Using ilorest to change ProLiant DL BIOS attributes not working

[Eofor]

I would appeciate some advice what I am doing wrong or what I should try.  I am trying to change “Secure Boot” and “Wake-on-LAN” using ilorest and what I am doing is having no effect as on restart the settings are unchanged. The screenshot below shows that what I did appeared to work.  I have tried this numerous times both trying to enable and trying to disable the settings after successfully manually changing them from the F9 boot screen.

I am doing the following:

1. Save the current BIOS configuration settings (ilorest save --selector bios --json --f savegen11bios.json -vvv)

2. Edit the saved settings file to change the two values, swapping enabled and disabled,  and leaving everything else alone. I did try using a JSON file with only the attributes to be changed included and ilorest reported that no changes were detected., but using the complete saved file with edits tells me that the changes were applied.

          "SecureBootStatus": "Enabled"

          "WakeOnLan": "Disabled"

3. Load the new settings using the edited file (ilorest load -f editgen11bios.json -vvv)

4. Reboot the server

ilorest commands

Here is the JSON file with most of the intermediate attribute values removed for display in this post so that it isn't too long,

[
  {
    "Comments": {
      "BIOSDate": "08/09/2024",
      "BIOSFamily": "U63",
      "Manufacturer": "HPE",
      "Model": "ProLiant DL320 Gen11",
      "SerialNumber": "removed",
      "iLOVersion": "iLO 6 v1.62"
    }
  },
  {
    "#Bios.v1_0_4.Bios": {
      "/redfish/v1/systems/1/bios/settings/": {
        "@odata.context": "/redfish/v1/$metadata#Bios.Bios",
        "@odata.etag": "W/\"928207F4E4283737372DFA5C8D5F0D49\"",
        "@odata.id": "/redfish/v1/systems/1/bios/settings/",
        "AttributeRegistry": "BiosAttributeRegistryU63.v1_2_30",
        "Attributes": {
          "AccessControlService": "Enabled",
     	...
          "SecureBootStatus": "Enabled",
   	...
          "WakeOnLan": "Disabled",
 	...
          "iSCSISoftwareInitiator": "Enabled"
        },
        "Id": "settings",
        "Name": "BIOS Pending Settings"
      }
    }
  }
]

Regards,

Eofor

[Moderator edit: Erased the confidential info.]

[shiva_jr]

Hi @Eofor ,
    Please refer iloRest commands examples for BIOS attributes.
Regards,
Shiva_JR
Please mark as 'Accepted solution' and give 'Kudos' if my post worked.

[Eofor]

Thank you, I did read the manual.  I am hoping for some advice from someone who has used the application in a non-interactive mode. Curiously the steps I followed seem to work for setting up the VROC controller even using a stripped down JSON that has nothing except the attributes I want to change, but have no effect on Secure Boot and Wake-on-LAN. 

Regards,

Eofor

[MV3]

Hello,

To change Secure Boot and Wake-on-LAN settings via the iLO REST API, follow these steps:

First authenticate and obtain a session token.

GET /rest/v1/bios
Authorization: Bearer your_access_token

PATCH /rest/v1/bios
Authorization: Bearer your_access_token
Content-Type: application/json

{
  "SecureBoot": {
    "Enabled": true
  },
  "WakeOnLan": {
    "Enabled": true
  }
}

Hope this helps answer your quire.

[support_s]

Hello,

Let us know if you were able to resolve the issue.

If you have no further query, and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.