FILE NAME:    iLO5_130.bin
TITLE:        iLO 5 firmware v1.30

LANGUAGE:  English

DIVISIONS:  Systems

PRODUCTS AFFECTED:

  HPE ProLiant ML30 Gen10 Server  
  HPE ProLiant ML110 Gen10 Server
  HPE ProLiant ML150 Gen10 Server
  HPE ProLiant ML350 Gen10 Server 
  HPE ProLiant BL460c Gen10 Server
  HPE ProLiant DL20 Gen10 Server
  HPE ProLiant DL120 Gen10 Server
  HPE ProLiant DL160 Gen10 Server
  HPE ProLiant DL180 Gen10 Server
  HPE ProLiant DL360 Gen10 Server
  HPE ProLiant DL380 Gen10 Server
  HPE ProLiant DL385 Gen10 Server
  HPE ProLiant DL560 Gen10 Server
  HPE ProLiant DL580 Gen10 Server
  HPE ProLiant XL170r Gen10 Server 
  HPE ProLiant XL190r Gen10 Server
  HPE ProLiant XL230k Gen10 Server
  HPE ProLiant XL270d Gen10 Server
  HPE ProLiant XL420 Gen10 Server
  HPE ProLiant XL450 Gen10 Server
  HPE Synergy 480 Gen10 Compute Module
  HPE Synergy 660 Gen10 Compute Module

OPERATING SYSTEMS:
  Microsoft Windows: Microsoft Windows Server 2012 
  Microsoft Windows: Microsoft Windows Server 2012 Essentials 
  Microsoft Windows Server 2012 R2
  Microsoft Windows Server 2016
  Red Hat Enterprise Linux 6.9
  Red Hat Enterprise Linux 7.3 errata kernel-3.10.0-514.6.1.el7
  Red Hat Enterprise Linux 7.4
  SUSE Linux Enterprise Server 11 SP4 Installation Kit  
  SUSE Linux Enterprise Server 12 SP2
  SUSE Linux Enterprise Server 12 SP3

PREREQUISITE:  N/A

BUILD DATE:  	 May 21, 2018
EFFECTIVE DATE:  May 21, 2018

DESCRIPTION:   Firmware for the Hewlett Packard Enterprise
               Integrated Lights-Out 5 Management Controller
			   
LAST RECOMMENDED OR CRITICAL VERSION: 1.20

PREVIOUS VERSION: 1.20

UPGRADE REQUIREMENTS: CRITICAL

  Install this update to take advantage of significant improvements to the write algorithm for the embedded 
  4 GB nonvolatile flash memory (also known as the NAND). These improvements increase the NAND
  lifespan.

FIRMWARE DEPENDENCY:

  Hewlett Packard Enterprise recommends the following or greater versions of iLO utilities
  for best performance:
  
 - RESTful Interface Tool (iLOREST) 2.3
 - HPQLOCFG v5.2
 - Lights-Out XML Scripting Sample bundle 5.10.0
 - HPONCFG Windows 5.2.0
 - HPONCFG Linux 5.3.0
 - LOCFG v5.10.0 
 - HPLOMIG 5.2.0

  NOTE: Updated utilities and system libraries are required to support the iLO 
  HighSecurity, FIPS, and CNSA security states. The HPONCFG Windows utility 
  does not currently support the CNSA security state.

KNOWN ISSUES:

 - When you configure iLO to use the HighSecurity security state, you must initiate firmware updates from the iLO web interface or through the iLO RESTful API until smart components that support authentication are available.
 - To connect to the iLO Service Port with a USB Ethernet adapter, you must use a USB 2.0 device that is based on the AX88772 series chipset from ASIX Electronics Corporation. Hewlett Packard Enterprise recommends the HPE USB to Ethernet Adapter (part number Q7Y55A).
 - The server must be powered off when you update the Server Platform Services (SPS) Firmware or the Innovation Engine (IE) Firmware. After powering off the server, wait 30 seconds before initiating an SPS or IE firmware update.
 - With the release of iLO 5, some features in the iLO web interface are not supported by RIBCL or the CLI. Instead, HPE recommends the use of the iLO RESTful API, particularly for setting the iLO security state and configuring extended user privileges. The iLO RESTful API is the preferred programmatic interface for Gen10 and later systems. The preferred CLI and scripting tool is the RESTful Interface Tool (iLOREST).
 - Starting with iLO 5 1.20, SNMP settings are not backward compatible with older iLO firmware versions.     
    - The SNMP settings are discarded when you downgrade the firmware to an earlier version.
 - When you start an iLO web interface session and launch the HTML5 Integrated Remote Console (IRC), these interfaces are considered to be a single iLO session. This behavior is different from the .NET IRC and the Java IRC, which are separate sessions from the iLO web interface.

   The Idle Connection Timeout specifies how long a session can be inactive before it ends automatically. If you start a Virtual Media operation (such as an OS installation), and the Idle Connection Timeout is reached, the HTML5 IRC and the iLO web interface close automatically, and the Virtual Media operation is interrupted.

   To avoid this issue, you can set the Idle Connection Timeout to a longer value, use a different Remote Console, or make sure that the session is not idle during the Virtual Media operation.


FIXES:

The following issues are resolved in this version:

 - Compute modules do not power on after restoring power to Frame.
 - When you use iLO Virtual Media to install an operating system, installation might fail when iLO is configured to use the Shared Network Port.
 - In rare cases, a server runs out of available SSH sessions because the sessions are not reclaimed when a client disconnects.
 - iLO 5 unexpectedly restored itself to the factory default settings when a user did not initiate the process.
 - When Auto Power-On is set to Always Power On or Restore Last Power State, the server might not power on after a cold reset.
 - iLO cannot display the HP Ethernet 1Gb 4-port 331i Adapter MAC address.
 - NVMe drive model numbers are incorrect or inconsistent.
 - Clearing the oemHPE_usercntxt## from the command line clears the value, even though error messages might be displayed.
 - Fixed Single Sign-On when in CNSA mode.
 - Added support for RSA-PSS certificate signatures.

 
SECURITY FIXES: 

  For the latest security bulletins and vulnerabilities, please visit: 
  https://support.hpe.com/hpesc/public/home  

Security best practices:

  Please refer to the HPE Integrated Lights-Out 5 Security Technology Brief for the latest on security best practices at:
  http://www.hpe.com/support/ilo5-security-enn

ENHANCEMENTS:

This version adds support for the following features and enhancements:

 - Added support for new platforms: 
   - HPE ProLiant DL20 Gen10 Server
   - HPE ProLiant ML10 Gen10 Server  
 - Improved HTML5 IRC performance, including:
   - Added virtual keys to improve the ability to send keyboard actions to the server.
   - Added the ability to configure the keyboard layout in the HTML5 IRC
   - Added Virtual Media support for local ISO and IMG files.
 - Firmware and software update enhancements:
   - iLO users can now view, create, and delete maintenance windows.
   - A new check box allows users to clear the installation queue when initiating an install set.
   - Updated the iLO RESTful API and iLO web interface to report when a reboot is required after an installation task completes.
 - Each time iLO starts, it backs up the iLO configuration to the nonvolatile flash memory (NAND). If the SRAM is erased, the configuration is automatically restored.
 - Added iLO web interface support for Density Optimized Drive Zoning features on supported HPE Apollo products.
 - AlertMail now supports SSL (TLS) for secure email.
 - AlertMail now supports external SMTP mail servers.
 - Added an SNMP trap for when all host NICs are down.
 - Updated to OpenSSL-1.0.2u-fips-2.0.16.
 - Added the list of open source licenses to the login page.
 - Added an SNMP trap for when iLO is reset by IPMI watchdog.
 - Added Intelligent System Tuning features to the iLO web interface. From the iLO web interface, you can view the configured settings, configure Jitter Smoothing, and launch Intelligent Provisioning to configure Workload Matching and Core Boosting.
 - Improved Active Health System logging efficiency to prolong the NAND lifespan.
 - Added iLO health status to the Overview page. If the status is Degraded, this value is also displayed on the Login page.
 - Re-signed the Java IRC to extend the certificate expiration date.
 - Re-signed the .NET IRC to extend the certificate expiration date.
   With this enhancement, the .NET IRC requires version 4.5.1 or later of the .NET Framework.
 - Added the ability to remove an SSL certificate and regenerate the iLO self-signed certificate.
   Hewlett Packard Enterprise recommends that you install a CA signed certificate.


SUPPORT:

1.  iLO 5 firmware updates and utilities can be found here:

      http://www.hpe.com/support/iLO5

2. IPv6 network communications
     Supported Networking Features
		IPv6 Over Shared Network Port Connections
                IPv6 Static Address Assignment
                IPv6 SLAAC Address Assignment
                IPv6 Static Route Assignment
                IPv6 Static Default Gateway Entry
                DHCPv6 Stateful Address Assignment
                DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
                Integrated Remote Console
                OA Single Sign-On
                HPE Single Sign-On
                Web Server
                SSH Server
                SNTP Client
                DDNS Client
                RIBCL over IPv6
                SNMP
                AlertMail
                Remote Syslog
                WinDBG Support
                HPQLOCFG/HPLOMIG over an IPv6 connection
                URL-based Virtual Media
                CLI/RIBCL Key Import over IPv6
                Authentication using LDAP and Kerberos over IPv6
                iLO Federation
                IPMI
     Networking Features not supported by IPv6 in this release 
                NETBIOS-WINS
                Enterprise Secure Key Manager (ESKM) Support
                Embedded Remote Support (ERS)

3. You might encounter a "data inconsistency error" when you use iLO Federation
   Management. This error occurs when an iLO on your network is not 
   responding correctly. Use the data on the Multi-System map page to 
   troubleshoot data inconsistency errors.

DOCUMENTATION -

1.  iLO 5 documentation is available at http://www.hpe.com/support/ilo-docs.

2.  Check the online help for information about how to use iLO. To access the 
    online help, Click the question mark icon in the upper right corner of 
    any iLO web interface page.

HOW TO USE -

1.  Download the iLO 5 Online Firmware Update Component for your
    operating system.

2.  Install the firmware using one of these options:

    a) Run the component on the host to be updated.
       The component will update the iLO 5 firmware and reset the iLO processor.

    b) Extract the firmware from the component. This will place the firmware
       image file, iLO5_yyy.bin (where yyy represents the firmware version), in
       the target directory.  You now have these options:

       i) Login to iLO, navigate to the Update Firmware page, and update the
          firmware from there.

       ii) Use the Lights-Out Configuration Utility (HPQLOCFG) and RIBCL/XML
           scripts to update iLO 5 across the network.

       iii) Use the Online Lights-Out Configuration utility (HPONCFG) and
            RIBCL/XML scripts to update iLO 5 from the supported host OS.

3.  iLO automatically resets after a successful update.
    There is no need to manually reset iLO.

Copyright 2002,2018 Hewlett Packard Enterprise Development, LP
