Port Enhancement
With the new virtual serial port enhancement, iLO 2 remote serial console users can establish a session at any time prior to or during the system POST sequence and be able to view and interact with POST. Previously, the HOST ROM would detect the presence of the serial port/Virtual Serial Port at POST and if it was not connected then the BIOS Serial Console Redirection feature would not transmit data for the rest of the boot cycle. The most recent HOST ROMs and iLO 2 firmware now communicate the presence of a Remote Serial Console connection and will start transmitting data if a connection is made during the system boot process.

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

- Corrected intermittent communication failures with Onboard Administrator

- Corrected a problem that caused iLO 2 to lose network connectivity if configured to use the Shared Network Port and the NIC firmware is updated.

- Corrected a problem where the latest OpenSSH clients failed to connect to iLO 2.

- Corrected a problem that caused iLO 2 to be unable to register its name with DNS when the DNS server pointed to is a forwarding only or caching only server.

- Corrected a problem that caused iLO 2 to log "Not Redundant" for fans that were not part of a fan group.

- Added support for infinite timeout to the CLP, browser, and remote console.

- Corrected a problem where running a show command in the CLP on a non-existent device would show the ASR timer.

- Corrected a problem where iLO 2 did not issue an SNMP trap when the server performed a soft reboot.

- Corrected a problem where not all server reset events were logged.

- Added a message to the Remote Serial Console to indicate that UID-on or UID-off command has been sent.

- Enhanced the display of the NIC MCAC address to incorporate the separator character appropriate to the current environment.

- Enhanced the display of the server serial number to add the server product ID if present.

- Enhanced the Integrated Remote Console so that it will work through Network Address Translation (NAT) in the same manner as the Remote Console does.

- Enhanced the iLO 2 self-signed SSL certificate to remain valid until the iLO DNS name changes.

- Corrected a problem with 2-Factor authentication whereby Directory authentication would fail if the certificate owner field setting was configured to SAN.

- Corrected a problem with 2-Factor authentication whereby authentication would fail if iLO 2 did not possess an initialized clock.

- Enhanced Telnet TCP sequence numbers so that they are no longer predictable.

NEW FEATURES-
- Shared Remote Console
- Remote Console Record/Playback
- Networking SMASH CLP compliance update
- WS Management support
- Virtual File Transfer
- HPSIM Single Sign-On
- AES encryption
- Kernel Debugger
- Enhanced Authentication Logging
- OS Self-Lock
- Schema-Free Nested Group support
- Infinite U/I Timeout
- Key Maps to support non-US keyboards in Remote Console
- What's New Page

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

- Fixed an RBSU memory management issue which effects the LSI option.
- Fixed a USB bug that could cause the SLES 9 installer to hang during hardware detection.
- Fixed an issue where messages to port 0 could accumulate and block further network activity, resulting in a loss of comunication between the OnBoard Administrator and iLO 2.
- Fixed an issue where NVRAM initialization could fail.
- Fixed UHCI support for Longhorn.
- Fixed IRC to work with NAT.
- Fixed an issue where performing firmware upgrade while remote serial console is active would block iLO access.
- Fixed an issue with firmware update image validation to prevent rare network problems from corrupting the update.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

- Inform user via IML when a problem is detected with the power monitoring circuitry
- Prevent EMS serial console from printing unnecessary characters
- Correctly report the number of horizontal bays a p-Class blade consumes
- Enhance Integrated Remote Console (IRC) functionality by removing the pop-up message box,
  "The Monitored Server is powered down."

Display Product ID on the User Interface

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

- Integrated Remote Console's virtual power buttons "Reset System" and "Cold Boot"
  are interchanged.
- When time is "NOT SET", Power Meter Readings page contains a JavaScript error
  and the graph is not drawn.
- DVD support is not in the help file for "Launch Virtual Media" page under
  "Blade Configuration Wizard".
- Viewing access to Power Regulator pages is not granted to all users.
- Can't create user passwords containing "<" or ">" using XML script.
- When viewed from CLI, C-class Blade servers' device IDs are incorrect.
- Alt+Space is not working properly in Integrated Remote Console.
- Characters on the Swedish keyboard number pad do not work as expected.
- Write protection switch is not recognized properly on virtual floppy connected
  through Integrated Remote Console.
- Double-click is treated as triple-click in Integrated Remote Console.
- Integrated Remote Console does not allow the up/down arrow keys to scroll
  through the text file.
- Integrated Remote Console screen is not refreshed properly (e.g. power button
  is shown twice) when rebooting server from virtual power buttons.
- Integrated Remote Console does not go offline when iLO 2 is reset or after
  firmware upgrade.
- Integrated Remote Console virtual power button events are logged with unknown
  user.
- Remote Console displays offline during system reboot POST and stays at offline
  state.
- When OpenSSH v4.1p1 connects to iLO 2, the connection fails with
  "dispatch_protocol_error: type 100 seq 7" message.

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

Blade Servers

Event Logs

Miscellaneous

• ProLiant BL460c
• ProLiant BL480c

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

Improved remote console support for international keyboards.

Added support for the following:

• Next generation ProLiant servers with Virtual KVM and Integrated Remote Console.
  
• High-speed Shared Network Port providing access to all iLO 2 functionality over the system network port. Optional VLAN support. Continued support for the iLO 2 dedicated network port.

• User Interface to simplify everyday use and provide consistency with other HP software.
  
• Feature consistency with iLO 1.8x (Virtual USB key, Terminal Services integration, Schema-free directory integration, Power Regulator reporting and Remote Console Acquire button).

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

Added support for the DL320 G4 with the latest NC324i Dual Port PCI-X Gigabit LOM server adapter.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

Problems fixed from last release:

Added the following new features:

• Support for the new iLO 2 ASIC with Virtual KVM technology enabling dramatic remote Console performance improvements equivalent to KVM over IP.
• New Integrated Remote Console that combines Virtual KVM, Virtual Power and Virtual Media into a single interface on Microsoft Internet Explorer clients.
  The Console is an ActiveX extension to Microsoft Internet Explorer and is not supported on other browsers. The iLO 2 Remote Console is still available for clients using Mozilla or FireFox browsers.
• New support for Microsoft Java Virtual Machine and continued support for Sun
  Java Virtual Machine.
• This release is based on iLO v1.70 firmware and supports similar features.
  Microsoft Terminal Service launch from the remote console is not supported. Terminal Service pass through is supported over the iLO 2 NIC.

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

Initial release.