PART NUMBER: 403663-043 FILE NAME: ilo2_227.bin TITLE: iLO 2 firmware v2.27 LANGUAGE: English DIVISIONS: Systems PRODUCTS AFFECTED: HP ProLiant BL685c G6 Server HP ProLiant BL495c G6 Server HP ProLiant BL490c G6 Server HP ProLiant BL465c G6 Server HP ProLiant BL460c G6 Server HP ProLiant BL280c G6 Server HP ProLiant BL2x220c G6 Server HP ProLiant DL785 G6 Server HP ProLiant DL585 G6 Server HP ProLiant DL385 G6 Server HP ProLiant DL380 G6 Server HP ProLiant DL370 G6 Server HP ProLiant DL360 G6 Server HP ProLiant DL320 G6 Server HP ProLiant ML370 G6 Server HP ProLiant ML350 G6 Server HP ProLiant ML330 G6 Server HP ProLiant WS460c G6 Workstation Blade HP ProLiant xw2x220c Blade Workstation OPERATING SYSTEM: Microsoft Windows Server 2008 x64 (Including R2 & Base Edition) Microsoft Windows Server 2003 x64 Edition (Including R2 & Base Edition) Microsoft Windows Server 2008 W32 - Microsoft Windows Server 2003 - (Including R2 & Base Edition) Red Hat Enterprise Linux 5 (AMD64/EM64T) Red Hat Enterprise Linux 5 (x86) Red Hat Enterprise Linux 6 (AMD64/EM64T) Red Hat Enterprise Linux 6 (x86) SUSE LINUX Enterprise Server 11 (AMD64/EM64T) SUSE LINUX Enterprise Server 11 (x86) SUSE LINUX Enterprise Server 10 (AMD64/EM64T) SUSE LINUX Enterprise Server 10 (x86) Oracle Enterprise Linux 5.5 SYSTEM CONFIGURATION: N/A PREREQUISITE: If the host operating system is Microsoft Windows: - The "HP ProLiant Support Pack for Microsoft Windows Server": version 8.30 or later - The "HP ProLiant iLO 2 Management Controller Driver for Windows": version 1.12.0.0 or later NOTE: The "HP ProLiant iLO 2 Management Controller Driver for Windows" is included in the "HP ProLiant Support Pack for Microsoft Windows Server" BUILD DATE: January 8, 2015 EFFECTIVE DATE: January 30, 2015 DESCRIPTION: Firmware for the Hewlett-Packard Integrated Lights-Out 2 Management Controller UPDATES: - None FIXES: - Addressed possible security vulnerabilities mentioned in the HP Software Security Response Team reports SSRT101745 and SSRT101886. - Disabled SSL version 3. iLO 2 2.27 and later supports only TLS 1.0. - Addressed CVE-2014-0224 false positive. - The current user cannot be deleted by using the RIBCL command DELETE_CURRENT_USER. ENHANCEMENTS: - Added a CLI command to enable or disable the SSLv3 cryptographic protocol. The command is "set /map1/config1 oemhp_ssl_v3_enable=yes" to enable SSLv3 or "set /map1/config1 oemhp_ssl_v3_enable=no" to disable SSLv3. iLO will reset if the command state transitions from yes to no or from no to yes. - Hard drive status reporting on the System Health Summary web page now displays smart errors. - Added additional permission attributes to the JAR Manifest file for the Java Remote Console and Virtual Media applets. - Added a watchdog timer for firmware lockups. iLO 2 will reboot if the firmware does not respond for 60 minutes. - Added support for retrieving a certificate from a trusted HP SIM 7.0 and later server. KNOWN ISSUES: - None SUPPORT: 1. iLO 2 firware updates and utilities can be found here: http://www.hp.com/support/ilo2 2. If using the Java Remote Console with Java Runtime ENvoronment (JRE) versions 7 or 8 the Java Remote Console may not launch. JRE versions 7 and 8 incorrectly try to use TLS versions 1.1 or 1.2 which the console does not support. If you disable TLS 1.1 and TLS 1.2 in the Java Control Panel under Advanced Security Settings then it should launch. DOCUMENTATION: 1. iLO 2 User Guide and Lights-Out Scripting Guide can be found here: http://www.hp.com/go/ilo Select Documentation. 2. Check the online help for additional information about how to use features. Online help can be accessed from within the browser web pages by clicking on the question mark in the upper right-hand corner of each page. HOW TO USE - 1. Download the appropriate iLO 2 Online Firmware Update Component for your operating system. 2. Install the firmware using one of these options: a) Run the Component on the host to be updated. The component will update the iLO 2 firmware and reset the iLO 2 processor. b) Extract the firmware from the component. This will place the firmware image file, iLo2_yyy.bin (where yyy represents the firmware version) in the target directory. You now have these options: i) Login to iLO 2, navigate to the Update Firmware page, and update the firmware from there. ii) Use the HP Lights-Out Configuration Utility, CPQLOCFG, and RIBCL/XML scripts to update iLO 2 across the network. iii) Use the HP Online Lights-Out Configuration utility, HPONCFG, and RIBCL/XML scripts to update iLO 2 from the supported host OS. 3. iLO 2 automatically resets after successful update. There is no need to manually reboot the iLO 2. Copyright 2015 Hewlett-Packard Development Company, L.P. Hewlett-Packard and the Hewlett-Packard logo are trademarks of Hewlett-Packard Development Company, L.P/ in the U.S. and/or other countries.