Methods to Automate ILOM Configuration Changes and Firmware Updates

A P P E N D I X A

ILOM provides multiple interfaces to change and monitor the service processor configuration, and to update ILOM firmware. This appendix provides an overview of the methods you can use to change ILOM confguration and perform a firmware update. For detailed information about some of these methods, see the Sun Integrated Lights Out Manager 2.0 User’s Guide (820-1188).

Caution - Updating ILOM firmware results in an ILOM-initiated server shutdown for many Sun servers. Plan ILOM firmware upgrades accordingly.

See the following sections for information about the methods you can use to change the ILOM configuration or to update the ILOM firmware:

Using Sun xVM OPS Center

Using the Sun Installation Assistant

Using the ILOM CLI

Using IPMI

Using SNMP

Using Sun xVM OPS Center

You can use Sun xVM Ops Center software to update the ILOM firmware. Sun xVM OPS Center manages firmware updates of multiple Sun servers.

Follow the instructions for Sun xVM Ops center at:

http://www.sun.com/software/products/xvmopscenter/specs.jsp

Using the Sun Installation Assistant

The Sun Installation Assistant (SIA) tool, which is provided with many Sun servers, provides a bootable CD-ROM that supports ILOM firmware updates.

1. For a complete list of the supported Sun server platforms, go to the SIA information page at:

http://www.sun.com/systemmanagement/sia.jsp

2. To find the latest release of the SIA CD-ROM images, go to the Sun download site at:

http://www.sun.com/download/index.jsp

Using the ILOM CLI

The ILOM command-line interface (CLI) provides direct methods to change ILOM configuration and to perform a firmware update.

Note - CLI commands can be scripted by using open-source tools such as Expect, which can automate processes sucfh as logging in to ILOM.

Change ILOM Configuration Using the ILOM CLI

To disable http or https services using the CLI, follow these steps:

1. Connect to the ILOM serial management port or to a network SSH session.

2. To disable the http or https service, type one of the following commands:

-> set /SP/services/http servicestate=disabled

-> set /SP/services/https servicestate=disabled

Update ILOM Firmware Using the ILOM CLI

To update the ILOM firmware using the CLI, follow these steps:

To perform a firmware upgrade, type:

-> load -source tftp://<tftpserver>/<ilom.firmware.xxx>

Where tftpserver is the TFTP server on which you downloaded the ILOM firmware update and ilom.firmware.xxx is the firmware image file. For example:

ilom.x6220-2.0.3.2-r26980.ima

For a complete description of the ILOM 2.0 firmware update process, see the Sun Integrated Lights Out Manager 2.0 User’s Guide (820-1188).

Using IPMI

The procedures in this section are supported on x64 systems only.

ILOM provides access to network-based ILOM CLI configuration changes and firmware updates. Newer versions of the open-source IPMItool utility (1.8.9.4 and later), which is provided on Tools & Drivers CD-ROM for many Sun servers, provides the ability to initiate configuration changes.

To download the latest version of IPMItool, go to the Sun download site from which you download your platform firmware upgrades. Choose the Tools & Drivers selection. The page that appears will have links to the OS-specific files for the Tools & Drivers CD. The IPMItool utiltiy is included as one of those links.

Note - The ILOM CLI and and the IPMItool sunoem cli can be used to change any configuration, of which the web interface is only one example.

Change ILOM Configuration Using IPMI

To disable the http or https service, type:

# ipmitool -U root -P <root_password> -H <sp_ipaddress> sunoem cli set /SP/services/http servicestate=disabled

# ipmitool -U root -P <root_password> -H <sp_ipaddress> sunoem cli set /SP/services/https servicestate=disabled

Note - Many older, and some current ILOM releases, may not provide support for the IPMItool sunoem cli subcommand. If this applies to your ILOM release, use an alternative method to change the ILOM configuration.

Update ILOM Firmware Using IPMI

The IPMIflash utility, bundled with Sun xVM Ops Center, and provided on Tools & Drivers CD-ROM for many Sun servers, provides the ability to initiate firmware updates. Refer to the IPMIflash manual page for details.

Caution - The server might be powered off during the final stages of firmware update, when the BIOS is updated.

To upgrade ILOM firmware using IPMI, type:

# ipmiflash -U root -P <root_password> -H <sp_ipaddress> write <ilom.file>

Note - Some current ILOM releases might not provide support for the ipmiflash command. If this applies to your ILOM release, use an alternative method to update the ILOM firmware.

Update ILOM Firmware Using IPMI KCS Interface

Caution - The server might be powered off during the final stages of firmware update, when the BIOS is updated.

The IPMIflash utility also provides methods to update ILOM firmware over the IPMI keyboard controller style (KCS) interface. Refer to the IPMIflash manual page for details.

Perform the following procedure from the server, not from a remote location.

To update the ILOM firmware using IPMI KCS, type:

# service start ipmi

# ipmiflash write <ilom.file>

Note - Some current ILOM releases might not provide support for the ipmiflash command. If this applies to your ILOM release, use an alternative method to update the ILOM firmware.

Update ILOM Firmware Using IPMI USB Interface

Caution - The server might be powered off during the final stages of firmware update, when the BIOS is updated.

Perform the following procedure from the server, not from a remote location.

To update the ILOM firmware using IPMI USB, type:

# modprobe sg

# ipmiflash startcd

# ipmiflash -I usb write <ilom.file>

Note - Some current ILOM releases might not provide support for the ipmiflash command. If this applies to your ILOM release, use an alternative method to update the ILOM firmware.

Using SNMP

ILOM provides an SUN-ILOM-CONTROL-MIB, which allows configuration changes and firmware updates. For information about this MIB, refer to the Sun Integrated Lights Out Manager 2.0 User’s Guide (820-1188) at:

http://docs.sun.com/source/820-1188-12/core_ilom_snmp.html

Note - Some Sun servers do not support ILOM firmware updates using SNMP. If this applies to your platform, use an alternative method to update the ILOM firmware.

Change ILOM Configuration Using SNMP

ILOM SNMP MIBs are included on the Tools & Drivers CD-ROM provided with each server, and can be downloaded from sun.com at your specific platform download site.

Note - Certain older ILOM releases might not provide complete support for the SUN-ILOM-CONTROL-MIB.

Use the following properties to disable http and https services:

ilomCtrlHttpEnabled OBJECT-TYPE

SYNTAX TruthValue

MAX-ACCESS read-write

STATUS current

DESCRIPTION

"Specifies whether or not the embedded web server should be running

and listening on the HTTP port."

::= { ilomCtrlHttp 1 }

ilomCtrlHttpsEnabled OBJECT-TYPE

SYNTAX TruthValue

MAX-ACCESS read-write

STATUS current

DESCRIPTION

"Specifies whether or not the embedded web server should be running and listening on the HTTPS port."

::= { ilomCtrlHttps 1 }

Update ILOM Firmware Using SNMP

Use the SNMP-CONTROL-MIB to update the ILOM firmware.

ilomCtrlFirmwareTFTPServerIP OBJECT-TYPE
     SYNTAX IpAddress
     MAX-ACCESS read-write
     STATUS current
     DESCRIPTION
         "The IP address of the TFTP server which will be used to download the
          the firmware image."
     ::= { ilomCtrlFirmwareMgmt 4 }

ilomCtrlFirmwareTFTPFileName OBJECT-TYPE
     SYNTAX SnmpAdminString
     MAX-ACCESS read-write
     STATUS current
     DESCRIPTION
         "The relative path of the new firmware image file on the TFTP server."
     ::= { ilomCtrlFirmwareMgmt 5 }

ilomCtrlFirmwarePreserveConfig OBJECT-TYPE
     SYNTAX TruthValue
     MAX-ACCESS read-write
     STATUS current
     DESCRIPTION
         "This property determines whether the previous configuration of the device
          should be preserved after a firmware update.  The configuration data includes all users information, configuration of clients and services, and any logs. The default value of this property is true."
     ::= { ilomCtrlFirmwareMgmt 6 }

ilomCtrlFirmwareMgmtAction OBJECT-TYPE
     SYNTAX ILOMCtrlFirmwareUpdateAction
     MAX-ACCESS read-write
     STATUS current
     DESCRIPTION
         "This property is used to initiate a firmware update using the values of the other firmware management properties as parameters.  It can also clear the values of those parameters.   To initiate a firmware update, set the value of this property to initate(2).  To clear the values of the writeable firmware management properties, set thispropery to clearProperties(1).  Before initiating a firmware update, the ilomCtrlFirmwareTFTPServerIP, ilomCtrlFirmwareTFTPFileName, and ilomCtrlFirmwarePreserveConfig properties must be set.  After intiating a firmware update, the ilomCtrlFirmwareMgmtStatus property can be used to determine if the operation was successful. This is effectively a write-only property."
     ::= { ilomCtrlFirmwareMgmt 8 }