Skip to main content
Ask Question
Power Management
Asked a question 4 years ago

Power control broke after an iLO4 firmware upgrade -- what now?

Where am I?

In Bright Computing, Inc. you can ask and answer questions and share your experience with others!

Power control broke after an iLO4 firmware upgrade -- what now?

The Built-in Power Control is Failing After Upgrading the Firmware of iLO4 to version 2.30

Bright uses the locfg.pl7 script, which comes from HP, to do power control for servers over iLO for HP servers. The locfg.pl7 script is written in Perl. The Perl package which is provided from the base distributions are linked to the OpenSSL version that comes with the base distribution.

Upgrading the firmware of the HP iLO4 to version 2.30 while enabling Advanced Encryption Standard (AES) on SLES11 systems breaks the built-in power functionality in Bright.

# /cm/node-installer/scripts/ilocommands/locfg.pl7 -s 10.57.22.22:443 -f /cm/node-installer/scripts/ilocommands/Get_Host_Power.xml

Error: Failed to establish SSL connection with 10.57.22.22 .

The root cause of this issue is that firmware version 2.30 with AES enabled requires a newer version of OpenSSL that supports TLS 1.2, which is not available from the official repositories of SLES11.

Possible Workarounds

Disable AES: this is the most straightforward approach in case the base OS doesnโ€™t provide an OpenSSL version which supports TLS 1.2.

Create custom power scripts which will directly access the iLO through ssh instead of using the locfg.pl7 script.

Build custom Perl version and link it to the OpenSSL version which supports TLS 1.2.

Upgrade to a base distribution which comes with an OpenSSL version which supports TLS 1.2.