Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

The following issues are resolved in this version:

- Addressed the security vulnerability reported in the HPE Security Bulletin HPESBHF03831.
- Ensured iLO 2 resets when the Command Line Interface command oemhp_enforce_aes value has changed from the configured setting.
- Removed the text '3DES' from the iLO 2 log when the Security Encryption Enforcement Setting 'Enforce AES Encryption' is configured.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• OpenSSH protocol negotiation handshake fails if the option 'macs hmac-sha1' is specified.

• Added the ability to disable and enable WS Management (Web Services for Management) access in the iLO 2 Command Line Interface (CLI) and the iLO 2 Remote Insight Board Command Language (RIBCL).

  • For more information, please see published advisory at: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00040721en_us

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• Addressed the security vulnerabilities reported in the HPE Software Security Response Team Security Bulletin HPESBHF03797.

• Added the ability to disable and enable WS Management (Web Services for Management) access in the iLO 2 Web Interface.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• Issues published in HPE Security Bulletin Document ID HPESBHF03705.
• 'Application Blocked by Java Security' Java applet errors. If the applet displays an 'Error: Click for details' and the details are a 'ClassNotFoundException' application error, please select the 'Reload' button.

• Added AES128-CTR, AES256-CTR ciphers and HMAC-SHA2-256 authentication to the SSH server.
• Added the SHA256 algorithm for the CSR signature.
• Added option to import a Trusted CA Certificate for Directory Servers using LDAPS.
• CBC ciphers used by the SSH server can now be disabled by setting the 'Enforce AES Encryption' option.
• 3DES ciphers used by the webserver can now be disabled by setting the 'Enforce AES Encryption' option.
• Added the ability to disable and enable the iLO 2 HTTPS web server in the Command Line Interface. The HTTPS web server is disabled when the SSL port is set to 0 in the CLI. WARNING: Disabling the iLO 2 HTTPS web server will result in reduced functionality. The iLO 2 web interface, single sign on, directory logins, and some iLO 2 utilities like the HP Lights-Out Configuration Utility will no longer function if the ILO 2 HTTPS web server is disabled.

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

• The Java IRC will not start when JRE versions 7 or 8 are installed and TLS 1.1/1.2 is enabled.
• Addressed the vulnerability mentioned in CVE-2015-4000 and SSRT102268 (client-side SSL/TLS connections)

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

-Fixes
• Addressed possible security vulnerabilities mentioned in the HP Software Security Response Team reports SSRT101745 and SSRT101886.
• Disabled SSL version 3. iLO 2 2.27 and later supports only TLS 1.0.
• Addressed CVE-2014-0224 false positive.
• The current user cannot be deleted by using the RIBCL command DELETE_CURRENT_USER.

-Enhancements
• Added a CLI command to enable or disable the SSLv3 cryptographic protocol. The command is 'set /map1/config1 oemhp_ssl_v3_enable=yes' to enable SSLv3 or 'set /map1/config1 oemhp_ssl_v3_enable=no' to disable SSLv3. iLO will reset if the command state transitions from yes to no or from no to yes.
• Hard drive status reporting on the System Health Summary web page now displays smart errors.
• Added additional permission attributes to the JAR Manifest file for the Java Remote Console and Virtual Media applets.
• Added a watchdog timer for firmware lockups. iLO 2 will reboot if the firmware does not respond for 60 minutes.
• Added support for retrieving a certificate from a trusted HP SIM 7.0 and later server.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

• iLO 2 might stop responding after security scanners run the Heartbleed OpenSSL bug detection scan.
  • Note: iLO 2 is not vulnerable to the HeartBleed OpenSSL bug because the iLO 2 RSA SSLC library does not support the TLS Heartbeat extension.
• iLO 2 might authenticate users with incorrect passwords when it is configured with Linux LDAP.
• The Integrated Remote Console could fail to launch with Internet Explorer 11.
• Hard drive status reporting in the iLO web interface, CLI, and RIBCL now matches iLO 3 reporting.
• The SCSI command 0x51 (GET DISC INFORMATION) added in version 2.23 was removed as it caused problems when an ISO is mounted on Windows systems.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• When the iLO DNS name was changed the updated DNS name would not appear in the OA until after a system reset.
• Users were unable to mount a Virtual CD/DVD-ROM in SLES 11 SP3.
• The following message appears when the Java IRC is started: This application will be blocked in a future Java security update because the JAR file manifest does not contain the Permissions
  attribute. This message will continue to appear when you run Java 7 unless you install an SSL certificate that is signed by a trusted Certification Authority.
• After importing a SSL certificate the iLO 2 webGUI could become slow to respond.
  

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.
This release allows IPMI over LAN to be disabled. The ability to disable IPMI over LAN is needed to address CVE-2013-4786.

• iLO 2 did not allow IPMI over LAN to be disabled on c-Class blade servers.
• The IPMI over LAN feature would continue to function on ML/DL servers after the iLO 2 was rebooted despite the feature being disabled.
• iLO 2 on c-Class blade servers failed to reboot after being reset to the factory defaults via the Onboard Administrator CLI.
• iLO 2 RIBCL scripts that contained the command CERT_SIGNATURE_ALGORITHM were not displayed in Microsoft Internet Explorer.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

• The minimum password length setting could reset to zero from the previously set minimum length when MIN_PASSWORD tag isn’t specified in the XML script. This occurs in version 2.12 and later.
• Path MTU Discovery not working in iLO 2 versions 2.12 and later.
• Virtual Media could randomly fail to mount in SUSE Linux Enterprise Server 11.
• Option to switch between 'UHCI' and 'System USB' for iLO 2 Virtual Keyboard and Mouse was missing for HP ProLiant DL585 G5/G6 Servers.
• iLO 2 Login webpage could display unsupported browser error message when using Internet Explorer 10.
• iLO 2 constantly rebooting after upgrading to version 2.12 or 2.15 on p-Class Blade Servers.
  Note: Last supported iLO 2 firmware version for p-Class servers is 1.82 as stated in the Customer Advisory http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02843213
• SSH to iLO 2 could fail with clients running OpenSSH 6.2p1, OpenSSL 1.0.1e.
  

• iLO 2 firmware now includes the option to send a Gratuitous ARP on boot.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

• SSH to iLO 2 might fail with clients running OpenSSH 5.9 and OpenSSL 1.0.1.
• ActiveX Integrated Remote Console App (DVC.dll) is now signed.
• Power supply (P/N. 506822-201) might return 0 watts power consumption intermittently on HP ProLiant DL/ML servers.
• The HP Online Configuration Utility (HPONCFG) may exit abnormally with an error after locking the iLO configuration using the sample script lock_configuration.xml.

• Added an option to switch between 'UHCI' and 'System USB' for iLO 2 Virtual Keyboard and Mouse on every HP ProLiant G5/G6 platform except for the system(s) noted in the Known Issues section of the Release Notes tab.

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

• Enabled SSL empty fragments by default to address the CBC-mode cipher IV weakness mentioned in CVE-2011-3389.
• Addressed vulnerabilities mentioned in CVE-2011-4576, CVE-2012-2110 and CVE-2012-2131.
• Added countermeasures for the ICMP blind connection-reset attack mentioned in CVE-2004-0790.
• CLI may show incorrect boot source list when there is a sixth bootable device in the system.
• Increased the randomness of the initial seeding of the Pseudo-Random Number Generator to improve the security of the self-signed SSL certificates.
• iLO 2 may become inaccessible on Blade servers after a Virtual Connect failover.
• Added countermeasures for the ASF/RMCP ping pong attack. iLO 2 now remains responsive during ping pong attacks and iLO 2 no longer replies to malformed ASF ping requests.
• Improved the iLO 2 Browser Cookie behavior. Login and session cookies are cleaned up and are marked with the 'secure' attribute.
• Fixed a VSP Log lock up issue when a user presses and holds a key while browsing the log.
• Increased VSP buffer size to prevent iLO 2 from dropping characters during POST and GRUB.
• Fixed a segmentation fault seen in Solaris 10 when using ipmitool to read the FRU.

• Added SHA1 Signing Algorithm as an option under Administrator->Security->SSL Certificate.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

• Hard Drive status reporting is now consistent across webGUI, CLI and RIBCL.
• Added missing properties in CLI under /map1/blade1 target on c-Class blades.
• VSP on serial port no longer remains connected after invoking stop /system1/oemhp_vsp1.
• iLO 2 firmware could not be upgraded when using IE9 browser.
• iLO 2 clock would jump from Dec 30th to Jan 1st during leap years.
• iLO 2 never sent out an ARP before replying to a ping request. It could cause iLO 2 to be unreachable from outside subnets when the gateway has redundant NICs and a NIC failover occurred.
• SSH to iLO 2 would fail with clients running OpenSSH 5.8p2 and later.
• Virtual Floppy image could not be mounted through Integrated Remote Console on Microsoft Windows Vista/Windows 7.
• Unable to save files to a virtual USB drive mounted through Integrated Remote Console on Microsoft Windows Vista/Windows 7.
• Changed the privilege level of the IPMI power control commands from user to operator.
• Ambient temperatures below zero Celcius were reported as large positive values, causing iLO 2 to log System Overheating error messages and shut down the server.
• iLO 2 firmware could randomly stop responding and then two minutes later reboot after executing IPMI power commands.
• iLO 2 may stop responding on a HP ProLiant WS460c G6 while shutting down Microsoft Windows 7 Operating System.
• HP ProLiant servers may stop responding or display a red screen during POST. However, this issue has only been observed on HP ProLiant WS460c G6 Workstation Blade.
• HP ProLiant ML330 G6 with non-redundant Power Supply cannot be powered OFF after upgrading iLO 2 firmware to version 2.06 or 2.07.
• Set autocomplete parameter to off in the iLO 2 login webpage.
• Missing characters when pasting text into the serial CLI.

• Added Virtual Serial Port logging feature. Advanced License is required for this feature.
• Enhanced the CLI prompt. It can now be configured to show the server name.
• Added TCP Keep-Alive support.
• Added System Event Logging for IPMI watchdog timer events.

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

• The ipmitool for Linux might report the memory sensor as 'disabled' on HP ProLiant G6 servers.
• Textcons in HP ProLiant G6 servers with Intel processors might display 'unsupported text mode' during POST.
• Integrated Lights Out (iLO) 2 might stop responding in the HP ProLiant DL785 G5/G6, if Linux ceases to respond and the PCI bus fails to respond.
• Onboard Administrator might fail to retrieve Integrated Management Log /iLO Event Log/Server Information from iLO 2 when Two-Factor Authentication is enabled.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.

The following problems have been resolved in iLO 2 version 2.06 firmware:

• Disabled SSL/TLS renegotiation to protect iLO 2 against SSL/TLS plaintext injection attacks (CVE-2009-3555).
• Fixed security vulnerabilities mentioned in CVE-2008-7270 and CVE-2010-4180.
• Fixed an issue with ROM randomly fails to communicate to iLO 2 during POST causing some Mezzanine cards on blades to get misconfigured.
• Fixed an issue where the iLO 2 login page could be requested and displayed in HTTP mode instead of HTTPS secure mode.
• Fixed an issue with Set_Pwreg_Alert_Threshold.xml doesn't validate parameters correctly.
• Fixed an issue with Set_Pwreg_Alert_Threshold.xml gives false message when server is in aux power.
• Fixed an issue with iLO 2 accepting invalid value for warning_duration.
• Fixed an issue where user cannot exit from serial CLI when login prompt is shown.
• Fixed an issue where pressing ESC + SHIFT 9 key sequence and ESC + SHIFT Q key sequence multiple times can cause serial CLI to stop responding.
• Fixed an issue where the Linux console via iLO 2 Virtual Serial Port could no longer work after iLO 2 reboots.
• Fixed an issue where mounting Scripting Virtual Media using an invalid hostname in the URL can cause iLO 2 network to stop responding.

• Added Brown-out Recovery Feature for ML/DL servers.
• Added Custom SSL Certificate Signing Request (CSR).
• Added Support for 2048-bit RSA key in SSL CSR.
• Added XML command to delete SSH keys.
• Added option to disable the Virtual Media Access port.
• Added Support for Java 64-bit JVM/JRE.
• Added Support for Integrated Remote Console on Internet Explorer 64-bit Editions.
• Added support for Internet Explorer 9, dropped support for Internet Explorer 6.
• Improved performance of the iLO 2 Virtual Serial Port when connected via SSH.

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.
iLO 2 v2.05 replaces v2.01 to address issues with iLO stops responding on different scenarios.

Problems Fixed

The following problems have been resolved in iLO 2 version 2.05 firmware:

• iLO 2 now has the ability to change the server's boot order via XML script.
• Ambient temperature history is now displayed properly.
• Get System Boot Options IPMI command is now working.
• Fixed an issue where the Average Power could exceed the CAP.
• Disabling Power Capping via iLO 2 GUI on ML370 G5 is now working.
• Fixed the 'Script Failed' error message when running Get_EmHealth.xml via HPONCFG.
• Fixed an issue where iLO 2 could stop responding when running Nessus Scanner, FoundStone or similar port scan tool in the iLO2 network.
• Fixed an issue where iLO 2 could stop responding after receiving an Ethernet packet with protocol type 0x8874.
• Fixed an issue introduced in iLO 2 v1.81 where resetting iLO 2 could randomly cause Windows Server 2003 to hang on shutdown.
• Fixed an issue where scr een capture feature would not capture the Fault buffer on a blade after cold boot.
• Fixed an issue where iLO2 Virtual Serial Port could make GRUB drop characters.
• Fixed an issue introduced in iLO 2 v2.00 where resetting iLO 2 to factory defaults could erase the Administrator account and/or show no MAC address.
• Fixed an issue in iLO 2 where attempting to remove LDAP schema-less DIR_GROUP names and privileges using XML scripts could fail.
• Fixed an issue where iLO 2 would reply ARPs to the host which MAC address is in the Ethernet header instead of replying the ARP to the host which MAC address is in the ARP body.
• Fixed an issue where iLO 2 could randomly crash when copying files via Secure Scripting Virtual Media (HTTPs).
• Fixed an issue where iLO 2 would crash when Secure Scripting Virtual Media is used with the BOOT_ONCE option and the server reboots.
• Fixed an issue introduced in iLO2 2.00 where iLO 2 could become unresponsive, if EMS console is set to iLO 2 Virtual Serial Port and during boot, BitLocker requests the user to type-in the recovery key.
  

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.
iLO 2 v2.01 replaces v2.00 to address an issue that would prohibit an HPSUM firmware update to future releases

Problems Fixed

The following problems have been resolved in iLO 2 version 2.01 firmware:

• iLO 2 v2.00 would not allow an HPSUM upgrade to future iLO 2 firmware releases.
• While iLO 2 is being rebooted, iLO 2 could stop responding after the physical Power Button was pressed to power-on an HP ProLiant ML and/or DL G6 server
• The Virtual Media Applet from the HP BladeSystem Setup Wizard may fail to launch
• iLO 2 could stop functioning when connecting the Virtual Media CDROM through the Command Line Interface (CLI) and inserting a space (%) in the path
• After iLO 2 is reset on a system running Linux, the Virtual Serial Port (VSP) session may never return
• When the iLO 2 DNS client name contains a leading numeric character, the iLO 2 DNS client may not be able to resolve a Directory Server
• iLO 2 could log multiple instances of a server Reset event in the iLO 2 event log for a single actual occurrence
• RIBCL could intermittently add a '/' character to the end of the XML output tag
• When the Virtual Keyboard/Mouse is set to the System USB Port on HP ProLiant DL385 G5p and HP ProLiant DL385 G6 servers, iLO 2 could stop responding
• The screen capture feature could randomly fail to capture a server fault event
• The screen capture file could not be uploaded to a Microsoft IIS web server
• The CLI command show /system1/memory would always show the DIMM information of slot #1, regardless of the number used
• The Scripting Virtual Media interface could disconnect when simultaneously booting multiple BladeSystem servers from the Firmware Deployment Tool
• Virtual Media performance improvements
• Virtual Serial Port session performance improvements
  

Enhancements/New Features

Added the following new features:

• New HP Intelligent Power Distribution Unit
• Fully Qualified Domain Name (FQDN) for imported certificates
• A Recovery Payload that will help users recover iLO 2 from a failed firmware upgrade via FTP. Additional details can be found in the new User Guide which can be found at http://www.hp.com/go/ilo
• 'IPMI over LAN' functionality. The IPMI 2.0 RMCP+ (or Linux ipmitool 'lanplus') protocol is supported with this release.
• IPMI Serial Over LAN (SOL)
• Data Center Manageability Interface (DCMI) v1.0 specification
• Enhanced the 'in band' Intelligent Platform Management Interface (IPMI) to comply with the IPMI specification version 2.0
  

Upgrade Requirement:
Recommended - HP recommends users update to this version at their earliest convenience.
This is the latest maintenance/bug fix release for iLO 2.

Firmware Dependency:
This update also requires version 1.12.0.0 of the 'hpqilo2.sys' (health) device driver.
Problems Fixed:
Fixed an issue prompting Windows ID 57 'Communication Timeout' errors in the Windows Event Viewer.
Issue was caused when iLO was extremely busy servicing Virtual Media requests and
an 'hpqilo2.sys' (health) driver IPMI request timed out. This caused the iLO 2 FW
and the 'hpqilo2.sys' driver lose synchronization between the incoming request and
the outgoing response. The visible indicator of this issue is multiple 'ID 57' errors
logged in the Windows Event Viewer by the hpqilo2.sys driver. This update also requires
version 1.12.0.0 of the 'hpqilo2.sys' (health) device driver.
Fixed an issue that could cause iLO 2 UHCI controller to halt after detecting a PCI
timeout error on HP DL385 G5p and HP DL385 G6 servers. Symptoms of this issue are: 1) iLO 2
Virtual Keyboard/Mouse stop responding, 2) Windows Server 2003 hangs when shutting down,
3) Windows Server 2003 suddenly stops responding.
Fixed an issue introduced in iLO 2 v1.81 where the iLO 2 Virtual Keyboard/Mouse could
fail to initialize when installing Linux or VMWare ESX 4.0.

Optional: Users should update to this firmware version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

Addressed an issue that could cause the fans on a c-Class enclosure to spin up and remain close to 100% when iLO 2 does not obtain HDD temperature data for more than one minute

Addressed an issue that could cause a system with redundant fans to shut down when one fan rotor failed before POST

Update Requirements - Optional: Users should update to this firmware version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

PROBLEMS FIXED SINCE LAST RELEASE:
- Fixed an issue in LDAP schemaless authentication code that can cause iLO 2 to stop responding.
- Addressed an issue with iLO interfering with a flash of the G6 SAS Backplane and causing the flash to fail.
- Addressed an issue that could cause the fans on a c-Class enclosure to spin up when the Smart Array controllers are disabled.

Aug 27, 2014 - 6 min - Uploaded by MusicEverywhereNetReality-Music, yang tidak saja menampilkan performa sang musisi tapi juga dapat. Feb 2, 2017 - 4 min - Uploaded by MusicEverywhereNetThe Overtunes - Sayap Pelindungmu (Live at Music Everywhere) **. The Overtunes - Sayap Pelindungmu. By EDOSHOW, Hip Hop music from sidikalang, ID on ReverbNation. Dec 4, 2013 - 4 min - Uploaded by Sony Music Entertainment IndonesiaTheOvertunes - Sayap Pelindungmu 'Sayap Pelindungmu' adalah single terbaru. Download lagu the overtune sayap pelindungmu.

• Fixed an issue that would corrupt the iLO 2 firmware image if a Remote Console session was opened while the flash was in progress. Additional information can be obtained from the following customer advosory:

• Fixed an iLO 2 hang that would occur when the On-Board Administrator requested a server name change using a string larger than 32 characters.
• Fixed an issue where the iLO 2 would become unresponsive during a broadcast storm. This could also cause the HP agents for Linux to seg-fault.

• Addressed a problem introduced in iLO 2 v1.60 that prevented the network interface to iLO on the p-Class blade SUVI dongle from working
• Fixed an issue in the iLO 2 TCP/IP stack that could cause iLO 2 to stop servicing a listening port after receiving a rogue TCP packet with RST flag set
• Fixed an issue where iLO could cause the ASR timer to trigger during a broadcast storm

• Dynamic Power Capping extended to support G6 systems
• iLO 2 manages fan control and system cooling in G6 systems
• Support for expanded health monitoring in G6 systems, including monitoring Hard Drive and DIMM temperatures
• Support for industry standard NC-SI Shared Network Port for embedded network interface controllers
  

• Addressed a possible iLO Fatal exception after attempting a FW upgrade
• Improved presentation of multiple properties in the iLO 2 SMASH CLP
• Improved the gathering of historical power consumption data
• Improved several communication paths that cause blades to lose communication with the Onboard Administrator, resulting in a 'red X' presented in the OA
• Fixed iLO SSH interface defect that could reset iLO and lose any active connections
• Improved the robustness of firmware update to prevent potential corruption if iLO 2 is reset during a flash or the firmware update fails to complete
• Improved IRC by allowing multiple users so simultaneously access .iso image files

New licensable features in iLO 2 v1.70 include:

• HP Dynamic Power Capping
• iLO Text Console
• iLO Video Player

Addressed an issue where the system ROM can experience communication loss with iLO 2 during a cold boot.
This prevents several side-effects:
1) iLO receives large power consumption data which can result in oversubscription
and the inability to power-on all blades.
2) iLO fails to retain virtual MAC addresses for some adapters
3) Host ROM cannot record events to the Integrated Management Log
4) Additional adapters appear in RBSU and under device management

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

Fixed an issue using the delete command to delete a user via the CLP which may confuse the
pointer to the correct target.

Added a message to report reason when there is a failure to import SSH DSA key.

Fixed an issue that at times will cause a 'console is in use' message when switching
between Remote Console and Integrated Remote Console.

Fixed an issue that under certain circumstances would cause the iLO firmware to crash when mounting a virtual
media image via the Integrated Remote Console or the Virtual Media applet.

Fixed an issue that would cause the user to receive an error message when opening multiple IRC sessions from the OA.

Fixed a memory leak in the iLO2 SSH server engine that would cause iLO2 to stop responding after few hours of repeating login/logout

Fixed an issue where OpenVMS SSH clients would fail to connect to iLO2 SSH.

Fixed duplicated files shown by Virtual Folder.

Fixed an issue that caused iLO2 to stop responding after an OA failover.

Fixed a vulnerability where using a blank username and password results in a successful login to the serial port CLI interface.

Fixed an issue where iLO2 would become unresponsive after using HPASMCLI to set computer name in Solaris

Added the ability to install SSH keys using the scripted RIBCL interface

iLO 2 can co-exist on an IPV4 and IPV6 mixed network environment.
iLO 2 continues to support IPv4 only.

Updated iLO2 SSH server engine and now support 3 simultaneous connections