HPE OneView

[IMDS]

Hello,
I am brand new to OneView. I had extensive experience with SIM many years ago and was looking to implement at my new command. Recently learning OneView will eventually be its replacement, I began installing and configuring. It seems that OneView only works with communication through iLo where SIM could reach to the server through its OS network. Is this its only way to import servers going forward?

[DanCernese]

One of the most troublesome and challenging areas of SIM was the ongoing management of OS network credentials (ssh keys, etc) and the agents installed on the OS.  The strategy with HPE OneView from the beginning was to eliminate any OS agents..  Yes, the monitoring and management by HPE OneView is through the iLO "out of band" network.

Additionally, there are industry trends in the everything-to-the-cloud to leverage that method (BMC/iLO/etc) for cloud-based management solutions as well.

[IMDS]

Thanks for the info. Sadly that makes OneView a non-starter for me.  I've tried til blue in the face to express our need for iLo in our infrastructure but she will not entertain the idea over concerns of our network security constraints.  I may have to get a little more versed in iLo to be able to more accuratley explain its beneifits while being secure.

[DanCernese]

Please reach out to a local HPE representative for assistance.  HPE is extremely proactive at releasing mitigations for known and newly discovered vulnerabilities in networking for iLO faster than any OS vendor is able.

This also may assist with some background (although dated, the references predate Gen10 servers):  https://support.hpe.com/hpesc/public/docDisplay?docId=c04530504

[Kashyap02]

Yes, oneview communicates through ILo of the servers for monitoring and management. No OS agents. 
Pleas refer to oneview quickspecs: https://www.hpe.com/psnow/doc/c04111367?jumpid=in_lit-psnow-red

You can go through the ILO firmware download page where you can find the vulnerabilities fixed in each release. 
https://support.hpe.com/hpesc/public/swd/detail?swItemId=MTX_a072817f6588444b803d948eaa#tab-history

If you still have concerns will the ILO security / vulnerabilities, you can reach out to us (HPE Support)