FILE NAME: iLO6_153.bin
TITLE: iLO 6 firmware v1.53

LANGUAGE:  English
DIVISIONS:  Systems

PRODUCTS AFFECTED:

•	HPE ProLiant ML110 Gen11 Server
•	HPE ProLiant DL560 Gen11 server
•	HPE ProLiant DL110 Gen11 server
•	HPE ProLiant DL20 Gen11 server
•	HPE ProLiant ML30 Gen11 server
•	HPE Synergy 480 Gen11 Compute Module
•	HPE ProLiant DL380 Gen11 Server
•	HPE ProLiant DL360 Gen11 Server
•	HPE ProLiant ML350 Gen11 Server
•	HPE Alletra 4140 Server
•	HPE Alletra 4120 Server
•	HPE Alletra 4110 Server
•	HPE ProLiant DL320 Gen11 Server
•	HPE ProLiant DL365 Gen11 Server
•	HPE ProLiant DL385 Gen11 Server
•	HPE ProLiant DL345 Gen11 Server
•	HPE ProLiant DL325 Gen11 Server
•	HPE ProLiant DL380a Gen11 Server
•	HPE ProLiant RL300 Gen11 Server

OS VERSIONS VALIDATED FOR Intel/AMD:

•	Microsoft Windows Server 2019
•	Microsoft Windows Server 2022
•	Red Hat Enterprise Linux 8 Server
•	Red Hat Enterprise Linux 9 Server
•	SUSE Linux Enterprise Server 15
•	VMware ESXi 7.0
•	VMware ESXi 8.0

OS VERSIONS VALIDATED FOR RL300:

•	Red Hat Enterprise Linux 8.6 Server
•	Ubuntu 22.04 LTS

PREREQUISITE: N/A

BUILD DATE: October 10, 2023
EFFECTIVE DATE: October 13, 2023

DESCRIPTION: Firmware for the Hewlett Packard Enterprise Integrated Lights-Out 6 Management Controller

LAST RECOMMENDED OR CRITICAL VERSION: iLO 6 v1.52

PREVIOUS VERSION FOR Intel/AMD/RL300: iLO 6 v1.52

UPGRADE REQUIREMENTS: RECOMMENDED

•	UPGRADING FROM A PREVIOUS VERSION OF iLO FOR Intel/AMD : iLO 6 v1.52, iLO 6 v1.51, iLO 6 v1.50, v1.45, v1.41, v1.40, v1.35, v1.30, v1.20, v1.10
•	UPGRADING FROM A PREVIOUS VERSION OF iLO FOR RL300 : iLO 6 v1.52, iLO 6 v1.51, iLO 6 v1.50, v1.45, v1.41, v1.40, v1.35 and v1.05

NOTE:

On HPE ProLiant RL300 Gen 11 platforms, for upgrading iLO 6 v1.05 to iLO 6 v1.35 or later, follow the below steps:
1. Update System ROM from v 1.12 to v1.20 or later from iLO 6 user interface.
2. Update iLO 6 1.05 to iLO 6 v1.35 or later.
In case System ROM is not updated as mentioned in Step1 and if the iLO version is v1.35 or later, the system will not boot.
In such case of system halt at boot with System ROM v1.12, the recovery mechanism is either to downgrade System ROM to v1.10 or upgrade to v1.20 from iLO 6 user interface.

Supported Utilities(Intel and AMD)

Hewlett Packard Enterprise recommends the following or greater versions of iLO utilities for best performance applicable for Intel and AMD:

• 	RESTful Interface Tool (iLOREST) 4.5.0.0
• 	HPQLOCFG v6.0.0
• 	Lights-Out XML Scripting Sample bundle 6.00.0
• 	HPONCFG Windows 6.0.0
• 	HPONCFG Linux 6.0.0
• 	LOCFG v6.00.0 or later
• 	HPLOMIG 6.0.0
• 	Schema extender 6.1.0
• 	Snap-in (x86) 6.0.0
• 	Snap-in (x64) 6.0.0

NOTE: Below Points are applicable only for Intel and AMD

•	Updated utilities and system libraries are required to support the iLO High Security, FIPS, and CNSA security states
•	The iLO RESTful API is the preferred programmatic interface for Gen11 systems.
•	The preferred CLI and scripting tool is the RESTful Interface Tool (iLOREST).

Supported Utilities(RL300)

Hewlett Packard Enterprise recommends the following or greater versions of iLO utilities for best performance applicable for RL300:
•	RESTful Interface Tool (iLOREST) 4.5.0.0

NOTE: Below Points are applicable only for RL300
•	Updated utilities and system libraries are required to support the iLO in High Security and Production Modes. 
•	CNSA and FIPS mode are currently not supported. See the iLO 6 User Guide for the steps on how to disable FIPS and CNSA mode.
•	iLO Amplifier Pack, HPE GreenLake Compute Ops Management (COM), HPE OneView, and HPE Infosight for Servers do not support HPE ProLiant RL300 Gen 11 platform.
•	RedHat Enterprise Linux 8.6 is supported on HPE ProLiant RL300 servers
    For more information about Unsupported feature on HPE ProLiant RL300 Gen 11 servers, see iLO 6 User Guide


KNOWN ISSUES:

•	When TLS 1.2 and TLS 1.0 are enabled but TLS 1.1 is disabled, certain functionalities of alertmail and remote support might be affected. To avoid this issue, disable TLS 1.0 or revert the settings related to TLS disablement.
•	To connect to the iLO Service Port with a USB Ethernet adapter, you must use a USB 2.0 device that is based on the AX88772 series chipset from ASIX Electronics Corporation.
    [Hewlett Packard Enterprise USB to Ethernet Adapter, part number Q7Y55A]
•	To support power usage reporting and optimum server thermal fan control on Linux servers with NVIDIA GPU option cards: Blacklist the nouveau video driver, and then load the NVIDIA GPU driver in persistent mode by entering the following command: nvidia-smi -pm 1 
•	On HPE Gen 11 servers, IPMI in-band commands take relatively more time to return a response. For more information, see the document a00131008en_us on the HPE Support Centre”
•	On certain HPE Mellanox adapters that support dual port personality (InfiniBand/Ethernet), the port personality gets reset to the default value during an adapter firmware update.
    For more information, refer to the below Customer Advisory on the Hewlett Packard Enterprise Support Center: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00068199en_us.
•	CPU PkgTmp sensor will be shown as NA intermittently in temperature page when system is idle for long time. Refreshing temperature page will display sensor with readings.
•	VROC connected drive blink incorrectly while rebuilding.
•	On HPE ProLiant RL300 servers, the "ipmitool sdr" command from within the host operating system returns partial response. As a workaround, "IPMI over LAN" can be utilized.


SECURITY FIXES:

For information about the latest security bulletins and vulnerabilities, visit
https://support.hpe.com/connect/s/securitybulletinlibrary

Security best practices:

For the latest information about security best practices, consult the HPE Integrated Lights-Out Security
Technology Brief: https://www.hpe.com/support/ilo6

Fixes:
- Fixed CloudConnect retry logic to reconnect to iLO once connectivity is resumed
- Fixed the auto-connect issue if the HPE GreenLake Compute Ops Management (COM) was disabled due to a no-retry

ENHANCEMENTS:
- Added support for Qualcomm X100
- Added enhanced support to iLO firmware to report additional description about the components for HPE GreenLake Compute Ops Management initiated firmware bundle update.
- Added support to enable or disable User Accounts through Redfish and iLO web interface.
- In-band IPMI support for HPE ProLiant RL300 Gen11 servers (RHEL 8.6).
- For PLDM components, added support to selectively update the target devices on the system through Install Sets and Task Queue

SUPPORT:

iLO 6 firmware updates and utilities can be found here: https://www.hpe.com/support/iLO6

IPv6 network communications for Intel and AMD

Supported Networking Features
•	IPv6 Over Shared Network Port Connections
•	IPv6 Static Address Assignment
•	IPv6 SLAAC Address Assignment
•	IPv6 Static Route Assignment
•	IPv6 Static Default Gateway Entry
•	DHCPv6 Stateful Address Assignment
•	DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
•	Integrated Remote Console
•	OA Single Sign-On
•	HPE Single Sign-On
•	Web Server
•	SSH Server
•	SNTP Client
•	DDNS Client
•	RIBCL over IPv6
•	SNMP
•	AlertMail
•	Remote Syslog
•	WinDBG Support
•	HPQLOCFG/HPLOMIG over an IPv6 connection
•	URL-based Virtual Media
•	CLI/RIBCL Key Import over IPv6
•	Authentication using LDAP and Kerberos over IPv6
•	iLO Federation
•	IPMI
•	Embedded remote support

IPv6 network communications for RL300

Supported Networking Features
•	IPv6 Over Shared Network Port Connections
•	IPv6 Static Address Assignment
•	IPv6 SLAAC Address Assignment
•	IPv6 Static Route Assignment
•	IPv6 Static Default Gateway Entry
•	DHCPv6 Stateful Address Assignment
•	DHCPv6 Stateless DNS, Domain Name, and NTP Configuration
•	Integrated Remote Console
•	HPE Single Sign-On
•	Web Server
•	SSH Server
•	SNTP Client
•	DDNS Client
•	SNMP
•	Remote Syslog
•	WinDBG Support
•	URL-based Virtual Media
•	Authentication using LDAP and Kerberos over IPv6
•	IPMI over LAN
•	Embedded remote support

Networking Features not supported by IPv6 in this release 
•	NETBIOS-WINS
•	Key managers

DOCUMENTATION -

•	iLO 6 documentation: https://www.hpe.com/support/iLO6
•	Check the online help for information about how to use iLO
•	To access the online help, Click the question mark icon in the upper right corner of any iLO web interface page

HOW TO USE 

•	Download the iLO 6 Online Firmware Update Component for your operating system.
•	Install the firmware using one of these options:
•	Run the component on the host to be updated.
•	The component will update the iLO 6 firmware and reset the iLO processor.
•	Extract the firmware from the component. This will place the firmware image file, iLO6_yyy.bin (where yyy represents the firmware version), in the target directory. You can use the following methods to install firmware:
•	Login to iLO, navigate to the Flash Firmware page, and update the firmware from there.
•	Use the iLO RESTful API or iLOREST. For more information, see the following website: https://www.hpe.com/support/restfulinterface/docs
•	Use the Lights-Out Configuration Utility (HPQLOCFG) and RIBCL/XML scripts to update iLO 6 across the network (Applicable only for Intel and AMD)
•	Use the Online Lights-Out Configuration utility (HPONCFG) and RIBCL/XML scripts to update iLO 6 from the supported host OS(Applicable only for Intel and AMD)
•	iLO automatically resets after a successful update. There is no need to manually reset iLO.

Copyright 2022-2023 Hewlett Packard Enterprise Development, LP