Logging In to the iBMC WebUI

Scenarios

Log in to the iBMC WebUI. The following uses Internet Explorer 11.0 as an example.

• A maximum of four users can log in to the iBMC WebUI at the same time.
• By default, the system timeout period is 5 minutes. If no operation is performed on the WebUI within 5 minutes, the user will be automatically logged out of the WebUI.
• The system locks your account if you enter incorrect passwords for consecutive five times. You are automatically unlocked 5 minutes later, or an administrator can unlock your account on the CLI.
• For security purposes, change the initial password upon the first login and change the password periodically.
  Before using Internet Explorer 11.0 to log in to the iBMC WebUI, enable the compatibility view as follows:

  1. Click in the upper right corner of the browser.
  2. Choose Compatibility View Settings from the shortcut menu.
  3. In the displayed Compatibility View Settings dialog box, enter the iBMC IP address in the Add this website text box and click Add.
  4. Deselect Use Microsoft compatibility lists.

     After the iBMC IP address is added to the compatibility view, improper display on the iBMC WebUI will be rectified.

Procedure

1. Check that the client (for example, a local PC) used to access the iBMC meets the operating environment requirements.

   If you want to use the remote control function, ensure that the Java running environment (JRE) of a supported version is available.

   Table 10-1 Operating environment

   OS	Browser	Java Runtime Environment
   Windows 7 32-bit Windows 7 64-bit	Internet Explorer 11.0	JRE 1.7 U45 JRE 1.8 U45 JRE 1.8 U144
   	Mozilla Firefox 50.0 to 67.0
   	Google Chrome 55.0 to 73.0
   Windows 8 32-bit Windows 8 64-bit	Internet Explorer 11.0	JRE 1.7 U45 JRE 1.8 U45 JRE 1.8 U144
   	Mozilla Firefox 50.0 to 67.0
   	Google Chrome 55.0 to 73.0
   Windows 10 64-bit	Internet Explorer 11.0 Internet Explorer Edge	JRE 1.8 U45 JRE 1.8 U144
   	Mozilla Firefox 50.0 to 67.0
   Windows Server 2012 R2 64 bits	Internet Explorer 11.0	JRE 1.8 U45 JRE 1.8 U144
   	Mozilla Firefox 50.0 to 67.0
   Windows Server 2016 64-bit	Internet Explorer 11.0	JRE 1.8 U45 JRE 1.8 U144
   	Mozilla Firefox 50.0 to 67.0
   Windows Server 2008 R2 64-bit	Internet Explorer 11.0	JRE 1.7 U45 JRE 1.8 U45 JRE 1.8 U144
   	Mozilla Firefox 50.0 to 67.0
   	Google Chrome 55.0 to 73.0
   Windows Server 2012 64-bit	Internet Explorer 11.0	JRE 1.7 U45 JRE 1.8 U45 JRE 1.8 U144
   	Mozilla Firefox 50.0 to 67.0
   	Google Chrome 55.0 to 73.0
   Red Hat Enterprise Linux 6.0 64-bit	Mozilla Firefox 50.0 to 67.0	JRE 1.7 U45 JRE 1.8 U45 JRE 1.8 U144
   MAC OS X v10.7	Safari 9.0	JRE 1.7 U45 JRE 1.8 U45 JRE 1.8 U144
   	Mozilla Firefox 50.0 to 67.0

2. Use a network cable to connect the Ethernet port on the local PC to the iBMC management network port.
3. Set an IP address and subnet mask or route information for the local PC to enable the PC to communicate with the iBMC.
4. Open Internet Explorer, enter https://iBMC management network port IP address in the address box, and press Enter.

   The iBMC login page is displayed.

   • If the message "There is a problem with this website's security certificate" is displayed, click Continue to this website (not recommended).

   • If a security alert is displayed, you can ignore this message or perform any of the following to shield this alert:

     • Import a trust certificate and a root certificate to the iBMC.

       For details, see "Importing the iBMC Trust and Root Certificates" in the Atlas 900 Compute Node iBMC (V3.01.00.00 or Later) User Guide.

     • If no trust certificate is available and network security can be ensured, add the iBMC to the Exception Site List on Java Control Panel or reduce the Java security level.

       This operation poses security risks. Exercise caution when performing this operation.

   Figure 10-1 iBMC login page
   

5. Logging in to the iBMC.
   • Log in as a local user.
     1. Select a language.
     2. On the login page displayed, enter the user name and password.

        For details about the default user name and password of the iBMC system, see Atlas Hardware Product User List.

     3. Select Local iBMC or Automatic matching from the Domain drop-down list.
     4. Click Log In.

        After the login is successful, the Home page is displayed.

        • The system may display a message indicating incorrect user name or password when you attempt to log in using Internet Explorer after the system is upgraded. If this occurs, press Ctrl+Shift+DEL and click Delete to clear the browser cache. Then, attempt to log in again.
        • If the login still fails, choose Tools > Internet Options > Advanced in the menu bar and click Reset to restore default settings of Internet Explorer. Then attempt to log in again.
   • Log in as an LDAP user.
     Before login, ensure that the following settings meet the requirements:

     • A domain controller exists on the network, and a user domain and LDAP users have been created on the domain controller.
     • On the iBMC WebUI, the LDAP function has been enabled, and the LDAP user domain and user group have been configured. For details, see the LDAP page.

     For details about how to create a domain controller, a user domain, and LDAP users, see domain controller documents. The iBMC provides only the access function for LDAP users.

     1. Select a language.
     2. Enter the LDAP user name and password.
        • The LDAP user name can be in either of the following formats:
          • LDAP user name (in this case, Domain can be Automatic matching or a specified domain)
          • LDAP user name@Domain name (in this case, Domain can be Automatic matching or a specified domain)
        • The password cannot exceed 255 characters.
     3. Select the LDAP user domain from the Domain drop-down list.
        • Local iBMC: Select this option to log in as a local user. The iBMC automatically locates the user from the local user list.
        • Configured domain servers: Select a domain server to log in as an LDAP user. The iBMC automatically locates the user from the domain server.
        • Automatic matching: If this option is selected, the iBMC searches for the user from the local user list first. If no match is found, the iBMC searches from the domain servers in the sequence displayed in the Domain drop-down list.
     4. Click Log In.

        After the login is successful, the Home page is displayed.

   • Log in as an LDAP user.

     Kerberos environment:

     • The client supports the Windows 10 64-bit operating system and the Internet Explorer 11.0 browser.
     • The Kerberos server supports the Windows Server 2012 R2 64-bit and Windows Server 2016 64-bit operating systems.

     Before login, ensure that the following settings meet the requirements:

     • Kerberos is enabled and Kerberos function and user group are configured on User & Security > Kerberos on the iBMC WebUI. For details, see "User & Security > Kerberos" in the Atlas 900 Compute Node iBMC (V3.01.00.00 or Later) User Guide.
     • The Kerberos user group and user have been created on the Kerberos server, and the user has been added to the Kerberos user group. This user is a user of the client OS.

     Kerberos users can log in to the iBMC in either of the following modes:

     • Log in as a Kerberos domain user.
       1. Select a language.
       2. Enter the Kerberos user name and password.
          • The Kerberos user name can be in either of the following formats:
            • Kerberos user name (in this case, Domain can be Automatic matching or a specified domain)
            • Kerberos user name@domain name (In this case, Domain can be Automatic matching or a specified domain, and uppercase letters must be used in the domain name.)
          • The password cannot exceed 255 characters.
       3. In the Domain drop-down list, select a Kerberos user domain (for example, ADMIN.COM(KRB)) or Automatic matching.
       4. Click Log In.
       5. The Home page is displayed.
     • Log in over SSO.
       1. Use the Kerberos user name and password configured on the Kerberos server to log in to the client OS.
       2. Enter the fully qualified domain name (FQDN) of the iBMC in the address box of the browser, for example, https://host name.domain name.

          The iBMC login page is displayed.

       3. Click SSO.

          After the login is successful, the Home page is displayed.