HP Integrated Lights-Out - Manual (Page 147)

Directory services 147
Management snap-in installer
The management snap-in installer installs the snap-ins required to manage iLO 2 objects in a Microsoft®
Active Directory Users and Computers directory or Novell ConsoleOne directory.
iLO 2 snap-ins are used to perform the following tasks in creating an iLO 2 directory:
• Creating and managing the iLO 2 and role objects (policy objects will be supported at a later date)
• Making the associations between iLO 2 objects and the role (or policy) objects
Directory services for Active Directory
The following sections provide installation prerequisites, preparation, and a working example of Directory
Services for Active Directory. HP provides a utility to automate much of the directory setup process. You
can download the HP Directories Support for Management Processors on the HP website
( http://h18004.www1.hp.com/support/files/lights-out/us/index.html ).
Active Directory installation prerequisites
• The Active Directory must have a digital certificate installed to allow iLO 2 to connect securely over
the network.
• The Active Directory must have the schema extended to describe Lights-Out object classes and
properties.
• The firmware version must be iLO v1.40 or later, or iLO v1.00 or later.
• iLO 2 advanced features must be licensed.
You can evaluate iLO Advanced with an evaluation license key that you can download from the
HP website (
http://h10018.www1.hp.com/wwsolutions/ilo/iloeval.html ).
Directory Services for iLO 2 uses LDAP over SSL to communicate with the directory servers. Before
installing snap-ins and schema for Active Directory, read and have available the following
documentation:
IMPORTANT: Installing Directory Services for iLO 2 requires extending the Active Directory
schema. Extending the schema must be completed by an Active Directory Schema
Administrator.
• Extending the Schema in the Microsoft® Windows® 2000 Server Resource Kit, available on the
Microsoft® website (
http://msdn.microsoft.com ).
• Installing Active Directory in the Microsoft® Windows® 2000 Server Resource Kit
• Microsoft® Knowledge Base Articles
These articles are accessed using the Knowledge Base Article ID Number Search option on the
Microsoft® website (
http://support.microsoft.com/ ).
o 216999 Installing the Remote Server Administration Tools in Windows® 2000
o 314978 Using the Adminpak.msi to Install a Server Administration Tool in Windows® 2000
o 247078 Enabling SSL Communication over LDAP for Windows® 2000 Domain Controllers
o 321051 Enabling LDAP over SSL with a Third-Party Certificate Authority
o 299687 MS01-036: Function Exposed By Using LDAP over SSL Could Enable Passwords to Be
Changed