Disable functionality of iLO service port?

[azzz123]

Hi I am currently trying to disable all USB ports on a Gen10 DL360. This includes the ports that you can disable through the BIOS (which I did). But I also want to disable all functionality of the iLO service port. I've been trying to figure this out by using hponcfg, but have failed to find any documentation containing this. Anyone know how to disable the port completely?

[support_s]

System recommended content:

1. HPE Integrated Lights Out (iLO 3/4/5) - How to Reset the iLO Inband Root/Administrator Password in Linux

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[feigenL]

Hello there, please take a look at this description of the Service Port functionality:

The service port is a USB port with the label iLO on the front of ProLiant Gen10 servers and Synergy Gen10 compute modules.

When user have physical access to a server, user can use the service port to do the following:

• Download the Active Health System Log to a supported USB flash drive. When user use this feature, the connected USB flash drive is not accessible by the host operating system.

• Connect a client (Such as a laptop) with a supported USB to Ethernet adapter to access the iLO web interface, remote console, CLI, iLO RESTful API, or scripts.

https://support.hpe.com/hpesc/public/docDisplay?docId=a00030072en_us&docLocale=en_US

I'm not really sure if the Service Port can be disabled, but if the request comes from the security team of your company, just let them know that the Operating System has no access at all to any thumb drive connected to that port. Also, the AHS file can only be read by HPE with some special tools they have.

Furthermore, I don't think it's a good idea to disable the Service Port, as its functionalities and features are unique.

Hope this helps.

[azzz123]

Appreciate the feedback. Sadly its a customer requirement so cannot do much convincing. I've been hearing mixed responses regarding whether its possible or not. Will update this thread once I find a definitive solution as to whether it can be disabled or not.

[Suman_1978]

Hi,

I am not sure if HPONCFG has this option to disable iLO SP, but how about using GUI?

Thank You!
I work with HPE but opinions expressed here are mine.
Recent Support Video Releases

[ShabbyBRO]

There is no option to disable it using HPONCFG. Also, we are moving away from legacy softwares hence there aren't any enhancements done to RIBCL.  All the things HPONCFG does can be done using Restful API and much more.

Now coming to the issue you can Use ILO GUI > Security >Access options >  ILO Service Port and toggle it off.

The Service Port will get disabled.

Thank You

I work for HPE.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]

[Sunitha_Mod]

Hello @azzz123,

Let us know if you were able to resolve the issue.

If you have no further query and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.