HPE iLO 5: initial setup and remote console

HPE Integrated Lights-Out (iLO) is a proprietary embedded server management technology that provides out-of-band management capabilities for HPE ProLiant…

HPE Integrated Lights-Out (iLO) is a proprietary embedded server management technology that provides out-of-band management capabilities for HPE ProLiant servers. iLO 5, specifically designed for Gen10 and newer ProLiant servers, offers enhanced security features, improved performance, and broader functionality compared to its predecessors. This article details the initial configuration of iLO 5 for remote access, focusing on network setup, user management, and remote console utilization.

Effective management of bare-metal servers often relies on robust out-of-band interfaces. iLO 5 streamlines tasks such as power cycling, firmware updates, and operating system deployment, even when the host server is unresponsive or powered off. Understanding its core setup and remote access methods is critical for any IT professional managing HPE server infrastructure.

Initial iLO 5 Configuration via POST

The quickest way to configure essential iLO 5 network settings and administrative credentials is during the server's Power-On Self-Test (POST). This method is invaluable for initial server deployment or when network access to iLO is not yet established.

Server Power-On: Power on the HPE ProLiant Gen10 (or newer) server.
Access iLO Setup: During POST, observe the prompt to press F9 for System Utilities or F10 for Intelligent Provisioning. For iLO setup, specifically look for the prompt to press F8 for iLO configuration. This prompt appears relatively early in the boot sequence, often immediately after memory initialization.
iLO Configuration Utility: Upon pressing F8, the system will enter the iLO 5 Configuration Utility. The main menu typically presents options like "Network," "Users," and "Security."
Network Settings:
- Navigate to the Network section.
- By default, iLO 5 usually attempts to obtain an IP address via DHCP. For production environments, a static IP address is highly recommended.
- Select "NIC and TCP/IP."
- Change "Network Interface" to "On" if not already enabled.
- Under "IPv4 Settings," change "DHCP Enable" to "Off."
- Enter the desired IP Address, Subnet Mask, and Gateway IP Address. Ensure these settings align with your network's addressing scheme.
- Optionally, configure DNS server addresses.
User Management:
- Return to the main menu and select the Users section.
- By default, iLO 5 typically has a user named "Administrator" (or similar) with a randomly generated password printed on the server's pull-out tag. It's crucial to change this default or create a new, strong administrative user.
- Select "Add User" or "Edit User" (for the default Administrator).
- Provide a Username (e.g., iloadmin) and a strong, complex Password. iLO 5 enforces password complexity requirements.
- Grant the necessary Privileges. For an administrative user, select all privileges (Remote Console Access, Virtual Media, Virtual Power and Reset, Configure iLO Settings, etc.).
Save and Exit: After making changes, ensure you navigate to "Save Settings" or "Exit and Save Changes." The server will then continue its boot process.

Once saved, the iLO 5 web interface should be accessible from a network workstation using the configured static IP address.

Accessing the iLO 5 Web Interface

After initial configuration, the primary method for managing iLO 5 is its secure web interface.

Open a Web Browser: Use a modern web browser (Chrome, Firefox, Edge, Safari) on a workstation connected to the same network as the iLO port.
Navigate to iLO IP: Enter https://<your_ilo_ip_address> in the browser's address bar. For example, https://192.168.1.100.
Security Warning: You will likely encounter a "Your connection is not private" or similar security warning. This is expected because iLO generates a self-signed SSL certificate by default. You can proceed past this warning (e.g., "Advanced" > "Proceed to <iLO IP>"). For production environments, consider uploading a trusted certificate authority (CA) signed certificate to iLO.
Login: Enter the username and password configured in the iLO Setup Utility (e.g., iloadmin and its password).
Dashboard: Upon successful login, you'll be presented with the iLO 5 web interface dashboard, displaying server status, health, and quick access to various management functions.

Key Web Interface Sections

Information: Provides server health summary, system information, and firmware versions.
System Information > Summary: Quick overview of components, health, and temperatures.
Firmware & OS Software: Allows updating iLO firmware, server BIOS, and other component firmware.
Remote Console & Media: Access the graphical remote console and manage virtual media.
Virtual Media: Mount ISO images or floppy disk images from your local machine to the server for OS installation.
Power & Thermal: Control server power state (on/off/reboot) and monitor thermal conditions.
Network: Reconfigure iLO network settings (IP, DNS, NTP).
Administration > User Administration: Manage iLO users, roles, and directories (LDAP/Active Directory integration).
Security > Access Settings: Configure iLO access methods, SSL/TLS settings, and SSH.

iLO 5 Remote Console

The remote console is arguably the most critical feature of iLO, allowing full graphical or text-based interaction with the server's operating system, BIOS, and boot process as if you were physically present. iLO 5 offers several remote console options.

HTML5 Console

This is the recommended and default console option for iLO 5. It requires no client-side software installation and works directly in a modern web browser.

From the iLO web interface, navigate to Remote Console & Media.
Select Launch HTML5 Console.
A new browser tab or window will open, displaying the server's video output. You can send keyboard input, mouse clicks, and even use virtual media through this console.

Note: Some functions like shared clipboard or advanced virtual media controls might be more robust in the .NET or Java IRC versions, but HTML5 covers most daily needs.

.NET IRC (Integrated Remote Console)

The .NET IRC client offers a richer feature set, including enhanced clipboard support and better performance in some scenarios, but requires a Windows operating system and the .NET Framework.

From the iLO web interface, navigate to Remote Console & Media.
Select Launch .NET IRC.
Your browser will download a small .jnlp (Java Network Launch Protocol) or .ica (Independent Computing Architecture) file, depending on the exact iLO 5 version and browser configuration. This file will launch the .NET client. If you see a .jnlp file, it's typically for the Java console. Ensure your system is configured to open these files with the appropriate launcher.
If prompted, allow the application to run.

Java IRC

Similar to the .NET IRC, the Java client provides advanced features and cross-platform compatibility, provided a compatible Java Runtime Environment (JRE) is installed on the client machine.

From the iLO web interface, navigate to Remote Console & Media.
Select Launch Java IRC.
A .jnlp file will download. You will need a JRE installed (e.g., Oracle Java, OpenJDK) to launch this. Due to increasing security restrictions in browsers and Java itself, this option can be more challenging to set up and may require adding the iLO IP to Java's security exception list.

For most modern use cases, the HTML5 console is sufficient and significantly less troublesome to deploy.

Virtual Media Configuration

Installing an operating system or applying large updates often requires mounting ISO files. iLO's Virtual Media feature facilitates this without physical access to the server.

Using Virtual Media via HTML5 Console

Launch the HTML5 Console as described above.
Within the console window, locate the Virtual Media icon (often looks like a CD/DVD drive or a floppy disk).
Click the icon and select CD/DVD-ROM (for ISO images) or Floppy/USB Key (for small image files).
Choose Local ISO file or Local Image File.
Browse to and select the ISO file on your local workstation.
Once mounted, the server will see the virtual drive. You may need to reboot the server and adjust the boot order in the BIOS/UEFI to boot from the virtual media.

Using Virtual Media via iLO Web Interface (Pre-boot)

You can also attach virtual media directly from the iLO web interface, which is useful if you want the media attached before launching the console or if the console struggles with large files.

Navigate to Remote Console & Media > Virtual Media.
Under the "CD/DVD-ROM" or "Floppy/USB Key" section, select Local File.
Click Choose File and browse to your ISO image.
Click Insert. The iLO will upload a portion of the file and present it to the server.
You can then launch any console to interact with the server, and it will see the virtual media. Remember to Eject the media once done.

CLI Access via SSH

For advanced users and scripting, iLO 5 provides a Command Line Interface (CLI) accessible via SSH.


# Enable SSH on iLO (if not already enabled)
# From the iLO web interface:
# Navigate to Security > Access Settings > SSH (checkbox)

# Connect via SSH from your workstation
ssh iloadmin@<your_ilo_ip_address>

# Example commands once connected:
# Display iLO firmware version
show /map1/firmware1

# Display server health summary
show /system1

# Power off the server
poweroff /system1

# Power on the server
poweron /system1

# Set the next boot device to CD/DVD (for virtual media boot)
set /system1/bootorderrsv1/bootorder/1=Cd

# Show network settings
show /map1/lanrecord1

# Show all available commands (extensive list)
help

# Exit SSH session
exit

SSH access provides robust automation capabilities for managing multiple servers programmatically.

Common Pitfalls and Troubleshooting

"F8 for iLO" Prompt Missing: Ensure the server is a supported Gen10 or newer model. If the prompt still doesn't appear, try resetting iLO to factory defaults (often an option during POST in System Utilities or via a physical reset button if available, consult your server's documentation).
Web Interface Not Loading:
- Incorrect IP: Double-check the iLO IP address.
- Network Connectivity: Verify physical cable connection to the iLO port and network switch port status. Ensure no VLAN or firewall rules are blocking access on TCP port 443 (HTTPS).
- Browser Cache: Clear your browser's cache or try an incognito/private window.
- iLO Health: If the server has serious hardware issues, iLO itself might be impaired.
Remote Console Not Launching (Java/ .NET):
- JRE/ .NET Version: Ensure you have a compatible and updated Java Runtime Environment or .NET Framework installed.
- Browser Security: Browser security settings often block .jnlp or .ica files. Add the iLO IP to your Java security exception list (Control Panel > Java > Security tab).
- Pop-up Blockers: Disable pop-up blockers for the iLO IP address.
- HTML5 Console Preference: If facing issues with Java/ .NET, strongly consider using the HTML5 console as it's generally more reliable and requires no client-side setup.
Slow Console Performance: Network latency between your workstation and the iLO can significantly affect console responsiveness. Ensure your network path is optimized. HTML5 console generally performs well over moderate latency.
iLO Security Warnings: The self-signed certificate warning is normal. To remove it, generate a Certificate Signing Request (CSR) from iLO (Administration > Security > SSL Certificate) and have it signed by an internal or public Certificate Authority, then upload the signed certificate back to iLO.
Default Password Sticker Lost: If the physical pull-out tab with the default iLO password is lost, you will need physical access to the server to reset iLO to factory defaults, which typically clears all configurations and resets the password to a new random one or a default standard.