iLO

iLO

iLO is a dedicated microprocessor and firmware subsystem embedded within Hewlett Packard Enterprise server hardware, designed for out-of-band management. It provides administrators with remote control and monitoring capabilities independent of the host server's operating system or power state, a critical function in data center and enterprise computing environments. This technology enables tasks such as remote console access, virtual media mounting, and hardware health monitoring, forming a cornerstone of modern IT infrastructure management.

Overview

The iLO subsystem operates on its own dedicated network connection, typically an Ethernet port, and remains active as long as the server is connected to a power supply. This allows system administrators to manage servers located in remote facilities like a colocation center as if they were physically present. Its functionality is integral to the HPE ProLiant server line and is a key competitor to similar technologies like Dell EMC's iDRAC and Supermicro's IPMI implementations. The ability to perform actions like power cycling or firmware updates remotely significantly reduces downtime and operational costs.

Features and capabilities

Core features include a HTML5-based remote console for full graphical control of the server, support for virtual media such as ISO image files to install operating systems remotely, and integrated health monitoring of components like CPUs, memory, and storage drives. It also provides detailed event logging and alerting through SNMP traps and email notifications. Advanced capabilities in later versions support role-based access control, single sign-on integration with Active Directory, and Redfish API compliance for modern software-defined infrastructure management.

Architecture and components

The iLO module is a separate board within the server, featuring its own ARM-based system on a chip, DDR SDRAM, and flash memory for firmware storage. It connects to the server's mainboard via a PCI Express interface and has access to key hardware sensors through the IPMI and SMBus. This isolated architecture ensures management functions remain available even during host CPU failures or operating system crashes. The firmware, often called the iLO Firmware, is updated independently from the BIOS or server firmware.

Management and configuration

Administrators configure iLO settings through a dedicated web interface or command-line tools like the HPE iLOrest library. Configuration involves setting IP addresses, user account credentials, security certificates, and network services like LDAP for authentication. Integration with centralized management suites such as HPE OneView and VMware vCenter allows for orchestration at scale. The Redfish API provides a standardized RESTful API for automation scripts and third-party monitoring software like Nagios or Microsoft System Center.

Security considerations

Given its high level of access, securing the iLO interface is paramount. Best practices include disabling default accounts, enforcing strong password policies, and enabling multi-factor authentication. Network security measures involve using dedicated VLANs, implementing firewall rules, and employing TLS encryption for all communications. Hewlett Packard Enterprise regularly issues security advisories and firmware updates to address CVE-listed vulnerabilities, and features like Secure Boot and TPM integration help ensure firmware integrity.

History and development

The technology was first introduced by Compaq prior to its merger with Hewlett-Packard, under the name Remote Insight Lights-Out Edition. Following the merger, it was rebranded as Integrated Lights-Out (iLO) for the Hewlett-Packard ProLiant series. Major generational milestones include iLO 2, which added virtual media support, iLO 3 with enhanced security and performance, iLO 4 introducing a dedicated ARM processor, and iLO 5 which expanded security features and Redfish API support. Its development continues in parallel with the HPE Gen10 and Gen11 server platforms.