Printable version

Drivers & software

Online ROM Flash Component for Windows x64 - HPE Integrated Lights-Out 5

By downloading, you agree to the terms and conditions of the Hewlett Packard Enterprise Software License Agreement.
Note:  Some software requires a valid warranty, current Hewlett Packard Enterprise support contract, or a license fee.

Type: Firmware - Lights-Out Management
Version: 2.10(1 Jan 3000)
Operating System(s): Microsoft Windows Server 2012
Microsoft Windows Server 2012 Essentials
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Server 2019
This component provides and installs an updated version of firmware for the iLO 5 Management Processor allowing for continued management support of your Server.

This version adds support for the following features and enhancements:
 

  • Added a security log that lists security events recorded by the iLO firmware.
  • Enhanced Secure Start verification of CPLD on Gen10 Plus servers.
  • Updated menu path and feature names for the Performance Management features. The features that were accessed through the Intelligent System Tuning menu can now be accessed through the Performance menu.
  • Embedded remote support over IPv6.
  • New alert for recovery events.
  • SUM/SUT support on servers using the High Security, FIPS, or CNSA security states.
  • Support for staging firmware to update direct-attached hard drives through the UEFI System Utilities.
  • Ability to import and export drive bay mapping information.
  • Daily firmware flash limit, to protect iLO, ROM, and CPLD from repeated flashing attacks.
  • Performance data logging in a new Active Health System record.
  • Increased the certificate size limit from 4096 to 8096.
  • When iLO is set to the factory default settings, Virtual NIC is enabled by default.
  • The following System Diagnostics features are supported on Gen10 Plus servers: 
    • Booting to safe mode—Allows you to boot the server with a safe minimum configuration.
    • Booting to intelligent diagnostics mode—Allows the system to automatically diagnose a boot failure during POST.
    • Restoring the default manufacturing settings—Resets all BIOS configuration settings to their default manufacturing values. This process deletes all UEFI nonvolatile variables, such as boot configuration, Secure Boot security keys (if Secure Boot is enabled), and configured date and time settings.
    • Restoring the default system settings—Resets all BIOS configuration settings to their default values and restarts the server. This option preserves some UEFI settings.
  • Modified text of iLO time zone selections to match system ROM time zone selections. For backward compatibility, either previous time zone selection text or the new text can be used in APIs to set the time zone.

Prerequisites:

Hewlett Packard Enterprise recommends the following or greater versions of iLO utilities for best performance:

  • RESTful Interface Tool (iLOREST) 3.0
  • HPQLOCFG v5.2 
  • Lights-Out XML Scripting Sample bundle 5.20.0 or later
  • HPONCFG Windows 5.3.0
  • HPONCFG Linux 5.3.0 or later
  • LOCFG v5.20.0 or later
  • HPLOMIG 5.2.0

  NOTE: Updated utilities and system libraries are required to support the iLO HighSecurity, FIPS, and CNSA security states. 


To ensure the integrity of your download, HPE recommends verifying your results with the following SHA-256 Checksum values:

0491dedb8bf57db997e52b72d1939af7fdfd16f6b33fcda805b16b222363dd42 cp041711_part1.compsig
3a123e2cc834d75f40605648734ac0847476ebf96a71153d686ebbfb475df692 cp041711_part2.compsig
a5edb5ebf00bbb020d9224374992ff337559ad3e44d325641f85ca4a955cbde2 cp041711.exe

Reboot Requirement:
Reboot is optional after installation. Updates will be effective after reboot. Hardware stability will be maintained without reboot.


Installation:

Install the firmware using one of these options:

  • Run the Component on the host to be updated.
    The component will update the iLO 5 firmware and reset the iLO 5 processor.
     
  • Extract the firmware from the component.  This will place the firmware image file, iLO5_yyy.bin (where yyy represents the firmware version) in the target directory.  You now have these options:
    • Login to iLO 5, navigate to the Update Firmware page, and update the firmware from there.
    • Use the HPE Lights-Out Configuration Utility, CPQLOCFG, and RIBCL/XML scripts to update iLO 5 across the network.
    • Use the HPE Online Lights-Out Configuration utility, HPONCFG, and RIBCL/XML scripts to update iLO 5 from the supported host OS.
    • Use the Directory Migration Utility, contained in the HPE Directories support for Management Processors,  The Windows utility supports network discovery of lights-out processors, import/export, as well as bulk firmware update, and does not require directory migration.

End User License Agreements:
HPE Software License Agreement v1
Hewlett-Packard End User License Agreement


Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.


Important:

IPv6 network communications - Dedicated network connection only
     Supported Networking Features
                IPv6 Static Address Assignment
                IPv6 SLAAC Address Assignment
                IPv6 Static Route Assignment
                IPv6 Static Default Gateway Entry
                DHCPv6 Stateful Address Assignment
                DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
                Integrated Remote Console
                OA Single Sign-On
                HP-SIM Single Sign-On
                Web Server
                SSH Server
                SNTP Client
                DDNS Client
                RIBCL over IPv6
                SNMP
                AlertMail
                Remote Syslog
                WinDBG Support
                HPONCFG/HPLOMIG over an IPv6 connection
                Scriptable Virtual Media
                CLI/RIBCL Key Import over IPv6
                Authentication using LDAP and Kerberos over IPv6
                iLO Federation
     Networking Features not supported by IPv6 in this release
                IPv6 Over Shared Network Port Connections
                IPMI
                NETBIOS-WINS
                Enterprise Secure Key Manager (ESKM) Support
           


Notes:

 

iLO 5 User Guide and Lights-Out Scripting Guide can also be found by following the links at:

http://www.hpe.com/info/ilo

Select your lights-out product, then support & documents, then manuals.
 

  • Check the online help for additional information about how to use features. 
    Online help can be accessed from within the browser web pages by clicking the question mark in the upper right-hand corner of each page.

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.


The following issues are resolved in this version:

  • The iLO clock incorrectly changes when iLO is reset due to a configuration change, firmware update, or a cause other than system power loss.
  • System GPUs might be listed without GPU version information.
  • Incorrect power consumption information is displayed in RIBCL output and the Active Health System Log.
  • If the domain name system is unavailable, an HPE ProLiant Gen10 Server might stop responding for up to three minutes during startup.
  • Fixed an issue where the iLO 5 webserver may becoming unresponsive when applying OV profile with certain models of NVME drives present.

Security Fixes: 

Security best practices:

  •   For the latest information about security best practices, see the HPE Integrated Lights-Out Security Technology Brief at the following website: http://www.hpe.com/support/ilo-docs.

IPv6 network communications - Dedicated network connection only
     Supported Networking Features
                IPv6 Static Address Assignment
                IPv6 SLAAC Address Assignment
                IPv6 Static Route Assignment
                IPv6 Static Default Gateway Entry
                DHCPv6 Stateful Address Assignment
                DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
                Integrated Remote Console
                OA Single Sign-On
                HP-SIM Single Sign-On
                Web Server
                SSH Server
                SNTP Client
                DDNS Client
                RIBCL over IPv6
                SNMP
                AlertMail
                Remote Syslog
                WinDBG Support
                HPONCFG/HPLOMIG over an IPv6 connection
                Scriptable Virtual Media
                CLI/RIBCL Key Import over IPv6
                Authentication using LDAP and Kerberos over IPv6
                iLO Federation
     Networking Features not supported by IPv6 in this release
                IPv6 Over Shared Network Port Connections
                IPMI
                NETBIOS-WINS
                Enterprise Secure Key Manager (ESKM) Support
           

Type: Firmware - Lights-Out Management
Version: 2.10(1 Jan 3000)
Operating System(s):
Microsoft Windows Server 2012
Microsoft Windows Server 2012 Essentials
Microsoft Windows Server 2012 R2
Microsoft Windows Server 2016
Microsoft Windows Server 2019

Description

This component provides and installs an updated version of firmware for the iLO 5 Management Processor allowing for continued management support of your Server.

Enhancements

This version adds support for the following features and enhancements:
 

  • Added a security log that lists security events recorded by the iLO firmware.
  • Enhanced Secure Start verification of CPLD on Gen10 Plus servers.
  • Updated menu path and feature names for the Performance Management features. The features that were accessed through the Intelligent System Tuning menu can now be accessed through the Performance menu.
  • Embedded remote support over IPv6.
  • New alert for recovery events.
  • SUM/SUT support on servers using the High Security, FIPS, or CNSA security states.
  • Support for staging firmware to update direct-attached hard drives through the UEFI System Utilities.
  • Ability to import and export drive bay mapping information.
  • Daily firmware flash limit, to protect iLO, ROM, and CPLD from repeated flashing attacks.
  • Performance data logging in a new Active Health System record.
  • Increased the certificate size limit from 4096 to 8096.
  • When iLO is set to the factory default settings, Virtual NIC is enabled by default.
  • The following System Diagnostics features are supported on Gen10 Plus servers: 
    • Booting to safe mode—Allows you to boot the server with a safe minimum configuration.
    • Booting to intelligent diagnostics mode—Allows the system to automatically diagnose a boot failure during POST.
    • Restoring the default manufacturing settings—Resets all BIOS configuration settings to their default manufacturing values. This process deletes all UEFI nonvolatile variables, such as boot configuration, Secure Boot security keys (if Secure Boot is enabled), and configured date and time settings.
    • Restoring the default system settings—Resets all BIOS configuration settings to their default values and restarts the server. This option preserves some UEFI settings.
  • Modified text of iLO time zone selections to match system ROM time zone selections. For backward compatibility, either previous time zone selection text or the new text can be used in APIs to set the time zone.

Installation Instructions

Prerequisites:

Hewlett Packard Enterprise recommends the following or greater versions of iLO utilities for best performance:

  • RESTful Interface Tool (iLOREST) 3.0
  • HPQLOCFG v5.2 
  • Lights-Out XML Scripting Sample bundle 5.20.0 or later
  • HPONCFG Windows 5.3.0
  • HPONCFG Linux 5.3.0 or later
  • LOCFG v5.20.0 or later
  • HPLOMIG 5.2.0

  NOTE: Updated utilities and system libraries are required to support the iLO HighSecurity, FIPS, and CNSA security states. 


To ensure the integrity of your download, HPE recommends verifying your results with the following SHA-256 Checksum values:

0491dedb8bf57db997e52b72d1939af7fdfd16f6b33fcda805b16b222363dd42 cp041711_part1.compsig
3a123e2cc834d75f40605648734ac0847476ebf96a71153d686ebbfb475df692 cp041711_part2.compsig
a5edb5ebf00bbb020d9224374992ff337559ad3e44d325641f85ca4a955cbde2 cp041711.exe

Reboot Requirement:
Reboot is optional after installation. Updates will be effective after reboot. Hardware stability will be maintained without reboot.


Installation:

Install the firmware using one of these options:

  • Run the Component on the host to be updated.
    The component will update the iLO 5 firmware and reset the iLO 5 processor.
     
  • Extract the firmware from the component.  This will place the firmware image file, iLO5_yyy.bin (where yyy represents the firmware version) in the target directory.  You now have these options:
    • Login to iLO 5, navigate to the Update Firmware page, and update the firmware from there.
    • Use the HPE Lights-Out Configuration Utility, CPQLOCFG, and RIBCL/XML scripts to update iLO 5 across the network.
    • Use the HPE Online Lights-Out Configuration utility, HPONCFG, and RIBCL/XML scripts to update iLO 5 from the supported host OS.
    • Use the Directory Migration Utility, contained in the HPE Directories support for Management Processors,  The Windows utility supports network discovery of lights-out processors, import/export, as well as bulk firmware update, and does not require directory migration.

Release Notes

End User License Agreements:
HPE Software License Agreement v1
Hewlett-Packard End User License Agreement


Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.


Important:

IPv6 network communications - Dedicated network connection only
     Supported Networking Features
                IPv6 Static Address Assignment
                IPv6 SLAAC Address Assignment
                IPv6 Static Route Assignment
                IPv6 Static Default Gateway Entry
                DHCPv6 Stateful Address Assignment
                DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
                Integrated Remote Console
                OA Single Sign-On
                HP-SIM Single Sign-On
                Web Server
                SSH Server
                SNTP Client
                DDNS Client
                RIBCL over IPv6
                SNMP
                AlertMail
                Remote Syslog
                WinDBG Support
                HPONCFG/HPLOMIG over an IPv6 connection
                Scriptable Virtual Media
                CLI/RIBCL Key Import over IPv6
                Authentication using LDAP and Kerberos over IPv6
                iLO Federation
     Networking Features not supported by IPv6 in this release
                IPv6 Over Shared Network Port Connections
                IPMI
                NETBIOS-WINS
                Enterprise Secure Key Manager (ESKM) Support
           


Notes:

 

iLO 5 User Guide and Lights-Out Scripting Guide can also be found by following the links at:

http://www.hpe.com/info/ilo

Select your lights-out product, then support & documents, then manuals.
 

  • Check the online help for additional information about how to use features. 
    Online help can be accessed from within the browser web pages by clicking the question mark in the upper right-hand corner of each page.

Fixes

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.


The following issues are resolved in this version:

  • The iLO clock incorrectly changes when iLO is reset due to a configuration change, firmware update, or a cause other than system power loss.
  • System GPUs might be listed without GPU version information.
  • Incorrect power consumption information is displayed in RIBCL output and the Active Health System Log.
  • If the domain name system is unavailable, an HPE ProLiant Gen10 Server might stop responding for up to three minutes during startup.
  • Fixed an issue where the iLO 5 webserver may becoming unresponsive when applying OV profile with certain models of NVME drives present.

Security Fixes: 

Security best practices:

  •   For the latest information about security best practices, see the HPE Integrated Lights-Out Security Technology Brief at the following website: http://www.hpe.com/support/ilo-docs.

Important

IPv6 network communications - Dedicated network connection only
     Supported Networking Features
                IPv6 Static Address Assignment
                IPv6 SLAAC Address Assignment
                IPv6 Static Route Assignment
                IPv6 Static Default Gateway Entry
                DHCPv6 Stateful Address Assignment
                DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
                Integrated Remote Console
                OA Single Sign-On
                HP-SIM Single Sign-On
                Web Server
                SSH Server
                SNTP Client
                DDNS Client
                RIBCL over IPv6
                SNMP
                AlertMail
                Remote Syslog
                WinDBG Support
                HPONCFG/HPLOMIG over an IPv6 connection
                Scriptable Virtual Media
                CLI/RIBCL Key Import over IPv6
                Authentication using LDAP and Kerberos over IPv6
                iLO Federation
     Networking Features not supported by IPv6 in this release
                IPv6 Over Shared Network Port Connections
                IPMI
                NETBIOS-WINS
                Enterprise Secure Key Manager (ESKM) Support
           

Revision History

Legal Disclaimer: Products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may have older product names and model numbers that differ from current models.