Adding iPDU into OneView

[UserName1]

Morning,

Has anyone been able to get an iPDU (model P9S18A in my case) added into OneView?

I have added a certificate to it to get past the first hurdle but I can't find a way in the PDU config to enable a new version of TLS that would allow it to be added based on the following error:

Unable to add power delivery device

The device only supports TLS 1.0 or lower, and these protocols have been disabled on this appliance.
TLS 1.0 can be enabled using the HPE OneView REST API interface. See the Security protocols section of the online help for more information about how to make this REST call. TLS 1.0 is no longer considered to be a secure protocol, and its use is not recommended. If the appliance is running in either FIPS or CNSA cryptography modes, TLS 1.0 cannot be enabled.

I don't really want to enable old versions of TLS on OV as security will not be best pleased with me.

Any help appreciated.

[ChrisLynch]

The only way is to re-enable TLS 1.0 on the appliance.  It should be said that no one should do this without fully understanding TLS 1.0 traffic can be captured and decrypted without knowing the private key.

That said, the part number you provided is for an HPE G2 metered PDU, not an iPDU. HPE OneView does not support G2 PDU's as a monitored resource.

[UserName1]

Thanks Chris.  I incorrectly used the term iPDU as the (AF525A) iPDU's we used to purchase are no longer for sale and replaced by the G2 PDU's.

Do you know if there are any plans to allow these to be supported on OV?

[PatrickLong · Accepted solution]

+1 to  @UserName1 feature request to add support for G2 Metered and G2 Metered-and-Switched PDU's in OneView; they were supported in Systems Insight Manager (albeit via SNMP traps, I know) per the HPE G2 Metered and Switched User's Guide.

In early 2018 I tried to order Intelligent PDU's (AF522A) to support OneView integration for a new Synergy 3-frame install - my HPE Global Enterprise Account Executive advised that those models were "at the end of their lifecycle" with low to no new stock and available as refurbished only; she instead recommended the  HPE Part # P9R78A HPE G2 Metered Modular 3Ph 8.6kVA/L15-30P 24A/208V Outlets (6) C19/1U Horizontal NA/JP PDU

as an equivalent replacement.  Only after the fact did I discover that OneView exclusively supports the so-called Intelligent class PDU's for monitoring, and that the Metered G2's I had just purchased were not capable of integrating with OneView.  Of course you can still enter your G2 PDU specs in the Facilities > Power Delivery Devices portion of OneView as type Rack PDU just as you can for any generic dumb PDU, which I did.  But all that does is effectively statically compare the derated capacity you manually enter for the PDU specs against the power utilization of all devices that you have configured via Power Connections to show in the same rack and on the same Power Feed in OneView - and presumably uses that data to calculate whether a OneView warning for possible power capacity limit should be issued in the event of increased consumption due to power in-rush during server reboots etc..  OneView is NOT *actively* monitoring the used capacity or load% of my Metered G2 PDUs in any way.

Here's an interesting experiment to try , though - select Power Delivery Device Type:  HPE Intelligent Power Distribution Unit (which - I know - a G2 is NOT) and then provide the IP/hostname and creds of your G2 PDU it will not connect due to local certificate expiration issue "Certificate presented by the device or server is expired." Valid from11/11/2019 11:07:06 pm to 11/10/2021 11:07:06 pm , I have the latest 2.0.0L firmawre loaded and the provided HPE CA Root Certificate shows as expired, tsk, tsk....  But even back in 2018 when I first got the G2's and they HAD valid certificate dates, I tried connecting one of them to OneView and it failed with some error message like "this is not an HPE Intelligent PDU". 

Now this is where it gets maddening.  If you search the HPE Support site (or Google) using the string "HPE Intelligent Power Distribution Unit" because you want to know "Hey, what HPE PDU's *CAN* I actively monitor from OneView?" you are shown links to years-old documents referencing these long-unavailable AF**** model PDU's with blue Cxx sockets, and no documents at all that refer to any currently-available HPE hardware..  So I am led to believe that Oneview will support integration with HPE Intelligent Power Distribution Units, but the only PDU's that meet that specification are devices that were already being phased out in 2018, not long after Synergy was being widely released, and no newer PDU's support this functionality?

Would love if someone could please point me to a document showing currently in-production and available HPE PDU SKU's that are supported for active monitoring via OneView.   With respect to the Metered and Monitored G2 PDU's I already own, it seems to me that if *I* can manually log into the web GUI of a Metered G2 PDU to retrieve the current Active Power value/load% , it should not be a huge development effort to add this capability to Oneview using customer provided HPE G2 PDU IP's/credentials.  I'm not asking to manage those PDU's (although that seems reasonable for the Switched G2 modelss) but reading in current load values periodically to provide historical data and providing a right-click option to open the G2 PDU web GUI doesn't seem like it would be a very heavy lift.

[UserName1]

Patrick,

I couldn't have put that any better, you hit the nail right on the head.

I do fear that this is just going to fall on deaf ears and there is not much of a link between what customers feedback on here to what gets add the to the product.

Finger crossed one day they might support their new hardware in their own tools....

[FabienKhoury]

Same thoughts :

1) no history in the GUI of the metered PDU, I guess it would be no effort for devs to add this functionnality and that it would not requirea huge amount of memory

2) TLS 1.0 in 2022., that's just not possible ! I won't activate it in OV

Buying this PDU instead of a dumb PDU if of no interest, and it brings additional work for networking them.

[K2AAB]

And it looks like in 2024 this is still the same issue. Come on HPE! Even if the G2 does not work you've been promising the G3 for years, especially after the change of Synergy power reqirments...