topic Re: ILO Powershell CMDlets 2.2.0.0 - SecurityDashboard configure in Server Management - Remote Server Management

ILO Powershell CMDlets 2.2.0.0 - SecurityDashboard configure

Michel-CO — Thu, 18 Jul 2019 11:12:05 GMT

We are currently creating a configuration script for ILO.
The new firmware version 1.40 and newer comes with the new Security Dashboard. This shows errors as default.
We want to fix these errors with Powersell script. We use the latest HPE ILO CMDLets 2.2.0.0.
The following errors appear:
-Require Login for iLO RBSU
-Secure boat
-Password Complexity

We change the setting "Require Login for iLO RBSU" with the following powershell command: "$ ILOConnection | Set-HPEiLOAccessSetting -RequiredLoginForiLORBSU Yes"
We can not turn off the "Secure Boot" setting because our servers were installed with the "Legacy" setting and are running. Thus, we can not switch to UEFI including Secure Boot during operation.

The security dashboard must ignore with Powershell command this error:
$ ILOConnection | Enable-HPEiLOSecurityDashboardSetting -IgnoreSecureBoot

We also want to fix the "Password Complexity" error, but I can not find any way to do this through Powershell.
A workaround would be currently only to set an ignore in the security dashboard:
$ ILOConnection | Enable-HPEiLOSecurityDashboardSetting -IgnorePasswordComplexity

How can we configure Password Complexity with Powershell?

Also, we can not use the Powershell command on ILO5 to set the "Set-HPEiLOAccessSetting -ServerFQDN $ SRVFQDN" setting. Why is this only possible with ILO4?

Thanks

Michel

Re: ILO Powershell CMDlets 2.2.0.0 - SecurityDashboard configure

Harsh_b — Mon, 22 Jul 2019 10:35:17 GMT

Hello Michel,

Please refer to below link if helps

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00045034en_us&docLocale=en_US

if not then I would suggest to log a support ticket for further assistance on scripting issue. This needs to be checked and worked by HPE remote support team.

Regards

Re: ILO Powershell CMDlets 2.2.0.0 - SecurityDashboard configure

Michel-CO — Mon, 22 Jul 2019 11:41:50 GMT

Hey,

in meantime i ask the developer on GitHub.

Here the Links:

https://github.com/HewlettPackard/PowerShell-ProLiant-SDK/issues/31

https://github.com/HewlettPackard/PowerShell-ProLiant-SDK/issues/32

Thanks

Re: ILO Powershell CMDlets 2.2.0.0 - SecurityDashboard configure

dgwhite — Tue, 01 Oct 2019 15:02:17 GMT

I have the same issue. Did you ever find a way to enforce complexity with Powershell?

Thx,

Dan

Re: ILO Powershell CMDlets 2.2.0.0 - SecurityDashboard configure

dgwhite — Tue, 01 Oct 2019 15:24:35 GMT

I found the solution shortly after posting. You can modify this setting with the Redfish module:

https://www.gitmemory.com/issue/HewlettPackard/PowerShell-ProLiant-SDK/32/513660904

Install-module HPERedfishCmdlets
$session= Connect-HPERedfish -Address <ip> -Username <user> -Password <pass> -DisableCertificateAuthentication
$hpe = @{}
$hpe.Add('EnforcePasswordComplexity',$True)
$oem = @{}
$oem.Add('Hpe',$hpe)
$pwdComplexity= @{}
$pwdComplexity.Add('Oem',$oem)
$result = Set-HPERedfishData -Odataid '/redfish/v1/AccountService/' -Setting $pwdComplexity -Session $session -DisableCertificateAuthentication