- ENHANCEMENTS - ENHANCEMENTS - ENHANCEMENTS - ENHANCEMENTS - Initial iLO 5 release with the following features: * The iLO Service Port on the front of the server is new on Gen10 ProLiant servers and Synergy compute modules. Use this feature to connect a client directly to the server to access the iLO web interface, remote console, CLI, or scripts. You can also connect a USB key and download the Active Health System log to a supported USB flash drive. * Improved HPE Agentless Management support for out of the box SNMP-based server management that does not require OS-based agents. OS-based agents are not supported on Gen10 servers. * Improved secure firmware update and recovery. * Secure Start ensures firmware integrity for essential system firmware. * Runtime firmware verification scans essential system firmware for further system integrity. * Automatic secure recovery of essential system firmware. * Common Access Card (CAC)Smartcard authentication. * New user account privilege levels. Specific privileges for BIOS, Storage, and Network configuration. * Virtual Media performance is typically at least twice as fast as it was with iLO 4. * New iLO web interface design. * Expanded Redfish support. - This firmware release is intended for FIPS 140-2 (level 1) validation and Common Criterial (EAL 2+) certification. For the status of both, go to http://csrc.nist.gov/groups/STM/cmvp/validation.html for FIPS and http://www.commoncriteriaportal.org/ for Common Criteria. Search for "iLO 5". * Updated cryptographic stack as required by FIPS inspection and validation process. - Users should update to this firmware version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version. - iLO backup and restore--This feature allows you to restore the iLO configuration on a system with the same hardware configuration as the system that was backed up. For example, you could use this feature if the system board is replaced, an accidental or incorrect configuration change occurred, or iLO was set to the factory default settings. This feature is not meant to duplicate a configuration and apply it to a different iLO system. * AMD platform support * Support for diffie-hellman-group-exchange-sha256. * Support for multiple destination AlertMail email addresses. Enter the addresses separated by a semicolon. * iLO RESTful API features: * Aux Power Reset * Jitter Control features to get and set Jitter Control Mode and Frequency * New iLO RESTful API properties to bridge the gap between RIBCL and iLO RESTful API features: * High Efficiency Mode * Encryption-related properties and Cache Module Serial Number * Login Security Banner * Current Power on Time (provides the time since the system was last powered on). * Persistent Mouse/Keyboard Enabled * New iLO RESTful API events for NVDIMM Init Error and Runtime Firmware Authentication Error. - No traps from the System Management Assistant are received when SNMP is disabled in the iLO web interface. * The power profile cannot be changed through the iLO web interface. * Network transmission graph data is not populated in Active Health System logs. * The NVDIMM firmware version is not displayed on the iLO web interface Installed Firmware page. * The iLO web interface intermittently displays incorrect memory status after a system reset. * The iLO RESTful API does not provide a method to get current cipher information. * The Server Power page stalls when loading the server power information. * Nothing happens when you click the Import button on the HPE SSO page. * Secure boot cannot be configured through the iLO RESTful API, even if the pending configuration is in UEFI mode. * The maximum available power is displayed incorrectly. * If the IML contains a maintenance note, the first attempt to clear the log fails. * Certificate-based authentication returns a session URL with inconsistent case. * Onetimeboot and Continuousboot do not take effect in iLOrest. * Virtual Media status is not displayed in the Java IRC. * The local client keyboard might get disabled when the Java IRC is in use. * An iLO Federation authentication error might occur when group names with unsupported characters are used in URLs without correct encoding. * An issue occurs when copying or restoring certificate mapping entries using fingerprints. * An iLO web interface error occurs after an installed certificate was deleted by using the iLO RESTful API. * An Internal Error occurs when HPONCFG for Linux is used with a server that uses the SuiteB security state. * SNMPv3 user details cannot be modified through RIBCL. * A false positive "Insecure Cache Management Policy" issue is reported by some security scanners. - This version adds support for the following features and enhancements: * iLO Amplifier Pack Server System Restore \- Use the Send Recovery Event button on the Firmware Verification page to send a recovery event to iLO Amplifier Pack. If iLO Amplifier Pack is configured to listen for system recovery events, this event causes iLO Amplifier Pack to initiate the system recovery process. The system recovery process includes the installation of the System Recovery Set followed by reimaging the server operating system. * RESTful API updates: * Added certificate authentication and validation for Virtual Media. * Added certificate authentication and validation for RESTful API events that support the iLO Amplifier Pack Server System Restore feature. - The following issues are resolved in this version: SSH does not work correctly when iLO is configured to use the SuiteB security state. Importing a certificate does not work correctly after the generation of a SuiteB-compliant CSR. - This version adds support for the following features and enhancements: * HTML5 Remote Console * Shared Network Port IPv6 support * Shared Network Port iLO Federation support * Ability to associate an SNMP alert destination with an SNMPv1 or SNMPv3 user * Enhanced firmware and software update interface: * New Add to Queue pane * Remove All option for install sets, queued components, or components in the iLO Repository * Recovery Set update option during firmware update, iLO Repository upload, or install queue update * CAC Smartcard authentication support for the Online Certificate Status Protocol (OCSP) * iLO RESTful API updates: * NVMe drive properties * Remote Support configuration * Device Inventory * Support for eight SNMP trap destinations * SNMPv3 Inform notification support * Support for RSA-PSS certificate signatures * RSA cipher support in CNSA mode * Ability to disable device discovery on Device Inventory page * New Service Account option to support user accounts that are used as service accounts for supported applications - The following issues are resolved in this version: * NVMe drive details are not displayed in the iLO web interface for HPE ProLiant XL190r Gen10 servers. * The system BIOS version is missing in AlertMail messages. * The IPMI Get Chassis Capabilities and Get Chassis Status commands do not reflect the Chassis Intrusion state. * Virtual Media devices are inaccessible when two virtual devices are mounted simultaneously. * Patched configuration file system. * The IPMI pre-watchdog-timeout interrupt does not occur when no watchdog action is selected. * Intermittent loss of network interface card (NIC) and drive detection (P408e-m controller) by BIOS on system boot up of HPE ProLiant BL460c servers. - Install this update to take advantage of significant improvements to the write algorithm for the embedded 4 GB non-volatile flash memory (also known as the NAND). These improvements increase the NAND lifespan. - This version adds support for the following features and enhancements: * Added support for new platforms: * HPE ProLiant DL20 Gen10 Server * HPE ProLiant ML10 Gen10 Server * Improved HTML5 IRC performance, including: * Added virtual keys to improve the ability to send keyboard actions to the server. * Added the ability to configure the keyboard layout in the HTML5 IRC * Added Virtual Media support for local ISO and IMG files. * Firmware and software update enhancements: * iLO users can now view, create, and delete maintenance windows. * A new check box allows users to clear the installation queue when initiating an install set. * Updated the iLO RESTful API and iLO web interface to report when a reboot is required after an installation task completes. * Each time iLO starts, it backs up the iLO configuration to the nonvolatile flash memory (NAND). If the SRAM is erased, the configuration is automatically restored. * Added iLO web interface support for Density Optimized Drive Zoning features on supported HPE Apollo products. * AlertMail now supports SSL (TLS) for secure email. * AlertMail now supports external SMTP mail servers. * Added an SNMP trap for when all host NICs are down. * Updated to OpenSSL-1.0.2u-fips-2.0.16. * Added the list of open source licenses to the login page. * Added an SNMP trap for when iLO is reset by IPMI watchdog. * Added Intelligent System Tuning features to the iLO web interface. From the iLO web interface, you can view the configured settings, configure Jitter Smoothing, and launch Intelligent Provisioning to configure Workload Matching and Core Boosting. * Improved Active Health System logging efficiency to prolong the NAND lifespan. * Added iLO health status to the Overview page. If the status is Degraded, this value is also displayed on the Login page. * Re-signed the Java IRC to extend the certificate expiration date. * Re-signed the .NET IRC to extend the certificate expiration date. * With this enhancement, the .NET IRC requires version 4.5.1 or later of the .NET Framework. * Added the ability to remove an SSL certificate and regenerate the iLO self-signed certificate. * Hewlett Packard Enterprise recommends that you install a CA signed certificate. - The following issues are resolved in this version: * Compute modules do not power on after restoring power to Frame. * When you use iLO Virtual Media to install an operating system, installation might fail when iLO is configured to use the Shared Network Port. * In rare cases, a server runs out of available SSH sessions because the sessions are not reclaimed when a client disconnects. * iLO 5 unexpectedly restored itself to the factory default settings when a user did not initiate the process. * When Auto Power-On is set to Always Power On or Restore Last Power State, the server might not power on after a cold reset. * iLO cannot display the HP Ethernet 1Gb 4-port 331i Adapter MAC address. * NVMe drive model numbers are incorrect or inconsistent. * Clearing the oemHPE_usercntxt## from the command line clears the value, even though error messages might be displayed. * Fixed Single Sign-On when in CNSA mode. * Added support for RSA-PSS certificate signatures. For the latest security bulletins and vulnerabilities, please visit: https://support.hpe.com/hpesc/public/home Please refer to the HPE Integrated Lights-Out 5 Security Technology Brief for the latest on security best practices at: http://www.hpe.com/support/ilo5-security-en - This version adds support for the following features and enhancements: * VGA Port Detect Override--Controls how devices connected to the system video port are detected. Dynamic detection protects the system from abnormal port voltages. This setting is enabled by default, and can be used for troubleshooting cases when there is no video output to displays, KVM concentrators, or active dongles. * DHCP Client ID override via iLO RESTful API. - The following issues are resolved in this version: * Fix for improper Smart Array error reported: Cache module board backup power failed. * Fixed where iLO may become unresponsive after ejecting virtual media. SECURITY FIXES: For the latest security bulletins and vulnerabilities, please visit: <https://support.hpe.com/hpesc/public/home> * Security Bulletin HPESBHF03866 Security best practices: Please refer to the HPE Integrated Lights-Out 5 Security Technology Brief for the latest on security best practices at: <http://www.hpe.com/support/ilo5-security-enn> - This version adds support for the following features and enhancements: \- Ability to backup and to restore a copy of the iLO configuration settings to/from iLO non-volatile memory via REST calls. - The following issues are resolved in this version: \- Fix for "VGA Port Detect Override" to show video in all cases where monitors are installed. \- Fix for intermittent file upload failures. \- Fix for issues with Virtual Media in FIPS mode. \- Fix for issues with simultaneous use of virtual DVD and floppy in FIPS mode. \- Fix for USB floppy when used with ESXi 7 installation driver. \- Fixed potential problem where iLO could continue to interact with system memory after it has been released by hpilo module. \- Fix for erroneous reporting of disk drive overheating. \- Fix for intermittent iLO communication error on HPE Apollo 2000. \- Fix for potential RESTful API errors at boot with multiple NICs installed. \- Fix to add iLO 5 NIC information into anonymous XML response. \- Fixed false errors showing link lost on NICs when link never seen in IPMI. SECURITY FIXES: \- HPESBHF03894 - HPE iLO5 Local Bypass of Security Restrictions in Firmware Update - Added Downgrade Policy setting to Security->Access Settings page. - Fixed issue where pressing UID button on Gen10 server can occasionally cause server to power off - Ability to edit Maintenance Windows in Firmware & OS Software section * Added Password Complexity feature to Security > Access Settings * Enable/disable for overlay video showing Server Health Summary * Downgrade Policy - Specifies how iLO handles requests to downgrade any of the firmware types that you can update through iLO. * Virtual NIC functionality (disabled by default) * Enabled One-button Secure Erase via Intelligent Provisioning * LDAP/Directory settings configurable via Redfish * Security Dashboard - displays the status of important security features, the Overall Security Status for the system, and the current configuration for the Security State and Server Configuration Lock features. * Support for Gemalto SafeNet and SafeNet AT key managers * InfoSight Optimized AHS Download * Show NVMe wear level * Workload performance advisor: provides server tuning recommendations to improve server performance - The following issues are resolved in this version: * User interface fixes and improvements * Fixed an issue where power supply status changes may be delayed * Device Inventory could display a parse error under Internet Explorer 11 when certain PCI Cards are installed SECURITY FIXES: * HPESBHF03907 For the latest security bulletins and vulnerabilities, please visit: <https://support.hpe.com/hpesc/public/home> Security best practices: Please refer to the HPE Integrated Lights-Out 5 Security Technology Brief for the latest on security best practices at: [http://www.hpe.com/support/ilo5-security-en](http://www.hpe.com/support/ilo5 -security-enn) - Ability to edit Maintenance Windows in Firmware & OS Software section * Added Password Complexity feature to Security > Access Settings * Enable/disable for overlay video showing Server Health Summary * Downgrade Policy - Specifies how iLO handles requests to downgrade any of the firmware types that you can update through iLO. * Virtual NIC functionality (disabled by default) * Enabled One-button Secure Erase via Intelligent Provisioning * LDAP/Directory settings configurable via Redfish * Security Dashboard - displays the status of important security features, the Overall Security Status for the system, and the current configuration for the Security State and Server Configuration Lock features. * Support for Gemalto SafeNet and SafeNet AT key managers * InfoSight Optimized AHS Download * Show NVMe wear level * Workload performance advisor: provides server tuning recommendations to improve server performance - The following issues are resolved in this version: * User interface fixes and improvements. * The text "R&D Server" is incorrectly displayed in the iLO web interface navigation pane. * Fixed an issue where power supply status changes may be delayed. * Device Inventory could display a parse error under Internet Explorer 11 when certain PCI Cards are installed. * Improved shared network port out-of-band LOM resuscitation to reduce the scope and the frequency of system power-on/power-off during systems shutdown/reboot. * iLO communication issues in certain configurations where a server is set to Auto-Power-On after an AC power cycle. SECURITY FIXES: * HPESBHF03907 For the latest security bulletins and vulnerabilities, please visit: <https://support.hpe.com/hpesc/public/home> Security best practices: Please refer to the HPE Integrated Lights-Out 5 Security Technology Brief for the latest on security best practices at: [http://www.hpe.com/support/ilo5-security-en](http://www.hpe.com/support/ilo5 -security-enn) - This version adds support for the following features and enhancements: \- Added VLAN tagging support on iLO Dedicated NIC for non-blades. \- Modified the iLO auto-generated SNMP EngineID to not change upon iLO resets. \- Modified Embedded Remote Support (eRS) service events to properly report Windows 2019. \- Reduced the number of Redfish resource change events sent. Removed watching of fields that change frequently. \- BIOS Admin password will NOT cause iLO to act as if Require Host Authentication is Enabled - The following issues are resolved in this version: \- Fix for potential firmware use of system memory after free, which could lead to an OS exception or memory corruption under Linux or ESX when using hpilo driver. It was not an issue for Windows. \- Fix so iLO 5 can connect to switch when both are set to 100 Full Duplex. \- Fixed REST call so that "ilorest -d serverlogs --selectlog=IML --clearlog rc 255" does not fail when it should succeed. \- Fixed problem with erroneously logging an IML event for "exceeding power capacity threshold" when it should not be logged. \- Modified time zone string for "Asia/Taipei" to "Beijing, Chongqing, Hong Kong, Urumqi, Taipei, Perth" \- Only send Remote Support type 1000 events for Critical IML events when they should be sent SECURITY FIXES: \- HPESBHF03917 For the latest security bulletins and vulnerabilities addressed in this version, please visit: <https://support.hpe.com/hpesc/public/home> - \- Fixed problem introduced in iLO 5 v1.43 which could cause an HTTP connection to be refused under high activity of REST calls. - None - Fixed potential problem of Gen10 Synergy server NIC port being down after complete Synergy frame power cycle. - Implemented the set server info command for all the DCi supporting options in previous versions of iLO 5 which may reset NIC settings during iLO 5 update. - This version adds support for the following features and enhancements: * Added a security log that lists security events recorded by the iLO firmware. * Enhanced Secure Start verification of CPLD on Gen10 Plus servers. * Updated menu path and feature names for the Performance Management features. The features that were accessed through the Intelligent System Tuning menu can now be accessed through the Performance menu. * Embedded remote support over IPv6. * New alert for recovery events. * SUM/SUT support on servers using the High Security, FIPS, or CNSA security states. * Support for staging firmware to update direct-attached hard drives through the UEFI System Utilities. * Ability to import and export drive bay mapping information. * Daily firmware flash limit, to protect iLO, ROM, and CPLD from repeated flashing attacks. * Performance data logging in a new Active Health System record. * Increased the certificate size limit from 4096 to 8096. * When iLO is set to the factory default settings, Virtual NIC is enabled by default. * The following System Diagnostics features are supported on Gen10 Plus servers: * Booting to safe mode--Allows you to boot the server with a safe minimum configuration. * Booting to intelligent diagnostics mode--Allows the system to automatically diagnose a boot failure during POST. * Restoring the default manufacturing settings--Resets all BIOS configuration settings to their default manufacturing values. This process deletes all UEFI nonvolatile variables, such as boot configuration, Secure Boot security keys (if Secure Boot is enabled), and configured date and time settings. * Restoring the default system settings--Resets all BIOS configuration settings to their default values and restarts the server. This option preserves some UEFI settings. * Modified text of iLO time zone selections to match system ROM time zone selections. For backward compatibility, either previous time zone selection text or the new text can be used in APIs to set the time zone. - The following issues are resolved in this version: * The iLO clock incorrectly changes when iLO is reset due to a configuration change, firmware update, or a cause other than system power loss. * System GPUs might be listed without GPU version information. * Incorrect power consumption information is displayed in RIBCL output and the Active Health System Log. * If the domain name system is unavailable, an HPE ProLiant Gen10 Server might stop responding for up to three minutes during startup. * Fixed an issue where the iLO 5 webserver may becoming unresponsive when applying OV profile with certain models of NVME drives present. Security Fixes: * For information about the latest security bulletins and vulnerabilities addressed in this version, see the following website: <https://support.hpe.com/hpesc/public/home>. Security best practices: * For the latest information about security best practices, see the HPE Integrated Lights-Out Security Technology Brief at the following website: <http://www.hpe.com/support/ilo-docs>. - NVMe drives and open drive support, this includes additional robustness for device discovery and management. This helps to correct some iLO related timeout issues. - The Integrated Remote Console requires code to accommodate low power mode on AMD based system to work with the ROM on EU Lot 9 requirements * Incorrect IML messages occur when SAS/SATA drives are installed. * Spurious drive hot plug events occur when the server goes through a warm reset * In some cases, iLO tries to use an invalid SMBIOS handle from the ROM - Support new Accelerators: * Xilinx Alveo U250 * Xilinx Alveo U50 * User can now define pre-caution threshold alert value for the inlet ambient sensor. - Fixed the issue where PMBUS power supply is being detected when a Flex Slot is installed. - Users can now restore the last power state after a power outage on Synergy compute modules. * Apollo servers now allow you to use the iLO RESTful API to enable or disable power regulation mode (Global settings). * Apollo servers now allow you to switch between power regulation modes (iLO Standard license). User Configurable Mode is available only with an iLO Advanced license. - Some of the fans in Apollo XL225n Gen10 Plus Servers show a speed greater than 100% in the iLO web interface. * The HPE Synergy 3820C 10/20Gb CNA loses flexed sub-ports after a cold boot or E-fuse reset. * Updated the thermal parameters for the Xilinx U50 GPU. * iLO is temporarily unresponsive or iLO resets on HPE Gen10 servers and HPE Synergy Gen10 compute modules running HPE Infosight. * When you query for Software Inventory details, the RESTful Interface Tool 3.0 (part of SUM 8.5.5) does not fetch the "Microchip-smartpqi" driver installed on ESXi7.0. - Enabled support for Pensando Distributed Services Platform DSC-25 10/25Gb 2-port SFP28 Card. * Enabled support for Pensando Distributed Services Platform for HPE iLO Sideband Management Adaptive LOM Module. * Added Redfish property for setting the Server to remain Power OFF after thermal shutdown (Critical Temperature threshold exceeded) * Allow Power Regulator Mode management in Apollo platforms without an iLO Advanced license. - HPE SimpliVity Accelerator disappear from the thermal sensor data after iLO firmware update. * Xilinx U50 cards getting over heat due to wrong thermal limits on iLO 5 v2.15 * Unable to set HPE m750 Blade Server's Asset Tag through Redfish method. * iLO authentication with CM2 credential through Redfish fails frequently with more number of nodes installed. * Insight Online shows CPU2 Status as UNKNOWN for HPE ProLiant DL360 Gen10 Servers, while iLO GUI shows CPU2 status as OK. - None - Potential Ripple20 vulnerabilities affecting the TCP/IP stack - None - The Direct attached NVMe drives may go missing in the iLO Web Page after random server power cycle. - MCTP now addresses the iLO false alarm "device/adapter not responsive" issue. * Shutdown by virtual button press is included in the iLO enhanced reset cause. * Support for initiating the One-button secure erase process from the iLO web interface Lifecycle Management - Decommission page. * User account roles provide predefined privilege sets or allow you to define a custom set. * New HTML5 remote console modes: Standalone mode and New Window mode. * Virtual power button to power NVMe drives on and off. You can access this feature from the Physical Drive Details pane on the Storage Information page. * Configuration of Minimum Fan speed using iLO interfaces. * Users can view and modify the System thermal configuration settings using iLO interfaces.. * PLDM firmware update support for NIC and storage option cards. * New REST alerts for Auto Heal and Safe Mode. * Enabled the iLO webserver to identify the source of request as Host over Virtual NIC. * Read support for RDE-enabled devices. * Support for flashing Universal FWPKG 2.0 images. * Power reading support for Edgeline 8000 systems. * Drive Indicator LED - 'Lit' and 'Off' state support for U.2/UBM1/UBM3 with NVMe direct attached storage. * When iLO is set to the factory default settings, Virtual NIC is disabled by default. * User can now configure iLO to avoid access over an HTTP connection - Ripple20 vulnerabilities might affect the TCP/IP stack. * Synergy compute modules do not power up after One-button secure erase completes. * SPS firmware updates initiated through the iLO Firmware & OS Software pages might fail. * C-Class blades do not complete FRU discovery. * During central connect Remote Support registration, an error message is not displayed when a required field is blank. * The Virtual NIC feature intermittently fails to provide an IP address to a host with SUSE Linux Enterprise Server 15. * Zero Sign In login fails when Kerberos authentication is configured for a large number of groups. * When iLO is set to the factory default settings on a fully populated NVDIMM configuration, iLO may lose CHIF communication. * DCi compliant Network Adapters under un-managed network configuration, reset to defaults on cold boot. - Added HPE ProLiant m750 Server to the supported server list. - iLO 5 version 2.30(a) was released adding HPE ProLiant m750 server to the supported servers. The update does not affect the firmware functionality. If version 2.30 was previously deployed to target device, then it is not necessary to update to version 2.30(a) - Ability to read DIMM serial number using REST API * Enabled support for below GPUs: * NVIDIA A100 HGX x4 GPU Air Cooled Baseboard * NVIDIA A100 HGX x8 GPU Air FIO Baseboard * AMD Instinct MI100 PCIE Accelerator - iLO may fail to detect NVMe controllers during power cycle. * Firmware version information may not displayed when the server has more than 8 GPUs * iLO may reset after FWPKG/PLDM update and coldboot * IE and SPS Firmware updates may fail on Gen10 Plus servers * Remote Syslog is made to adhere to RFC 5424 for Unstructured data format * On VSP performing 'cat' or 'head' or 'tail' command on a file that contains some embedded NULL characters hangs the VSP or trims the file after the NULL character * Inaccurate Memory Sensor status reported in the vSphere web client for HPE ProLiant Gen10 and Gen10 Plus servers running VMware ESXi 6.5/6.7/7.0 (Refer to [Customer Advisory](https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-a00106468en_us)) - Added IPMI lan6 commands support * Added ability to view DIMM serial numbers through iLO GUI and redfish API * iLO Security logs are now listed in Operating System logs * Added ability to change serial Interface configuration using standard redfish schema * Added iLO hostname as part of redfish event header * Enhancement to support Power regulation on AMD servers * Power meter data shown in GUI and IPMI CLI has been extended for 1 week * Limiting fan speed decrease rate to reduce fan noise. Supported on DL380 Gen10 platform with System ROM U30 v2.40 (10/26/2020) or later * Filtering spurious temperature readings for thermal control. Supported on DL380 Gen10 platform with System ROM U30 v2.40 (10/26/2020) or later * Enhanced to avoid BMC reset during system POST * Option to delete LDAP CA certificate and import CA Certificate of public key larger than 4096 bits (8192 bits, 16352 bits) * Banner to be displayed at the SSH login * Support enabled for the below controllers on DL385 and DL325 Gen10Plus servers * HPE InfiniBand HDR/Ethernet 200Gb 2-port QSFP56 PCIe4 x16 MCX653106A-HDAT Adapter * HPE InfiniBand HDR/Ethernet 200Gb 1-port QSFP56 PCIe4 x16 OCP3 MCX653435A-HDAI Adapter * HPE InfiniBand HDR/Ethernet 200Gb 2-port QSFP56 PCIe4 x16 OCP3 MCX653436A-HDAI Adapter * Enabled support of DCi on Open Adapters * Enabled support for below GPUs: * Xilinx Alveo U50 Accelerator * Xilinx Alveo U250 Accelerator * Support enabled for updating the FPGA, CEC Firmware of NVIDIA A100 HGX x8 GPU Air FIO Baseboard through OOB (Out of Band) mechanism * Support enabled for disabling write protect for updating GPU, NVSwitch Firmware of NVIDIA A100 HGX x8 GPU Air Cooled Baseboard from host operating system * Support enabled for updating the RMI-Remote Management Interface Firmware of AMD Instinct MI100 PCIE Accelerator through OOB (Out of Band) mechanism - Error when a user with Read-only role tries to change the password of own account. * Resetting iLO to default security state i.e. 'Production' via hponcfg /reset command fails when iLO is in 'High Security' state and 'Require Host Authentication' (RHA) is disabled. * Fixed potential security vulnerability CVE-2020-27337 in network stack. Click [here](https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04070en_us) to know more about the Security Vulnerabilities - Added ability to view Chassis & Node power consumption via redfish API - Stop pushing AMD APML data to Chassis Controller, only provide data when Chassis Controller asks for it Force Chassis Controller to service iLO I2C request to clear the command queue to prevent false communication lock between iLO and Chassis Controller - Added support to import large sized LDAP CA certificate * Support enablement for latest Intel Persistence Memory * iLO GUI to display the Host Operating System Version * Display platform Resiliency and Serviceability (RAS) policy in iLO GUI * Added standard redfish schema support for Computer System - Reset, Graceful restart actions * Real CPU temperature is reported in addition to normalized temperature (this feature requires ROM 2.40 version) * Support for Active Health System logging by RDE ( Redfish Device Enablement ) enabled devices * Support alerting feature for RDE ( Redfish Device Enablement ) enabled devices * Ability to control LED for locating direct attached SATA drives * Ability to reset power for direct attached SATA drives * Added write protect setting feature for Liquid cooled Delta/Redstone GPU cards. - iLO 5 reporting incorrect Power Supply count with iLO 5 v2.10 * Continuous logging to IML of a CHIF Error running ESXi with iLO 5 v1.46 * Random messages "smad[]: No response from iLO for Hello" seen in certain Operating Systems * Incorrect MAC address shown in iLO for Synergy 4820C network adapter * InfiniBand card not syncing with Oneview in iLO 5 v2.30 * Copy/paste may not work for more than 255 characters to VSP terminal in Linux platforms * 547FLR / 1100Q NIC may reset to default mode after flashing from 1.48 to 2.xx - *Critical** : For Synergy servers. **Recommended** : For ProLiant, Apollo and Edgeline servers. - \- Support for 3rd Gen Intel Xeon Scalable Processors \- Security Hardening enhancements - \- None - Initial Release - \- iLO takes more time to update drive details under resource directory in redfish in certain situations \- Added A100 40GB/80GB PCIe IDs to GPU support list \- For m750 cartridge installed in a Moonshot chassis: Standard license now includes Scripted Virtual Media support \- Redfish "DeviceType" fix to properly label GPU devices that may be hiding behind PCIe switch in some Apollo servers - 1. Support for 3rd Gen Intel Xeon Scalable Processors 2. Security Hardening enhancements - 1. Fixed the HPE Moonshot standard license issue disallowing Virtual Media. 2. Fixed the issue where the Server Platform Service (SPS) firmware was not flashing on the HPE ProLiant m750 Server Blade. 3. Fixed the issue where the HPE iLO 5 web interface or the HPE iLO Redfish login attempts failed after a 24-hour period on servers installed in an HPE Edgeline EL1000 Converged Edge System or a HPE Edgeline EL4000 Converged Edge System. 4. Fixed the issue where plugging in the display port after power on would result in a failure to display video. 5. Fixed an intermittent issue where some of the NVMe drives were not getting listed correctly in the HPE iLO Redfish and the HPE iLO 5 web interface. 6. Fixed an issue where the controller was not getting detected when encryption was enabled. - Support for HPE ProLiant ML30 Gen10 Plus and HPE ProLiant DL20 Gen10 Plus Server. * Support import of SSL certificate which is more than 20KB via iLO REST and GUI. * Support for PCIE bifurcated slot for Intel E810 2CQDA2 100G NIC. * Support for 64 Character length Password similar to how other vendors provide. * Implemented workaround for health monitoring of NVME M.2 drives as these were partially compliant to NVMe-MI spec. - Fixed an issue where the Adapter Virtualization Mode was not persistent across reboots. * During System boot/reboot, iLO will stall the complete storage controller discovery such that encryption status query happens after PCIeVDM interface is ready. * Fixed an issue where none of the Controller were getting detected when Encryption was Enabled. * Fixed intermittent issue where none of the NVME drives were getting detected in OS when iLO is reset multiple times. * On XL270d Gen10 Servers, Incorrect capacity of PSU is displayed in iLO Power supplies field after online insertion of HPE 2200W platinum Hot-Plug power supply. * Fixed a configuration sync issue during IPv6 initialization when SLAAC Enable/Disable settings were modified. * Support added to increase the mapping limit of 32 to 64 physical drives to one logical drive. * Fixed the long boot time issue when encryption is enabled on smart array controller. * Fixed the NS204i-p unknown status issue after the windows reboot. * Fixed the data source for HPE FlexFabric 20Gb 2-port 650FLB Adapter to report correctly when AMS is not installed. - Support for Automatic SSL Certificate Enrollment using Simple Certificate Enrollment Protocol. * Addition of DIMM Manufacture date in RedFISH output of Memory Resource. * Added monitoring of User-defined temperature threshold for PCI Zone sensors on Edgeline servers. - OA cannot display FLB (NIC) Info in the GUI as iLO returns an error. * Inconsistent Status displayed for Network Adapter in the GUI. * Improved monitoring of temperature sensors on N3000 option cards. * Fixed an issue where iLO may become inaccessible after consecutive setting of factory defaults. * Improved power supply information reporting on Edgeline servers. * Intelligent Provisioning not accessible after a rare server reboot. - *Recommended**: For supported HPE Synergy Gen10 and Gen10 Plus systems. **Optional**: For supported HPE ProLiant, Edgeline, and Apollo Gen10 and Gen10 Plus systems. - Added Support for HPE Synergy Gen 10/Gen10 Plus Systems for addressing the following. * https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04211en_us * Support for Automatic SSL Certificate Enrollment using Simple Certificate Enrollment Protocol. * Addition of DIMM Manufacture date in RedFISH output of Memory Resource. * Added monitoring of User-defined temperature threshold for PCI Zone sensors on Edgeline servers. - Fixed an issue where Network Tab page in iLO GUI doesn't refresh automatically post Server Reset. * "StructuredName" Redfish Property is hidden when the value of this field is an empty string. * Improved monitoring of temperature sensors on N3000 option cards. * Fixed an issue where iLO may become inaccessible after consecutive setting of factory defaults. * Improved power supply information reporting on Edgeline servers. * Intelligent Provisioning not accessible after a rare server reboot. - *Recommended**: For supported HPE ProLiant, Apollo Gen10 and Gen10 Plus systems. Is not supported for HPE Edgeline, Synergy Gen10 and Gen10 Plus systems. - Support for Cloud based management with Compute Ops Manager (COM). * Support for Enhanced Download Performance * This option allows to improve the performance of iLO Scriptable Virtual Media and URL based Firmware update in environments with high network latencies. * Support for NVIDIA A2 PCIE GPU card - None - Validation of LDAPv3 based authentication using OpenLDAP based directory server. * Added Support for RDE Read and Write operations. * Added Support for Firmware update using Common PLDM based Package for Direct Attached UBMs (1/2/3/4). - Deployment needs to be run twice to reflect Firmware baseline successfully. * Change in response of Redfish API causes Oneview not to fully discover the Port Map Information. * RF subscription gets exhausted in certain situations. * Oneview marks Server as "Critical" when a Critical IML event has been manually marked as repaired in iLO GUI. * iLO not able to auto recover when an IML corruption happens. * Adapter Virtualization Mode not persistent across reboots. * On Edgeline Platforms, iLO GUI doesn't render in the first attempt when IP address is used. * iLO webserver becomes unresponsive after running RIBCL scripts for modifying SSO permissions. * AMD Gen10 servers might take up to 5 mins to complete POST when encryption is enabled. * Nvidia P1000 may not be detected if installed on an EL1000 chassis. * Intel N3000 network endpoints are not properly reported on e910t servers. * ipmitool lists incorrect number of network port links. - Type-D Component Firmware update experience for Compute Ops Management. * Support for easy transition to Compute Ops Management for nodes that are currently under OneView management. - Port Status of 331i & 562FLR Network Adapter cards do not change from "unknown" to "ok" in rare occasions. * "show swid" command displays HPE Smart Array P408i-a SR Gen10 card twice. * iLO fails to send Support Events even when Embedded Remote Support has been enabled. * iLO responds with wrong Network port information during Ports collection and Network Device Functions collection. * Server boot gets stuck on POST while loading Encryption keys for secure boot. * EID Table information is retained in AHS though MCTP discovery is disabled. * Front Display Port (DP) on Universal Media bay does not work in certain instances. * Unable to adjust fan settings on Edgeline e910/e920 Thermal Configuration page. * iLO unable to authenticate users intermittently when directory authentication is enabled. - UBM6 Backplane Detection Support : New backplane basic support added without firmware update support (Only supported for HPE ProLiant Servers) - Fix for multiple security issues - Supporting new iLO ASIC for Gen10 Plus servers. - None - Cannery Row Solution Support. * Added support to auto-restore the IPMI and SNMP configuration settings to custom defaults (manually enabled by the user) instead of the factory defaults during abrupt AC power cycle. * iLO PLDM Downstream Drive firmware update support enabled. * Enhanced the Alerting Mechanism to allow clearing of Events without resetting iLO. * PATCH support for Redfish Property "DateTimeLocalOffset" * Ability to update Firmware on SATA Drives without Operating System Support. * Ability to disable/enable TLS 1.0 and/or TLS 1.1 in Production state. * The Temperature page now displays the temperature details of the available PCIe subcomponents. - 'SessionTimeout' property missing under '/redfish/v1/SessionService' URI * GUI reporting configured drives as unconfigured. * A router failover post iLO NIC link down and link up could cause iLO to be rendered unreachable over router (default gateway). * Incorrect SNMP Trap Data value for cpqSm2CntlrBadLoginAttempts (OID 1.3.6.1.4.1.232.9.2.2.14) * Patch operation under redfish URI chassis/1/Thermal not working * When a storage controller is configured in Passthrough Mode in ESXi, iLO might take a bit longer to discover Direct Attach NVMe Drive. * iLO hostname displays the previous host name after iLO reset. * NVMe Backplane Firmware Package 1.0 is not getting updated through iLO. * Issue with the JSON payload for Country property * Issue with Alertmail IP address reporting on Moonshot systems. * The following weak TLS 1.2 ciphers are disabled in High security state: * 256-bit AES with RSA, ECDH, and a SHA384 MAC (ECDHE-RSA-AES256-SHA384) * 256-bit AES with RSA, DH, and a SHA256 MAC (DHE-RSA-AES256-SHA256) * 128-bit AES with RSA, ECDH, and a SHA256 MAC (ECDHE-RSA-AES128-SHA256) * 128-bit AES with RSA, DH, and a SHA256 MAC (DHE-RSA-AES128-SHA256 - Supporting new iLO ASIC for Gen10 Plus servers. - None - Please note iLO 5 v2.78 is positioned to be the bridge version for future iLO versions considering that future iLO 5 binary files will be 34 MB in size. Previous versions of iLO 5 (before 2.78) had provision to only accept iLO 5 binary which was 32 MB in size. This restriction has been removed in iLO 5 v2.78. The increase in the bin file size will be to support dual payload firmware for ensuring that customers can use single iLO firmware package on any of the iLO ASICs (T265 or T285). - Add support for Intel ATS-M 75W, 100W and 150W * Add support for NVIDIA H100 * Redfish firmware inventory displays CEC FW version (40 GB NVIDIA GPU Drawer) * Support for import of a trusted SSL certificate and its corresponding private key. * Inclusion of "Context" property in Redfish event which will display the value set by user during Redfish event subscription creation. - NVMe drive reporting invalid drive IML and illuminating the Amber LED * In a configuration with more than 10 logical network controller on bringing the logical controller up or down data doesnt get updated and AMS banner " iLO did not detect Agentless Management" shows up in iLO GUI. * Thermal over temperature alerts observed with respect to Pensando DSP DSC-25 Cards * UEFI iLO config utility lets users add special characters to the ILO hostname * iLO IP addresses were not included in the SSL certificate SAN even when the user selects this option in the UI * iLO is not holding onto Redfish Subscriptions due to invalid Sender-Address in Redfish Event Header * For URI /redfish/v1/Managers/@ManagersId/SecurityService/, PATCH on the property TLSVersion using "Enabled" or "Disabled" fails. * On Gen 10 plus AMD systems, with more than 16 PCIe capable SK Hynix drives configured; the behaviour of a single option card (Drives/Storage Controllers/Network Adapters) in the configuration could be unknown or unpredictable. - Supporting new iLO ASIC for Gen10 Plus servers - None - None. - Not clearing error in processing interrupts can lead to interrupt storms leading to firmware watchdog reset * RDE Changes to create Location URI for newly created resource when LRT is completed * RDE client MC error code mapping is wrong * iLO FW Communication Issue 1) iLO cannot be accessed via Web UI AND/OR 2) Ilorest commands slow/unresponsive post upgrade to iLO version 2.78 * Server fails to power up as secure start did not complete successfully - Handle Devices reconnection when Bus Device Function information has changed after the Device comes back after Reset. * Enhancements to ensure Simplified Compute Ops Management onboarding. * Logging Improvements in Compute Ops Management. * Implemented a flag that allows autoconnection to Compute Ops Management after reboot. * Handle Type - A Firmware Update gracefully even when iLO goes for a reboot. * Handle Reset scenarios gracefully when updating via Compute Ops Management instead of abruptly going for a reset component gets updated. * Enable/disable SNMP v1 and v3 independently - UEFI iLO config utility lets users add special characters to the ILO hostname * Over Temperature alerts observed with Pensando Cards. * CEC FW Version not seen on iLO 5. * Discrepancy observed in the Current Operating Power comsumption data * Incorrect CPU throttling information observed in iLO. * Incorrect HPE DIMM part number in ERS memory Event. * iLO incorrectly reports missing PSUs and sensor readings. * iLO incorrectly shows connected to Compute Ops Management though connection is not established. * System shuts down when updating Intelligent Provisioning and SPP. * Issues observed on iLO with DL360 Gen10 Server and NVMe SSD Boot drives combination. * Thermal policy is not spinning up fans in some cases resulting in inadequate air flow. * Local User Passwords containing a backslash character may not be set correctly in the iLO 5 Command Line Interface * Organizational Unit attribute is mandatory for the iLO Redfish REST API for generating a CSR whereas in the UI it is marked Optional. * Automatic Certificate Enrollment may not work if the Certificate Authority signing the iLO Certificate Signing Request is an Intermediate. * SPP/SUM Nutanix DX380 (Gen10): Intermittent Issue Updating IE and SPS FW from SPP2022.03.0 - Duplicate of "Intelligent Provisioning and Manageability Engine Firmware fails to get updated intermittently." * "Trap Source Identifier" setting periodically changes to "iLO Hostname" from previously defined "OS Hostname" * IE not updating due to incorrect Target GUID * Caution Threshold and Critical Threshold reported on Memory Temperature sensor of NVIDIA A100-SXM4-80GB - iLO 5 v2.91 has the same content or feature set as iLO 5 v2.90 plus an additional fix for COM (Compute Ops Management) related to COM4VC bundle update message and event. The additional COM related fix is NOT applicable to other regular use case scenarios. Hence upgrading to iLO 5 v2.91 is optional. - N/A - Fix provided to have synchronous messages to reflect the status, to Compute Ops Management, after completion of server reset during bundle update in COM4VC use case scenario. - \- Added capability in iLO for Two Factor Authentication using OTP (One Time Password) for Microsoft AD users \- To display drive enclosure info in Firmware tab in iLO \- Support for controller which goes for functional reset runtime \- iLO to mark the correct component update status for runtime agent updatable components based on the update status and update result \- Secure erase of data based on the usecase (customer, factory or openbmc ownership transfer) \- iLO stops the bundle update in the scenario where BootToUefi task goes to exception to ensure Graceful shutdown of server \- iLO Support for OBSE in factory mode without the need for Advance License \- Added support for comma (",") as a delimiter for multiple email IDs in AlertMail feature - \- OEM iLO component does not show the OEM equivalent entry for Intelligent Provision in One Time Boot Option \- Handling delayed device discovered in UEFI mode during discovery phase \- Persist the KCS interface setting across iLO reboots \- Capability to enable KCS interface setting without needing a factory reset - None - Incorrect reporting of the firmware version of Intel NVMe drives * Bundle update issue in case of file download failure for HPE GreenLake Compute Ops Management * iLO Two-Factor authentication login fails when AD user login name is used as username for iLO Login instead of AD user display name * Incorrect reporting of the Nic card port status from IPMI SDR list * Fixing HPE GreenLake Compute Ops Management retry logic to address HPE GreenLake Compute Ops Management status was changing from Connection in progress to Connection failed - iLO needs to provide IPv4 address for RDE enabled NIC * NVIDIA L40S needs to be enabled on HPE Servers (Gen11, Gen10 Plus) * High Efficiency Mode setting can be modified via iLO for DL110 Gen10 Plus server having only DC Power Supply of Spare Part Number P40359-001 - Increased the maximum boot order to 512 as specified by UEFI EV specification * UefiDevicePath length increased from 256 bytes to 1024 bytes. * Incorrect sensor values for some sub-components in IPMI response. * Enforced a limit of 14 bytes for DHCP v4 clientId. An error response of "400 - Bad Request" will be observed if the length is beyond 14 characters. - Fixed CloudConnect retry logic to reconnect to iLO once connectivity is resumed * Fixed the auto-connect issue if the HPE GreenLake Compute Ops Management (COM) was disabled due to a no-retry - 1.03 is the initial firmware release. - Added support for new 6 HDD SFF backplane. - Added support for new 6 SFF HDD backplane. - In rare circumstances after multiple, successive reboots, a system with 28 large form factor drives might become unresponsive. Firmware v1.26 resolves the issue. - **Customers who already installed firmware version 1.26 do not need to update to 1.26 (B).** - Updated to support Service Pack for ProLiant version 2017.07.0 **Note:** If version 1.26 was previously installed, then it is not necessary to upgrade to version 1.26 (B). - Enhanced debug capabilities - Enhanced debug capabilities - Added HPE Smart Array P824i-p controller support - Drive may show up missing after a system reboot. - Update build environment with SHA384 * Update OS - Drive may show up missing after a system reboot. Please reference Customer Advisory a00098241en_us - Support RHEL8 - - Initial Release - It's the transition version before migrating to newer version 0.39(B). 0.39 doesn't have any function change or issue fix, just to activate the new Product ID naming. - It's the transition version before migrating to newer version 0.39(B). 0.39 doesn't have any function change or issue fix, just to activate the new Product ID naming. - Modify Product ID to "A4200 Gen10P LFF" and "A4200 Gen10P SFF" to distinguish the different generation expander backplane. - Update build environment with SHA384 * Update OS - Fix issue for component unable to be displayed on offline SPP - Initial SuSE build of the kmp package. - Add limited support for multiple iLOs - Change default number of channels to 16 - Initial SuSE build of the kmp package. - Add limited support for multiple iLOs - Change default number of channels to 16 - Initial SuSE build of the kmp package. - Add limited support for multiple iLOs - Change default number of channels to 16 - Initial SuSE build of the kmp package. - Add limited support for multiple iLOs - Change default number of channels to 16