FusionServer Pro 2488H V6 Server Configuration Modification and Capacity Expansion Guide for Channel Distributors 01
Logging In to the iBMC WebUI
Scenario
Log in to the iBMC WebUI. The following uses Internet Explorer 11.0 as an example.
- A maximum of four users can log in to the iBMC WebUI at the same time.
- By default, the system timeout period is 5 minutes. If no operation is performed on the WebUI within 5 minutes, the user will be automatically logged out of the WebUI.
- The system locks a user account if the number of consecutive incorrect password attempts reaches the maximum. The user account is automatically unlocked after the locking duration reaches the value specified.
- For security purposes, change the initial password upon the first login and periodically change the password.
- If resources fail to be obtained due to unstable network connection, the iBMC WebUI may be displayed abnormally. If this occurs, refresh the browser and log in to the iBMC WebUI again.
- If TLS version is set to Only TLS 1.3 on the User & Security > Security Management page, the following browser versions are not supported:
- All Internet Explorer versions
- All Safari versions
- Microsoft Edge 12 to 18
- Mozilla Firefox 45.0 to 62.0
- Google Chrome 55.0 to 69.0
- Before using Internet Explorer to log in to the iBMC WebUI, enable the compatibility view and select "Use TLS 1.2".
- Enable the compatibility view as follows:
- Click
in the upper right corner of the browser.
- On the shortcut menu displayed, click Compatibility View Settings.
- In the Compatibility View Settings dialog box displayed, enter the iBMC IP address in the Add this website text box and click Add.
- Deselect Use Microsoft compatibility lists.
After the iBMC IP address is added to the compatibility view, improper display on the iBMC WebUI will be rectified.
- Click
- Select "Use TLS 1.2" as follows:
- Choose Internet Options > Advanced.
- In the Security area, select Use TLS 1.2.
- Enable the compatibility view as follows:
- If TLS version is set to Only TLS 1.3 on the User & Security > Security Management page, the following browser versions are not supported:
Procedure
- Check that the client (for example, a local PC) used to access the iBMC meets the operating environment requirements.
If you want to use the Java Integrated Remote Console, ensure that the Java Runtime Environment (JRE) meets requirements.
Table 7-1 Operating environmentOS
Browser
JRE
Windows 7 32-bit
Windows 7 64-bit
Internet Explorer 11.0
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
Mozilla Firefox 45.0 to 79.0
Google Chrome 55.0 to 84.0
Windows 8 32-bit
Windows 8 64-bit
Internet Explorer 11.0
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
Mozilla Firefox 45.0 to 79.0
Google Chrome 55.0 to 84.0
Windows 10 64-bit
Internet Explorer 11.0
Microsoft Edge
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
Mozilla Firefox 45.0 to 79.0
Google Chrome 55.0 to 84.0
Windows Server 2008 R2 64-bit
Internet Explorer 11.0
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
Mozilla Firefox 45.0 to 79.0
Google Chrome 55.0 to 84.0
Windows Server 2012 64-bit
Internet Explorer 11.0
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
Mozilla Firefox 45.0 to 79.0
Google Chrome 55.0 to 84.0
Windows Server 2012 R2 64-bit
Internet Explorer 11.0
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
Mozilla Firefox 45.0 to 79.0
Google Chrome 55.0 to 84.0
Windows Server 2016 64-bit
Internet Explorer 11.0
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
Mozilla Firefox 45.0 to 79.0
Google Chrome 55.0 to 84.0
CentOS 7
Mozilla Firefox 45.0 to 79.0
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
MAC OS X v10.7
Safari 9.0 to 13.1
AdoptOpenJDK 8u222 JRE
AdoptOpenJDK 11.0.6 JRE
Mozilla Firefox 45.0 to 79.0
- Configure an IP address for the local PC to enable communication with the iBMC management network port.
- Connect the local PC to the iBMC using any of the following methods:
- Connect the local PC to the iBMC management network port using a network cable.
- Connect the local PC to the iBMC management network port over a LAN.
- Connect the local PC to the iBMC direct connect management port using a USB Type-C cable.
- Only servers configured with the iBMC direct management port support this operation.
- If you use a USB Type-C cable to connect the local PC to the iBMC direct connect management port, the local PC can run only Windows 10.
- Choose Control Panel > Network and Internet > Network Connections, and check whether the local PC is connected to the iBMC network.
- If the local PC is connected to the iBMC using a USB Type-C cable, the iBMC network name is Remote NDS Compatible Device.
- If the local PC is connected to the iBMC using a network cable or over a LAN, the iBMC network name varies depending on the NIC used on the local PC.
- If yes, go to 5.
- If no, contact technical support.
- Open Internet Explorer, enter https://iBMC management network port IP address in the address box, and press Enter.
- If the local PC is connected to the iBMC direct connect management port using a USB Type-C cable, the IP address of the iBMC management network port is 169.254.1.5.
- If the local PC is connected to the iBMC management network port using a network cable or over a LAN, the default IP address of the iBMC management network port is 192.168.2.100.
- Enter the IP address of the iBMC management network port based on actual situation:
- If an IPv6 address is used, use [] to enclose the IPv6 address, for example, [fc00::64].
- If an IPv4 address is used, enter the IPv4 address, for example, 192.168.100.1.
A security alert dialog box is displayed.
Figure 7-1 Security alertIf a security alert is displayed, you can ignore this message or perform any of the following to shield this alert:
Import a trust certificate and a root certificate to the iBMC.
For details, see "Importing the iBMC Trust Certificate and Root Certificate" in the iBMC user guide of the server you use.
If no trust certificate is available and network security can be ensured, add the iBMC to the Exception Site List on Java Control Panel or reduce the Java security level.
This operation poses security risks. Exercise caution when performing this operation.
- Click Continue to this website (not recommended).The iBMC login page is displayed.Figure 7-2 Logging in to the iBMC WebUI
- Log in to the iBMC WebUI.
- To log in to the iBMC WebUI as a local user, perform the following steps:
- Select the language to be used.
- Enter the user name and password.
The default username for logging in to the iBMC system is Administrator, and the default password is Admin@9000.
- Select This iBMC or Automatic matching from the Domain drop-down list.
- Click Log In.
After the login is successful, the Home page is displayed.
- The system forcibly requests you to change the login password upon the first login.
- If you use Internet Explorer to log in to the iBMC WebUI for the first time after an upgrade, the system may display a message indicating that the login fails due to incorrect user name or password. If this occurs, press Ctrl+Shift+Delete, and click Delete in the dialog box displayed to clear the cache of Internet Explorer. Then, attempt to log in again.
- If you fail to log in to the iBMC WebUI using Internet Explorer, choose Tools > Internet Options > Advanced of the browser and click Reset to restore default settings of Internet Explorer. Then, attempt to log in again.
- To log in to the iBMC WebUI as a Lightweight Directory Access Protocol (LDAP) user, perform the following steps:Before login, ensure that the following settings meet the requirements:
- A domain controller exists on the network, and a user domain and LDAP users have been created on the domain controller.
- On the iBMC WebUI, the LDAP function has been enabled, and a user domain and LDAP user name and password have been set.
For details about how to create a domain controller, a user domain, and LDAP users, see domain controller documents. The iBMC provides only the access function for LDAP users.
- Select the language to be used.
- Enter the LDAP user name and password.
- The LDAP user name can be in either of the following formats:
- LDAP user name (in this case, Domain can be Automatic matching or a specified domain)
- LDAP user name@Domain name (in this case, Domain can be Automatic matching or a specified domain)
- The password cannot exceed 255 characters.
- The LDAP user name can be in either of the following formats:
- Select the LDAP user domain from the Domain drop-down list.
- This iBMC: Select this option to log in as a local user. The iBMC automatically locates the user from the local user list.
- Configured domain servers: Select a domain server to log in as an LDAP user. The iBMC automatically locates the user from the domain server.
- Automatic matching: If this option is selected, the iBMC searches for the user from the local user list first. If no match is found, the iBMC searches from the domain servers in the sequence displayed in the Domain drop-down list.
- Click Log In.
After the login is successful, the Home page is displayed.
- To log in to the iBMC WebUI as a Kerberos user, perform the following steps:
Before login, ensure that the following settings meet the requirements:
- Kerberos environment:
- The client supports the Windows 10 64-bit operating system and the Internet Explorer 11.0 browser.
- The Kerberos server supports the Windows Server 2012 R2 64-bit and Windows Server 2016 64-bit operating systems.
- Kerberos configuration:
- Kerberos is enabled and Kerberos function and user group are configured on User & Security > Kerberos on the iBMC WebUI.
- The Kerberos user group and user have been created on the Kerberos server, and the user has been added to the Kerberos user group. This user is a user of the client OS.
Kerberos users can log in to the iBMC in either of the following modes:
- Log in as a Kerberos domain user.
- Select the language to be used.
- Enter the Kerberos user name and password.
- The Kerberos user name can be in either of the following formats:
- Kerberos user name (in this case, Domain can be Automatic matching or a specified domain)
- Kerberos user name@domain name (In this case, Domain can be Automatic matching or a specified domain, and uppercase letters must be used in the domain name.)
- The password cannot exceed 255 characters.
- The Kerberos user name can be in either of the following formats:
- In the Domain drop-down list, select a Kerberos user domain (for example, ADMIN.COM(KRB)) or Automatic matching.
- Click Log In.
- After the login is successful, the Home page is displayed.
- Log in over SSO.
- Use the Kerberos user name and password configured on the Kerberos server to log in to the client OS.
- Open Internet Explorer, enter https://iBMC FQDN address in the address box, and press Enter.
The iBMC login page is displayed.
- Click SSO.
After the login is successful, the Home page is displayed.
- Kerberos environment:
- To log in to the iBMC WebUI as a local user, perform the following steps: