127

When accessing the iDRAC6 Web-based interface, I get a security warning stating the SSL certificate was issued by a certificate authority (CA) that is not trusted.

iDRAC6 includes a default iDRAC6 server certificate to ensure network security for the Web-based interface and remote RACADM features. This certificate was not issued by a trusted CA. To address this security concern, upload a iDRAC6 server certificate issued by a trusted CA (for example, Microsoft Certificate Authority, Thawte or Verisign).

See "Securing iDRAC6 Communications Using SSL and Digital Certificates" on page 349 for more information about issuing certificates.

Advanced iDRAC6 Configuration

Page 127

Image 127

Contents

User Guide July Contents Accessing the Web Interface Installing the Software onUpdating the iDRAC6 Firmware Using Multiple Browser Tabs and Windows Cable for the Serial Console Connecting the DB-9 or Null ModemConfiguring the Management Station Viewing Internal Dual SD Module 109 Frequently Asked Questions about 125Using the Web Interface to Configure 106 Prerequisites for Enabling Microsoft Using the Racadm Utility to Configure 139Supported Active Directory Authentication 148 143 177 Generic Ldap Directory Service 178Frequently Asked Questions about 168 198 Troubleshooting the Smart Card191 193 231 213Launching Virtual Console and Virtual 219 221 239 Creating a Bootable Image File 240Using the Ipmi Remote Access 254 Configuring Serial Over LAN Using 254 264 255257 259 284 Frequently Asked Questions 288Power Inventory, Power Budgeting 274 298 293294 295 326 Configuring Platform Events 316Frequently Asked Question about 322 325 333 Using the System Event Log SEL 330Using the Diagnostics Console 337 332 Removable Flash Media Probes 342 Using the Secure Shell SSH 353341 342 IDRAC6 Overview IDRAC6 Express Management Features IDRAC6 Overview Interface and Standards Support IDRAC6 Feature ListIDRAC6 Enterprise and vFlash Media IDRAC6 Express Enterprise With vFlash Connectivity Security and AuthenticationRemote Management and Remediation Logging Monitoring SM-CLP RAC Log Lifecycle Controller Unified Server Configurator IDRAC6 Overview IDRAC6 Server Listening Ports Port Number Function Supported Remote Access ConnectionsSupported Remote Access Connections Features IDRAC6 Ports IDRAC6 Client Ports Port Number Function Other Documents You May Need IDRAC6 Overview IDRAC6 Overview IDRAC6 Overview Getting Started With the iDRAC6 Getting Started With the iDRAC6 Installing the iDRAC6 Express/Enterprise Hardware Basic Installation of the iDRAC6Before You Begin Configuring Your System to Use an iDRAC6 Select Save Changes and Exit Installing iDRAC6 Software Software Installation and Configuration OverviewConfiguring iDRAC6 Installing the Software on the Management Station Installing the Software on the Managed System Uninstalling Racadm Installing Racadm Before You Begin Updating the iDRAC6 FirmwareDownloading the iDRAC6 Firmware Updating the iDRAC6 Firmware Using Racadm Updating the iDRAC6 Firmware Using the Web-Based Interface List of Trusted Domains Configuring a Supported Web BrowserClick Tools, and click Internet Options Windows Viewing Localized Versions of the Web-Based InterfaceLinux Updated entry Basic Installation of the iDRAC6 Configuring the iDRAC6 Using the Web Interface Accessing the Web Interface Logging Logging Out Using Multiple Browser Tabs and Windows Configuring the Network and Ipmi LAN Settings Configuring the iDRAC6 NICClick Remote Access→ Network/Security→ Network Click the appropriate button to continue. See Table Network Settings Setting Description Common Settings Description Network Settings Description IPv4 Settings Description Common Settings SettingDescriptionPreferred DNS Server and Alternate DNS Server fields IPv6 Settings Description Ipmi Settings Description IPv6 Settings SettingDescriptionVlan Settings SettingDescription Network Configuration Page Buttons Description Configuring IP Filtering and IP BlockingApply Network Security Page Settings Description 10. Network Security Page Buttons Description Configuring Platform Events11. Platform Event Filters Index Processor AbsentCritical Assert Configuring Platform Event Traps PET Configuring Platform Event Filters PEFClick System→ Alerts→ Traps Settings Configuring E-Mail Alerts Click System→ Alerts→ Email Alert Settings Configuring Ipmi Using Web Interface Set the Channel Privilege Level Limit and Flow Control Network/Security tab, click Serial Configuring iDRAC6 Users Secure Sockets Layer SSL 12. SSL Page Options Field Description Accessing SSL Through the Web-Based InterfaceClick Remote Access→ Network/Security Certificate Signing Request CSR Upload Server Certificate Generating a Certificate Signing RequestView Server Certificate Locality Common NameOrganization Name Organization Unit 15. Certificate Upload Page Buttons Description Uploading a Server CertificateRefresh Reloads the Generate Certificate Signing Request Menu Button Description Viewing a Server Certificate16. Certificate Information Field Description 17. View Server Certificate Page Buttons Active Directory Configuring and Managing Active DirectoryEnabled Single Sign-On Schema Selection User Domain Name Timeout Settings Extended SchemaCertificate Configuring iDRAC6 Services Configuring and Managing Generic LdapPrint 21. Web Server Settings 20. Local Configuration Setting Description Port Number 21. Web Server Settings SettingDescription22. SSH Settings Description 23. Telnet Settings 26. Automated System Recovery Agent Setting 23. Telnet Settings Description24. Remote Racadm Settings 25. Snmp Settings 27. Services Page Buttons Description Updating the iDRAC6 Firmware/System Services Recovery Image File upload in progress IDRAC6 Firmware Rollback Remote Syslog 28. Remote Syslog Settings AttributeDescription Boot Once First Boot Device29. First Boot Device Attribute Description First Boot Device Remote File Share 30. Remote File Server Settings Attribute Description 30 lists the remote file share settings Internal Dual SD Module Viewing Internal Dual SD Module Status Using GUI 32. SD Card States Description Advanced iDRAC6 Configuration Starting a Text Console Through Telnet or SSH Configuring the iDRAC6 Settings to Enable SSH/TelnetClick Apply Changes Running Telnet Using Microsoft Windows XP or Windows Using a Telnet Console Enable Telnet in Windows Component Services Using the Secure Shell SSH Cryptography Schemes Scheme Type Configuring Linux for Serial Console During Boot Sample File /etc/grub.conf Enabling Login to the Virtual Console After Boot Serial --unit=1 --speed=57600 terminal --timeout=10 serial Sample File /etc/innitab Shows a sample file with the new line Sample File /etc/innitab Sample File /etc/securetty Configuring iDRAC6 for Serial Connection Racadm config -g cfgSerial -o cfgSerialConsoleEnable For Direct Connect Terminal mode 100 101 102 Signal Name 103 Configuring Linux Minicom for Serial Console Emulation Required Minicom Settings for Serial Console Emulation Select Save setup as configname and press Enter104 105 Configuring HyperTerminal for Serial Console Ipmi Serial Settings Description Configuring Serial and Terminal ModesConfiguring Ipmi and iDRAC6 Serial Management Station COM Port Settings Setting Description 10. Serial Page Settings IDRAC6 Serial Settings107 12. Terminal Mode Settings Page Buttons Description Configuring Terminal ModeSerial page, click Terminal Mode Settings 11. Terminal Mode Settings Description 109 Configuring the iDRAC6 Network SettingsAccessing the iDRAC6 Through a Network 12. Terminal Mode Settings Page Buttons ButtonDescription 110 Powercycle, and hardreset commands13. iDRAC6 Interfaces InterfaceDescription 111 Using Racadm Remotely13. iDRAC6 Interfaces Description 112 113 14. racadm Command Options DescriptionRacadm Synopsis Racadm Options Enabling and Disabling the Racadm Remote Capability Racadm Subcommands114 115 15. Racadm Subcommands Command Description 116 What does this message mean? Frequently Asked Questions About Racadm Error Messages117 118 Configuring Multiple iDRAC6 Controllers 119 Creating an iDRAC6 Configuration File 120 Example Parsing Rules121 122 Modifying the iDRAC6 IP Address 123 Configuring iDRAC6 Network Properties 124 125 Frequently Asked Questions about Network Security16. iDRAC6 NIC Configurations Mode Description IDRAC6 Modes 126 Why doesn’t my DNS server register my iDRAC6? 127 128 129 Adding and Configuring IDRAC6 UsersAdding and Configuring iDRAC6 Users Click Remote Access→ Network/Security→ Users 130 User States and Permissions Setting Description Upload Trusted CA Smart Card Configuration Options OptionDescriptionEnable User 131 IDRAC User Privileges Property Description General User Settings132 Ipmi User Privileges PropertyDescription Reasons, assign this privilege carefully 133IDRAC Group Permissions User Group Permissions Granted 134 Public Key Authentication over SSHUser Configuration Page Buttons Action Before You Begin Generating Public Keys for Linux Generating Public Keys for Windows135 136 Logging in Using Public Key AuthenticationSending racadm commands Logging 10. View/Remove SSH Keys Option Description SSH Key Configurations Option Description137 Upload SSH Keys Option Description Delete Uploading, Viewing, and Deleting SSH Keys Using RacadmUpload View 139 Using the Racadm Utility to Configure iDRAC6 Users Example Adding an iDRAC6 User140 Enabling an iDRAC6 User With Permissions Removing an iDRAC6 User141 142 143 Using iDRAC6 With Microsoft Active DirectoryIDRAC6 User Privileges Description Privilege Description 144 Enabling SSL on a Domain Controller Click Start→ Administrative Tools→ Domain Security Policy145 146 147 Importing the iDRAC6 Firmware SSL Certificate 148 Supported Active Directory Authentication MechanismsExtended Schema Active Directory Overview Active Directory Schema Extensions Active Directory Object Overview Overview of the iDRAC Schema Extensions149 150 Typical Setup for Active Directory Objects 151 Accumulating Privileges Using Extended Schema 152 153 Extending the Active Directory Schema 154 Using the Dell Schema Extender 155 840.113556.1.8000.1280.1.1.1.5 156DellPrivileges Class DellProduct Class Single 157Valued 158 159 Installing the Administrator Pack Select Privilege Object Creating an iDRAC Device ObjectSelect iDRAC Device Object Creating a Privilege Object Adding Privileges Configuring an Association ObjectCreating an Association Object Adding Users or User Groups 162 Adding iDRAC Devices 163 164 Racadm 165 166 167 168 Standard Schema Active Directory Overview Permissions Granted Bit Mask Groups Level Default Role Group PrivilegesSingle Domain Versus Multiple Domain Scenarios 169 170 Directory Users and Computers Snap-in 171 172 173 174 175 176 177 Testing Your Configurations Login Syntax Directory User versus Local User Generic Ldap Directory Service178 179 180 181 Additional settings to test BindDN option Configuring Generic Ldap Directory Service Using RacadmView the settings using the below commands Use Racadm to confirm whether login is possible 183 Frequently Asked Questions about Active Directory How does standard schema query work? When do I need to configure Global Catalog Addresses?184 185 Why does iDRAC6 enable certificate validation by default?Does iDRAC6 support the NetBIOS name? Does iDRAC6 always use Ldap over SSL? 186 About Kerberos Authentication Configuring iDRAC6 for Single Sign- On or Smart Card Login 188 Click Remote Access→ Network/Security tab→ Network subtab 189 190 Browser Settings to Enable Active Directory SSOSelect Tools→ Internet Options→ Security→ Local Intranet Click Advanced Configuring iDRAC6 to Use SSO Using Microsoft Active Directory SSO191 Using Racadm Logging Into iDRAC6 Using SSO192 193 Configuring Smart Card AuthenticationConfiguring Local iDRAC6 Users for Smart Card Logon Exporting the Smart Card Certificate 194 Configuring Active Directory Users for Smart Card LogonConfiguring Smart Card Using iDRAC6 Network/Security→ tab Smart Card Enable with Remote Racadm setting only to access Smart Card Settings DescriptionEnabled with Remote Racadm Enables Smart Card If you select Enabled or Enabled with Remote Racadm, you Network Logging Into the iDRAC6 Using the Smart CardIDRAC6 under Remote Access→ Network/Security→ 196 197 Unable to Log into Local iDRAC6 Troubleshooting the Smart Card Logon in iDRAC6ActiveX plug-in unable to detect the Smart Card reader Incorrect Smart Card PIN 199 Unable to Log into iDRAC6 as an Active Directory User 200 Frequently Asked Questions About SSO 201 202 203 Using GUI Virtual ConsoleUsing Virtual Console Overview 204 Configuring Your Management Station 205 Java Cache viewer is displayed Clear Your Browser’s Cache206 207 Common Settings for Microsoft Windows Operating Systems Configuring Virtual Console in the iDRAC6 Web Interface Supported Screen Resolutions and Refresh Rates208 Remote Presence Port 209Local Server Video Plug-in Type Configuration Page Buttons DefinitionOpening a Virtual Console Session 210 211 Virtual Console EnabledVideo Encryption Enabled Enabled Remote Presence Port Refresh Reloads the Virtual Console and Virtual Media Virtual Console Preview212 Virtual Console and Virtual Media Page Buttons Definition Virtual Console Preview Options Descritpion Using iDRAC6 Virtual Console Video ViewerSettings on the Console/Media Configuration 213 Virtual Launch Virtual 214Viewer Menu Bar Selections Menu Item Description Pin icon 215 Viewer Menu Bar Selections Menu Item Item Description 216 217 Disabling or Enabling Local Server Video Click System→ Console/Media→ Configuration218 URL Format Launching Virtual Console and Virtual Media Remotely219 Error Scenarios Reason Behavior General Error Scenarios220 221 Frequently Asked Questions on Virtual Console 222 Using Virtual Console Frequently Asked Questions AnswerCfgRacTuneLocalServerVideo 223 Bios 224 Standard Dmtf Using the WS-MAN InterfaceSupported CIM Profiles 225 Standard Dmtf 227 Standard Dmtf Dell Extensions 229 WS-MAN release notes or readme file IDRAC6 SM-CLP Support Using the iDRAC6 SM-CLP Command Line Interface 232 SM-CLP FeaturesUsing SM-CLP SM-CLP Targets SM-CLP Targets Definitions 233 Capabilities on the system 234 Dhcp 235 236 237 238 239 Deploying Your Operating System Using VmcliRemote System Requirements Network Requirements Creating an Image File for Linux Systems Creating a Bootable Image FileConfiguring the Remote Systems Preparing for Deployment 241 Deploying the Operating System 242 Using the Vmcli Utility Command Line Options Installing the Vmcli Utility243 244 Vmcli ParametersIDRAC6 IP Address IDRAC6 User Name Floppy/Disk Device or Image File IDRAC6 User Password245 246 CD/DVD Device or Image File Encrypted Data Vmcli Operating System Shell OptionsVersion Display Help Display 248 Vmcli Return Codes 249 Configuring Ipmi Using Web-Based InterfaceConfiguring Ipmi Using the Racadm CLI Support.dell.com\manuals 250 251 252 253 Configuring Serial Over LAN Using the Web-Based Interface Using the Ipmi Remote Access Serial Interface254 255 Configuring and Using Virtual Media 256 Windows-Based Management Station 257 Configuring Virtual MediaVirtual Media Configuration Properties Attribute Value Linux-Based Management Station Configuration Page Buttons Description Virtual Media Configuration Properties AttributeValue258 259 Supported Virtual Media ConfigurationsConnecting Virtual Media Running Virtual Media 260 Click Launch Virtual Console 261 Booting From Virtual MediaDisconnecting Virtual Media Click Tools→ Launch Virtual Media Boot Once Feature Installing Operating Systems Using Virtual Media262 263 Select the Enable Boot Once option under Virtual MediaWindows-Based Systems Linux-Based Systems Using Virtual Media Frequently Asked Questions Answer Frequently Asked Questions about Virtual Media264 265 Using the Dell Systems Management Tools 266 Answer 267 268 Administrative Tools Services. Right-clickOn Windows Event Collector and click Stop 269 Configuring vFlash SD Card and Managing vFlash Partitions SD Card Properties Attribute Description 270Size Write-protected VFlash Enabled271 Available Space Displaying the vFlash or Standard SD Card Properties Configuring vFlash or Standard SD Card Using272 Getting the Last Status on the vFlash or Standard SD Card Resetting the vFlash or Standard SD CardEnabling or Disabling the vFlash or Standard SD Card Initializing the vFlash or Standard SD Card Creating an Empty Partition Managing vFlash Partitions Using iDRAC6 Web Interface274 Label 275Create Empty Partition Page Options Field Description Index 276 Creating a Partition Using an Image FileEmulation Type 277 Img nor .iso 278 Formatting a PartitionImage Location Format Type Viewing Available Partitions279 Format Partition Page Options Field Description Attached 280Viewing Available Partitions Field Description Read-Only Attaching and Detaching Partition Modifying a Partition281 Operating System Behavior for Attached Partitions Deleting Existing Partitions282 Downloading Partition Contents 284 Managing vFlash Partitions Using RacadmBooting to a Partition Valid Options Options only valid with the status action Options only valid with the create action285 Viewing Partition Information Creating a PartitionDeleting a Partition Getting the Status of a Partition 287 Attaching or Detaching a Partition When is the vFlash or standard SD card locked? Frequently Asked Questions288 289 Power Monitoring Management 290 Power Inventory, Power Budgeting, and CappingPower Monitoring Configuring and Managing Power Individual Power Supply Elements The possible values are Viewing the Health Status of the Power Supply UnitsUsing the Web-Based Interface Power Supplies Redundancy Status The possible values are 292 Using Racadm 293 Viewing Power BudgetUsing the Web Interface Power Budget Information page displays 294 Power Budget Threshold Power Monitoring Viewing Power Monitoring295 Amperage Power Tracking Statistics296 297 Power ConsumptionHeadroom Show Graph 298 Executing Power Control Operations on the Server 299 300 301 Using the iDRAC6 Configuration Utility Using the iDRAC6 Configuration Utility Starting the iDRAC6 Configuration Utility302 Ipmi Over LAN IDRAC6 LAN303 304 LAN ParametersLAN Parameters Description 305 IPv4 SettingsEthernet IP Address, Subnet Mask, and Default Gateway When Static is selected, the Ethernet IP Address, Subnet 306 IPv6 SettingsSelected, the IPv6 Address 1, Prefix Length, and Default When Static is selected, the IPv6 Address 1, Prefix Length Virtual Media Virtual Media Configuration307 308 VFlashInitialize vFlash VFlash Properties 309 System Services ConfigurationSystem Services Cancel System Services Smart Card Logon 310 LCD ConfigurationLCD User Configuration Collect System Inventory on Restart 311 LAN User ConfigurationReset to Default Between the options Disabled, View And Modify, and View 312 LAN User Configuration Description 313 System Event Log Menu Exiting the iDRAC6 Configuration Utility314 315 Monitoring and Alert Management Under Startup and Recovery, click Settings Disabling the Windows Automatic Reboot OptionDisabling the Automatic Reboot Option in Windows Server Click Advanced System Settings under Tasks on the left 317 Configuring PEF Using the Racadm CLI Configuring PEF Using the Web-Based Interface318 319 Configuring PETConfiguring PET Using the Web User Interface Configuring PET Using the Racadm CLI Configuring E-Mail Alerts Using the Racadm CLI Configuring E-mail Alerts Using the Web User Interface320 321 Testing E-mail Alerting 322 Frequently Asked Question about Snmp AuthenticationTesting the RAC Snmp Trap Alert Feature Why is the following message displayed 323 324 325 First Steps to Troubleshoot a Remote System 326 Managing Power on a Remote SystemSelecting Power Control Actions from the iDRAC6 CLI Viewing System Information System Information Field Description Auto Recovery FieldDescriptionMain System Chassis 327 RAC Information Field Description Remote Access Controller328 Embedded NIC MAC Addresses Field Description IPv4 Information Field Description 329IPv6 Information Fields Description Status Indicator Icons Icon/Category Description Using the System Event Log SEL330 Button Action Using the Command Line to View System Log331 SEL Page Buttons 332 Using the Post Boot Logs Last Crash Screen Page Buttons Action Viewing the Last System Crash ScreenTo view the Last Crash Screen 333 334 335 Using the RAC Log IDRAC Log Buttons Action Using the iDRAC Log Page Buttons336 IDRAC Log Page Information Field Description Using the Diagnostics Console Using the Command Line337 338 Using Identify ServerClick System→ Remote Access→ Troubleshooting→ Identify Diagnostic Commands Description Using the racdump Using the Trace Log339 340 Using the coredump Chassis Intrusion Probes Battery ProbesSensors Fan Probes Removable Flash Media Probes Power Supplies ProbesPower Monitoring Probes Temperature Probe 343 Voltage Probes 344 345 Configuring Security Features Disabling Local Configuration From Local Racadm Security Options for the iDRAC6 AdministratorDisabling the iDRAC6 Local Configuration Disabling Local Configuration During System Reboot 347 348 Disabling iDRAC6 Virtual Console 349 350 Accessing the SSL Main MenuSSL Main Menu Field Description SSL Main Menu Buttons Description 351 Generate Certificate Signing Request CSR Page Buttons 352Certificate Information Field Description Configuring Services Using the Secure Shell SSH353 Http Port Number Local Configuration Settings DescriptionWeb Server Settings 354 355 SSH Settings DescriptionTelnet Settings 10. Remote Racadm Settings 356 11. Snmp Agent Settings Description12. Automated System Recovery Agent Setting Description 13. Services Page Buttons IP Filtering IpRange Enabling Additional iDRAC6 Security Options357 358 Enabling IP Filtering IP Blocking IP Filtering Guidelines359 360 15. Login Retry Restriction Properties Property Definition Enabling IP Blocking Network Configuration page, click Advanced Settings361 Penalty Time 16. Network Security Page Settings DescriptionGo Back to Network Returns to the Network Configuration 362 ASR Index Index Index Ipmi Racadm SEL Index Index

Dell IDRAC6 manual 127

Models: IDRAC6

127