HP Integrated Lights-Out 4 - Manual (Page 62)

•
For information about using RIBCL scripts to configure iLO RBSU or the iLO 4 Configuration
Utility, see the HP iLO 4 Scripting and Command Line Guide.
•
For information about using the iLO Security Override Switch to access iLO RBSU or the iLO
4 Configuration Utility, see
“iLO Security Override Switch administration” (page 62) .
iLO RBSU and the iLO 4 Configuration Utility have the following security levels:
•
Login Not Required (default)
Anyone who has access to the host during POST can enter iLO RBSU or the iLO 4 Configuration
Utility to view and modify configuration settings. This is an acceptable setting if host access
is controlled. If host access is not controlled, any user can make changes by using the active
configuration menus.
•
Login Required (more secure)
If iLO RBSU or iLO 4 Configuration Utility login is required, the active configuration menus
are controlled by the authenticated user access rights.
•
Disabled (most secure)
If iLO RBSU or the iLO 4 Configuration Utility is disabled, user access is prohibited. This
prevents modification by using the iLO RBSU or the iLO 4 Configuration Utility .
To change the login requirement:
•
Use the iLO web interface to edit the Require Login for iLO RBSU or Require Login for iLO 4
Configuration Utility setting. For instructions, see
“Configuring access options” (page 57) .
•
Use the iLO RBSU or the iLO 4 Configuration Utility to edit the Require iLO 4 RBSU Login or
Require Login for iLO 4 Configuration Utility setting. For instructions, see
“Configuring iLO by
using the ROM-based utilities” (page 132) .
To enable or disable access to iLO RBSU or the iLO 4 Configuration Utility:
•
Use the iLO web interface to edit the iLO ROM-Based Setup Utility or iLO 4 Configuration
Utility setting. For instructions, see
“Configuring access options” (page 57) .
•
Use the iLO RBSU or the iLO 4 Configuration Utility to edit the iLO 4 ROM-Based Setup Utility
or iLO 4 Configuration Utility setting. For instructions, see
“Configuring iLO by using the
ROM-based utilities” (page 132) .
iLO Security Override Switch administration
The iLO Security Override Switch grants the administrator full access to the iLO processor. This
access might be necessary for any of the following conditions:
•
iLO has been disabled and must be re-enabled.
•
All user accounts that have the Administer User Accounts privilege are locked out.
•
An invalid configuration prevents iLO from being displayed on the network, and iLO RBSU
or the iLO 4 Configuration Utility is disabled.
•
The boot block must be flashed.
•
The iLO NIC is turned off, and running iLO RBSU or the iLO 4 Configuration Utility to turn it
back on is not possible or convenient.
•
Only one user name is configured, and the password is forgotten.
Ramifications of setting the iLO Security Override Switch include the following:
•
All security authorization verifications are disabled when the switch is set.
•
iLO RBSU or the iLO 4 Configuration Utility runs if the host server is reset.
•
iLO is not disabled and might be displayed on the network as configured.
62 Configuring iLO