Integrated Lights Out (ILO) v 2.27 - Fixes and Enhancements info

[chuckk281]

Patrick looking for help on iLO info:

***********

Anyone have the details on ILO 2.27? The website doesn’t give much about fixes and enhancements for this version.

***********

Input from Grant:

************

Hi Patrick,

If you download & unzip the firmware package, you will find a readme.txt file which hast the following:

BUILD DATE: January 8, 2015

EFFECTIVE DATE:  January 30, 2015

DESCRIPTION:   Firmware for the Hewlett-Packard Integrated Lights-Out 2 Management Controller

UPDATES:

- None

FIXES:

- Addressed possible security vulnerabilities mentioned in the HP Software Security Response Team reports SSRT101745 and SSRT101886.

- Disabled SSL version 3. iLO 2 2.27 and later supports only TLS 1.0.

- Addressed CVE-2014-0224 false positive.

- The current user cannot be deleted by using the RIBCL command DELETE_CURRENT_USER.

ENHANCEMENTS:

- Added a CLI command to enable or disable the SSLv3 cryptographic protocol. The command is "set /map1/config1 oemhp_ssl_v3_enable=yes" to enable SSLv3 or "set /map1/config1 oemhp_ssl_v3_enable=no" to disable SSLv3. iLO will reset if the command state transitions from yes to no or from no to yes.

- Hard drive status reporting on the System Health Summary web page now displays smart errors.

- Added additional permission attributes to the JAR Manifest file for the Java Remote Console and Virtual Media applets.

- Added a watchdog timer for firmware lockups. iLO 2 will reboot if the firmware does not respond for 60 minutes.

- Added support for retrieving a certificate from a trusted HP SIM 7.0 and later server.

KNOWN ISSUES:

- None

*************

Comments?

[Oscar A. Perez]

Also, if you use cpqlocfg.exe to send XML scripts to iLO2, there is a new cpqlocfg version 2.20 that connects to iLO2 using TLS 1.0 instead of SSLv3

For iLO3 and iLO4 it is recommended to move away from the old cpqlocfg and begin using the new hpqlocfg.

[Torsten.]

The information on the web site is really poor:

This component provides and installs an updated version of firmware for the iLO 2 Management Processor allowing for continued management support of your Server.

http://h20564.www2.hp.com/hpsc/swd/public/detail?sp4ts.oid=5294357&swItemId=MTX_8b77b28f516c4abab49568c4f1&swEnvOid=4064#tab1

[rburkholder]

Is there a new link to the 2.27 ilo 2 firmware upgrade?  hp's website has undergone transformations, and the various download searches don't show any ilo 2 downloads.

[Torsten.]

ILO2 version 2.29 is here:

http://h20566.www2.hpe.com/hpsc/swd/public/detail?sp4ts.oid=5294357&swItemId=MTX_5ffcc1df518c47a9870785ac51&swEnvOid=4103#tab4