Updates to Oracle ILOM 5.0.0 Firmware

4 Updates to Oracle ILOM 5.0.0 Firmware

This section includes the following information about the Oracle ILOM firmware release 5.0.0.

Feature Enhancements and Other Changes As of Firmware Version 5.0.0

The following table lists feature enhancements as well as other changes as of Oracle ILOM firmware version 5.0.0.

Table 4-1 Feature Enhancement and Change Summary as of Oracle ILOM firmware version 5.0.0

Feature Update	Enhancement Description	For More Details, See:
New Web Service REST API functionality.	Support for additional REST API management functions. These new functions include: Fault management of field replacement units (FRUs). Management of multiple firmware images. Upload and download of local client REST API data. Host console history extraction to a binary (non-text) file. Download of SP Snapshot data.	Documentation Update: As of firmware version 5.0, the former Oracle ILOM Web Service REST API User Guide for Firmware Release 4.0.x was replaced by the Oracle ILOM Web Service REST API User Guide for Firmware Releases 4.x and 5.x.
New or updated security related features.	New security related features include: Server Certificate for outgoing HTTPS connections. Web Server Session Duration and Allowed Services configuration properties. Additional password policy locking properties for local user accounts. End of life support for the following features: TLS v1.1 (support removed). DSA Server Side Keys (support removed). IPMI 1.5 Sessions (support removed) HTTP (support removed and replaced by HTTPS). Revised default setting(s): IPMI 2.0 Session default property changed from enabled to disable.	Security Features Per Oracle ILOM Firmware Release. Note: Documentation Update. A new version of the Oracle ILOM Security Guide is available as of firmware release 5.0. This new guide represents all security related information for systems running Oracle ILOM firmware release 5.0.x. This guide does not cover security functionality for earlier firmware releases (4.x and 3.x). Modifying Default Management Access Configuration Properties See Table: Web Server Configuration Properties Modifying Default Management Access Configuration Properties See Table: Server Certificate Configuration Properties for Outgoing HTTPS Connections Modify Password Policy Restrictions and Account Locking Properties for Local Users
New firmware backup image functionality.	Ability to store and manage multiple Oracle ILOM firmware images.	Storing and Managing SP Firmware Images - As of Firmware Version 5.0
New firmware downgrade package restrictions	Ability to identify vulnerabilities in firmware images presented for downgrade.	Firmware Downgrade Package Restrictions
Updated web browser support.	Latest list of web browsers supported by Oracle ILOM.	Supported Web Browsers for Oracle ILOM
Oracle ILOM HTTP and HTTPS CLI targets replaced.	The Oracle ILOM Web Server CLI namespaces for HTTP and HTTPS (`sp/services/http` and `sp/services/https`) were replaced by the single namespace web (`sp/services/web`).	Modifying Default Management Access Configuration Properties Table: Web Server Configuration Properties
Platform support change for SPARC host state capture mode.	Some SPARC platforms do not support the use of the host state capture mode property.	Setting SPARC Host State Capture
SNMP v2c support removed.	Configuration properties for SNMP v2c have been removed.	SNMP Overview

Important Operating Notices as of Firmware Release 5.0.0

Deprecation Notice for IPMI 2.0 Management Service

Present Behavior: IPMI 2.0 Management Sessions - Enabled (default setting)

Future Behavior: The following IPMI Management Service changes will occur after Oracle ILOM firmware 4.0.2:

First IPMI Service Support Change — The default configuration property for IPMI 2.0 Sessions changed from Enabled to Disabled as of Oracle ILOM 5.0.0. Clients relying on Oracle ILOM IPMI 2.0 session support by default will no longer be able to communicate with Oracle ILOM. To enable IPMI communication with Oracle ILOM, perform one of the following:
- Use the Oracle IPMI TLS service and interface. For more information, see IPMI TLS Service and Interface in Oracle ILOM Protocol Management Reference SNMP and IPMI Firmware Release 4.0.x
  
  - or -
- Manually enable the configuration property for IPMI 2.0 Session. For details, see IPMI Service Configuration Properties in Oracle ILOM Administrator’s Guide for Configuration and Maintenance Firmware Release 4.0.x.
Second IPMI Service Support Change — Removal of IPMI 2.0 client support. IPMI 2.0 clients will no longer be able to communicate with Oracle ILOM. Clients relying on IPMI communication will need to use the IPMI TLS service and interface. For more information, see IPMI TLS Service and Interface in Oracle ILOM Protocol Management Reference SNMP and IPMI Firmware Release 4.0.x

For future updates about IPMI Management Service support in Oracle ILOM, refer to the latest firmware release information published in this guide.

Removal of SNMP v2c Configuration Properties

As of Oracle ILOM firmware version 5.0.0, the following SNMP management access properties are no longer supported and were removed from all Oracle ILOM user interfaces.

V2c
Communities

Note that Oracle ILOM will continue to support configuration properties for SNMP v3 management access, as well as configuration properties for SNMP v2c and v3 trap alert notifications.

Removal of TLS v1.1 Configuration Property

As of Oracle ILOM firmware version 5.0.0, the configuration property for TLSv1.1 is no longer supported and was removed from all Oracle ILOM user interfaces The configuration property for TLSv1.2 is enabled by default.

Updated Web Browser Support

Micorosoft Internet Explorer (IE) support is replaced by Microsoft Edge.

Microsoft has deprecated IE 11 in Windows 10 and recommends using Edge as the default browser.

For additional information, see the following:

Supported Web Browsers for Oracle ILOM in Oracle ILOM Administrator’s Guide for Configuration and Maintenance Firmware Release 5.0.x
Oracle Software Web Browser Support Policy