advances in intelligent platform management: introducing the … · advances in intelligent...

1

Tom Slaight

Principal Server Management Architect

Intel Corporation

February 18, 2004

Advances in Intelligent Platform

Management: Introducing the

New IPMI v2.0 Specifications

2

Special Guests!

Phil Chidester

Manageability Architect

Server Management Firmware Group

Dell Computer

Steve Lyle

Manageability Architect

Hardware Systems Technology Division

Hewlett-Packard Company

Itanium and Xeon are trademarks or registered trademarks of Intel

Corporation or its subsidiaries in the United States or other countries.

3

Agenda

� IPMI Architecture and Initiative Update

� What’s New in IPMI v2.0?

� IPMI v2.0 Technology: How it meets platform management needs

� IPMI in Action

� IPMI Futures

4

IPMI

IntelligentPlatformManagementInterface

•• Defines a standardized, Defines a standardized,

abstracted, messageabstracted, message--based based

interface to intelligent platform interface to intelligent platform

management hardwaremanagement hardware

•• Defines standardized records for Defines standardized records for

describing platform management describing platform management

devices and their characteristicsdevices and their characteristics

IPMI Enables CrossIPMI Enables Cross--Platform Platform

Management SoftwareManagement Software

Promoters:

Adopters: 162 and growing

IPMI Architecture and Initiative Update

5

Initiative News

IPMI v2.0 Specifications

Updated v1.5 Errata, 32-and 64-bit Drivers,

& IPMI Conformance Test Suite



Updated v1.5 Errata, 32

Updated v1.5 Errata, 32--and 64

and 64--bit Drivers,

bit Drivers,



developer.intel.com/design/servers/ipmideveloper.intel.com/design/servers/ipmideveloper.intel.com/design/servers/ipmi


6

New Adopter’s Agreement

� IPMI v2.0 Second Generation Specification is under RAND

(Reasonable And Non-Discriminatory) licensing model

– Aligns with Industry standards licensing models (e.g. DMTF*,

PICMG*, Infiniband*, etc.)

� All companies (including existing IPMI 1.5 adopters) will need

to sign new IPMI v2.0 adopters agreement to implement IPMI

v2.0 spec

– Existing IPMI 1.5 adopters can continue to implement IPMI v1.5 under

old licensing terms, but to new IPMI v2.0 agreement required to

implement new IPMI v2.0 features

� New IPMI v2.0 Adopters license available on IPMI web site for

your review

Sign Up as IPMI 2.0 Adopter Today!Sign Up as IPMI 2.0 Adopter Today!


7

IPMI v2.0 Architecture

Baseboard System Bus

BridgeBridgeControllerController

ICMB

Aux. IPMB

RemoteMgmt. Card

SMBus/PCI Mgmt. BusBaseboardBaseboardMgmt.Mgmt.

ControllerController(BMC)(BMC)I2C/SMBus

SDR, SDR, SEL, SEL, FRUFRU

NV StoreMgmtMgmt

NetwkNetwk

CtrlrCtrlr

LAN

PCI

RS-232

MODEM

/ Serial

IPMB (I2C)

ChassisChassis

sensors& controlcircuitry

FRU SEEPROMFRU SEEPROM

SatelliteSatelliteMgmt.Mgmt.

ControllerController“side-

band”

System InterfaceSystem Interface

SENSORs

& control

circuitry

I2C / SMBus


IPMI Messages

8

LANLAN

chassischassis

IPMI in modular architecture

Typical Modular Application

computenode Acomputenode A

BMCBMC

computenode Bcomputenode B

i/o nodei/o node

SatelliteSatellite

ControllerController

mgmtmodulemgmtmodule

SatelliteSatelliteControllerController PS PSFAN

temp

FAN

Sys I/F Sys I/F

BP I/FBP I/F

Mgmt.Mgmt.ModuleModule

ProcessorProcessor

Backplane Mgmt Interconnect

BMCBMC

IPMI Messages

Remote MgmtConsoleSystem

BP I/FBP I/FBP I/FBP I/F

CIM

to

IPMI

9

Where it fits…

Service ProviderService Provider

Instrumentation ProviderInstrumentation Provider

Baseboard Mgmt. Controller Baseboard Mgmt. Controller

and monitoring h/wand monitoring h/w

Management ApplicationsManagement Applications

IPMI H/W I/FIPMI H/W I/F

IPMI

IPMI I/F CodeIPMI I/F Code

Management S/W

Standards, e.g. CIM

Service ProviderService Provider

ProxyProxy

InstrumentationInstrumentation

ProviderProvider

IPMI I/F CodeIPMI I/F CodeOOB I/F

OOB I/F Out-Of-Band

IPMI

Messages

Network, Serial, Modem,

Inter-Chassis Mgmt Bus

In-Band


IPMI helps reduce TTM and development costfor cross-platform management

IPMI helps reduce TTM and development costIPMI helps reduce TTM and development costfor crossfor cross--platform managementplatform management

10

Agenda



� IPMI v2.0 Technology: How it meets platform management needs

� IPMI in Action

� IPMI Futures

11

Platform Directions for IPMI� Integrated ‘Serial over LAN’management

� Low Cost Systems– “Baseline” BMCs

� Group Managed Systems– ICMB and LAN-managed systems

� Modular Systems–General purpose andService Availability Forum“AdvancedTCA” blade systems

IPMI enables competitiveIPMI enables competitivefeatures across server classesfeatures across server classes

What’s New in IPMI v2.0

12

IPMI v2.0 Additions

� Serial Over LAN (SOL)– Redirects local serial interface over an IPMI Session

– Works with serial-based OS ‘command line’ interfaces

� LAN Session Enhancements– New user login and security configuration options enable tailoring security and performance to match the needs of the site

– “Payloads” capability enables multiple types of management traffic (e.g. IPMI and SOL) over a single LAN session

� Enhanced Authentication– Stronger key exchange uses two-way challenge/response

– Aligns with DMTF ASF 2.0* session establishment

� Packet Data Encryption– Enables remote operations such as user password configuration

� VLAN Support– Facilitates setting up ‘management-only’ networks

* Other names and brands may be claimed as the property of others

IPMI v2.0 Technology

13

IPMI v2.0 Additions

� Low-cost BMC Support

– SMBus System Interface (SSIF) provides low-pin count system interface for low-cost (low pin-count) BMCs

� Modular Extensions

– Node replacement, Redundant Management Bus monitoring, “Firmware Firewall” tailor IPMI to better support blade implementations

� Enhanced OEM value-added feature support

– Support for OEM Security Algorithms and Payload options (e.g. KVM) on IPMI infrastructure


14

Agenda



� IPMI v2.0 Technology: How IPMI v2.0 meets platform management needs

� IPMI in Action

� IPMI Futures

15

IPMI TechnologyNewNew

IPMI v1.5IPMI v1.5

ExtendedExtended

WatchdogWatchdog PEFPEF

KCSKCS BTBT SMICSMIC

LAN & SerialLAN & SerialAlertingAlerting

IPMBIPMB PCIPCI--SMBusSMBus

Mgmt BussesMgmt Busses

SensorSensorAccessAccess

ControlControl(on/off/reset/(on/off/reset/intrintr))

FRU, SEL,FRU, SEL,SDRsSDRs

Serial PortSerial PortSharingSharing

SessionInfrastructure

RemoteAccess

IPMICore

Local Access

IPMI overIPMI overSerialSerial

Basic,Basic,TerminalTerminal, PPP, PPP

ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5

RMCPRMCP

Serial ICMB LAN

LoggingLogging Users &Users &PrivilegesPrivileges

AuthenticationAuthentication IntegrityIntegrity

Users &Users &PrivilegesPrivileges

AuthenticationAuthentication IntegrityIntegrity

FirmwareFirmwareFirewallFirewall

SSIFSSIF

ConfidentialityConfidentiality

PayloadsPayloads

IPMI overIPMI overLAN v2.0LAN v2.0

SOL SOL (Serial(SerialOver LAN)Over LAN)

““RMCP+RMCP+”” SessionSession

System InterfacesSystem Interfaces

VLANVLAN

16



KCSKCS BTBT SMICSMIC SSIFSSIF







LoggingLogging





RemoteAccess

IPMICore

Local Access

AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality


Basic,Basic,Terminal, PPPTerminal, PPP


RMCPRMCP

Serial ICMB LAN

PayloadsPayloads




IPMI Technology










LoggingLogging





RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads




NewNew

IPMI v1.5IPMI v1.5

ExtendedExtended

SSIFSSIF

SSIFSSIF

VLANVLANVLANVLAN

17

SMBus System Interface (SSIF)

� Encapsulates IPMI messages in an SMBus compatible format

–Compatible with common SMBus Host controllers

– IPMI Requests delivered using ‘Block Write’ protocol

– IPMI Responses retrieved using ‘Block Read’protocol

– SMBAlert signal status change/message available

� SMBAlert line notifies host that incoming message / status data is available

– ‘Get Status’ command allows interface status to be polled


18


Local (System Interface) Discovery

� BIOS tables describe location and type of system interface

–New ACPI “SPMI” (service processor mgmt. interface) Table

–SMBIOS Type 38 Record

� SPMI and Type 38 Tables Applicable to all IPMI System Interfaces

– SMIC, KCS, BT, SSIF


19

SSIF and Multi-level BMC Options

Acts as ‘Satellite Controller’ to ‘Full’ BMC

Low Cost Options enable IPMILow Cost Options enable IPMIfor all Server classesfor all Server classes

LANLAN8255182551

PCI

SMBus SMBus

LAN

SMBAlert

SystemSystemMonitorMonitor

sensorsensorconnectionsconnections

SouthSouthBridgeBridge

System Bus SMBus

SMBAlert

BaselineBaselineBMCBMC

power, resetpower, reset

FRUFRU


LPC FullFullBMCBMC

chassischassissensorssensors

RS-232

20


BMC Write / Request(via SMBus Block Write)

– BMC Slave Addr. | Wr– SMBus CMD = 0x02– Length� IPMI NetFn (even) | LUN� IPMI Command� <IPMI Command Data>


BMC Read / Response(via SMBus Block Read)

– BMC Slave Addr. | Wr.

– SMBus CMD = 0x03

– BMC Slave Address | Rd.

– Length

� IPMI NetFn (odd) | LUN

� IPMI Command

� IPMI Completion Code

� <IPMI Command Data>

IPMI Message Content

Single Part Messages– Used for IPMI Message Content up to 32 bytes(SMBus protocols limited to 32-bytes of data)

WR

RD

WR

21


Multi-part Messages– Used for IPMI Message Content >32 bytes– Block numbers enable retrieving lost or corrupted middle or ‘end’ read data

BMC Multi-part Write / Request(follows single part format for Start, but uses special SMBus CMDs for start and transferring remaining data)– Start: SMBus CMD = 0x06, remainder matches single part format– Middle: SMBus CMD = 0x07, followed by add’l request data– End: SMBus CMD = 0x08, followed by last part of data

BMC Multi-part Read / Response(Starts off with reserved pattern [0x01, 0x00] then uses special SMBus commands to retrieve remaining data)– Start: SMBus CMD = 0x03, followed by [0x01, 0x00] then regular response

data (NetFn | LUN, CMD, etc.)– Middle: SMBus CMD = 0x09, First byte = 00b followed by add’l response data– End: SMBus CMD = 0x09, First byte = 01b, followed by last part of data


22

WatchdogWatchdog PEFPEFLAN & SerialLAN & Serial

AlertingAlertingFRU, SEL,FRU, SEL,SDRsSDRs

IPMI Functional BlocksNewNew

IPMI v1.5IPMI v1.5

ExtendedExtended









RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads






SSIFSSIF

VLANVLAN

FirmwareFirmwareFirewallFirewallFirmwareFirmwareFirewallFirewall


23

Firmware FirewallPartitioning for protection

� Problem:Bus topology enables local mgmt s/w to access other nodes

chassischassis




Sys I/F Sys I/F

BP I/F

Backplane Mgmt Bus

BMCBMC

� Solution:“firmware firewall” chassischassis




Sys I/F Sys I/F

BP I/F

Backplane Mgmt Bus

BMCBMC

BMCBMC

SatelliteSatellite


BMCBMC

SatelliteSatellite



24

Firmware Firewall

BP I/FBP I/F

System InterfaceSystem Interface

“side-band” port

SatelliteSatelliteControllerController

BMCBMC

– F/W blocks messaging to

other nodes on shared bus

– Allows messages between

local software and

management module

– Local software may also

be blocked from SDR or

FRU updates that might be

used to generate false

events

– Firmware updates can only

occur from management

bus side

– Access rights can only be

configured from

management bus side

SensorsSensors

FRU, SEL, SDRFRU, SEL, SDR

FLASHFLASH

backplane mgmt. bus


25

Firmware Firewall

� Configurable Command Discovery commands

–Support discovering which commands and sub-functions can be enabled/disabled

– Two commands: Get Configurable Commands,Get Configurable Command Sub-functions

� Command Configuration commands

–Provide mechanism for enabling/disabling those commands

– Four commands: Set/Get Command Enables,Set/Get Command Sub-function Enables


26

Firmware Firewall

Command Discovery commands

–Enable software to discover what commands and subfunctions are available on given mgmt. controller

–Discovery commands can be implemented separate from Firmware Firewall enable/disable commands

–Centralize command and sub-function discovery

– Augments IPMI distributed parameter, and ‘try command’discovery

– Command and sub-function support can vary on a PER CHANNEL basis

– Three commands: Get NetFn Support, Get Command Support, Get Command Sub-function Support


27




IPMI v1.5IPMI v1.5

ExtendedExtended









RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads

KCSKCS BTBT SMICSMIC SSIFSSIFSSIFSSIF


PayloadsPayloadsPayloadsPayloads

Users &Users &PrivilegesPrivilegesUsers &Users &

PrivilegesPrivileges


SOL SOL (Serial(SerialOver LAN)Over LAN)SOL SOL (Serial(Serial

Over LAN)Over LAN)SOL SOL (Serial(Serial

Over LAN)Over LAN)


PayloadsPayloads



VLANVLAN

28

Users & Privileges

� Per Channel Multi-level, Multi-User Security– User, Operator, Admin and OEM Privilege levels for IPMI commands

– Per-user configurable enables for payload access (e.g. SOL)

� IPMI v2.0 Login Options– ‘Anonymous’ login: no username or password required

– Can be enabled for a given privilege level. E.g. “User Level”

– Role-based login: password only, no username, for a given privilege level

– E.g. “Admin” login

– Username login: user name and user password required

– ‘Two key’ login: user/role password plus ‘BMC Key’

– Can prevent multiple system access by ‘human engineering’ a single username/password pair.


Flexible configuration enables security Flexible configuration enables security to be tailored to site needsto be tailored to site needs

29

Payloads

� Payloads enable multiple types of trafficto be carried over a single IPMI session

– payloads can also be launched to a separate session

� Standard and OEM Payload Types supported

– Standard payload types: Support Session Setup, IPMI Messages, “Serial Over LAN”

– OEM payload types: Enable value-added features on IPMI session infrastructure (e.g. KVM)

– Leverages IPMI User configuration and authentication

� Payload support is discoverable

� Payload access enabled on a per-user basis

Session Payloads EnableSession Payloads Enable““11--portport”” ManagementManagement


30

Payloads

Payloads can be activated under common or separate ports

NetworkNetwork


BMCBMC

PayloadPayload

ProcessorProcessor

LAN

NetworkNetwork


BMCBMC

PayloadPayload

ProcessingProcessing

LAN Port 26Fh

IPMI & Payload Msgs

Port 26Fh

Port XYZ

IPMI Msgs

Payload Msgs


31

Serial Over LAN

� Defines common format and protocol for seriaredirection under an IPMI Session

–Redirects baseboard “16550” serial controller interface over LAN

– Launched as a standard payload type under IPMI v2.0 Session

� Specification supports multiple serial connections

� Can be combined with IPMI Serial Port Sharing

–Enables single ‘back of the box’ serial connection to be shared for local serial/modem, BMC access, and LAN redirected management


32




IPMI v1.5IPMI v1.5

ExtendedExtended









RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads







Over LAN)Over LAN)SOL SOL (Serial(Serial

Over LAN)Over LAN)


VLANVLANVLANVLAN

AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentialityIntegrityIntegrity

VLANVLAN

AuthenticationAuthentication ConfidentialityConfidentiality

ConfidentialityConfidentiality

VLANVLAN

IntegrityIntegrity

AuthenticationAuthentication

33

Authentication, Integrity, and Confidentiality

� Authentication Algorithm: Defines what steps are used for

authenticating a User and establishing a session

– E.g. IPMI v2.0 uses for RAKP (remote access key exchange protocol)

� Integrity Algorithm: Defines algorithm for signing packets after

session has been established.

– E.g. HMAC-SHA1-96

� Confidentiality (encryption) Algorithm: Defines algorithm for

encrypted payload data in a session.

– E.g. AES-128 (Advanced Encryption Standard)

� Combination of Authentication, Integrity, and Encryption

algorithms defines a CipherSuite

� Standard CipherSuites provide algorithm to trade-off between

strength and performance

� OEM CipherSuites also supported


34

Encrypted and Authenticated Packets

� Authenticated / Unauthenticated and Encrypted / Unencrypted

packets can be mixed in single session

– Improves performance on small micros. Bits in payload type field indicate

whether the payload data is authenticated and /or encrypted

� Remote console can be given option to control when

payload data is encrypted

– Allows console to decide when an operation, e.g. remote password

configuration, requires encryption

– For IPMI messages, an encrypted request gets an encrypted response

– For other payloads, a Suspend/Resume Encryption command is used

� Can configure BMC to require that payload is encrypted.

– Prevents mis-behaved console from exposing sensitive data.


IPMI v2.0 technology reduces overhead forIPMI v2.0 technology reduces overhead forsecure remote managementsecure remote management

35

VLANIPMI v2.0 Technology

� IPMI v2.0 LAN Packet format extended for “Virtual LAN” routing per IEEE 802.1q

� Works with side-band filtering in enhanced management network controllers

� VLAN support configurable on a per-channel basis

36




IPMI v1.5IPMI v1.5

ExtendedExtended









RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads







Over LAN)Over LAN)







VLANVLAN

IPMI v2.0IPMI v2.0SessionsSessions

37

SessionsDiscovery and Connection

� Enhanced User Login Options

– New option for ‘Role-only’ logins

– Simplifies use in small installations

– no username to remember, can simply login in as User, Operator, or Admin

� New commands for managed system discovery

– Facilitates automated discovery and access by remote applications

– IPMI version (v1.5 or v2.0) discovery

– Cipher-Suite discovery

– Available Payloads

– Existence of Anonymous and One- or Two-key login

– enables remote console to present appropriate username and password entry options


38

v2.0 Session Activation

�Discover IPMI support using Get Channel Authentication Capabilities command–Enables discovering IPMI version

–Tells console whether ‘anonymous’ and/or ‘1-key’logins are enabled

–Same command for v1.5 and v2.0

� Issue Get Cipher Suites command

–Pick cipher suite for the maximum privilege level you want to establish the session at

�Activate session for given user…– IPMI v2.0 Uses dual Challenge/Response vs. IPMI v1.5 single

challenge / response


39

v2.0 Session Activation–Send Open Session RequestGet Open Session Response–Sets session IDs and negotiates a ciphersuite

–Send RAKP 1 MessageGet RAKP 2 Message as Response–Submits username and target privilege level to BMC

–Exchanges random numbers between console and BMC

–Roughly equivalent to the console submitting a challenge to the BMC and the BMC submitting a challenge to the console.

– Issue RAKP 3 Message, Get RAKP 4 Message as Response–BMC and Console exchanged ‘signed’ RAKP 3 and RAKP 4 packets

–Signature based on the random numbers and key data associated with the user

–Session is activated when both parties verify the signed packets.


40


RemoteAccess

IPMICore

Local Access

Serial ICMB LAN

IPMI Functional Blocks


RemoteAccess

IPMICore

Local Access

Serial ICMB LANNewNew

IPMI v1.5IPMI v1.5

ExtendedExtended














RMCPRMCP

PayloadsPayloads




VLANVLAN

















RMCPRMCP

PayloadsPayloads




VLANVLAN




BackwardBackwardCompatibilityCompatibility

41

Backward Compatibility

� Compatible command superset

–Extends but does not replace IPMI v1.5 commands

� Managed systems can be discovered and used

as an IPMI v1.5 system

– Implementation can support both IPMI v2.0 and IPMI

v1.5 connections simultaneously

–Supports connecting using IPMI v1.5 protocols

– IPMI v1.5 LAN packet support retained

� V2.0 packets/protocols required for new LAN

features

– e.g. enhanced auth., encryption, Serial Over LAN


42

IPMI Session Activation

Get Session Challenge, Get Session Challenge, RsRsOpen Session, Open Session, RsRs

Activate Session, Activate Session, RsRsRAKP Message 2RAKP Message 2

Set Privilege Level, Set Privilege Level, RqRq

Activate Session, Activate Session, RqRqRAKP Message 1RAKP Message 1

Set Privilege Level, Set Privilege Level, RsRs

Close Session, Close Session, RqRq

Get Channel AuthenticationGet Channel AuthenticationCapabilities, Capabilities, RqRq Get Channel AuthenticationGet Channel Authentication

Capabilities, Capabilities, RsRs

RAKP Message 3RAKP Message 3

RAKP Message 4RAKP Message 4

Get Channel Cipher Suites, Get Channel Cipher Suites, RsRs

Get Channel CipherGet Channel CipherSuites, Suites, RqRqD

iscovery

Activation

Active

Activate Payload, Activate Payload, RqRq

Activate Payload, Activate Payload, RsRs

IPMI v1.5IPMI v2.0Common v1.5/2.0

CONSOLE BMC Rq=request, Rs=response


Get Session Challenge, Get Session Challenge, RqRqOpen Session, Open Session, RqRq

43

Putting It All TogetherNewNew

IPMI v1.5IPMI v1.5

ExtendedExtendedIPMI v2.0 Technology










LoggingLogging





RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads







Mgmt BussesMgmt BussesLocal Access



AlertingAlerting



LoggingLogging


Users &Users &PrivilegesPrivilegesIPMI

Core

SessionInfrastructure AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality

VLANVLAN


RemoteAccess




RMCPRMCP

Serial ICMB LAN

PayloadsPayloads




VLANVLAN

44

Putting It All TogetherNewNew

IPMI v1.5IPMI v1.5

ExtendedExtendedIPMI v2.0 Technology

IPMI v2.0 technology enables secure remote management

IPMI v2.0 technology enables secure IPMI v2.0 technology enables secure remote managementremote management










LoggingLogging





RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads













LoggingLogging





RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads




45

Agenda




� IPMI in Action

� IPMI Futures

46

IPMI in HP’s Integrity Servers

� As one of IPMI’s founding companies - HP has a long history of building industry standards around manageability.

� HP’s entire line of Integrity IPF servers use IPMI, from the smallest 2-way server to the largest Superdome.

� HP uses IPMI, along with other manageability standards like WBEM, to build interfaces that promote interoperability between OS’s and platforms.

Integrity rx2600

Integrity rx4640Integrity rx7620

Integrity rx8620Integrity Superdome

IPMI in Action

IPMI is Highly ScalableIPMI is Highly Scalable

47

HP: Enabling customer features � IPMI fits well into the ecosystem of HP's value-added embedded management, covering some of the most basic functionality in a standard way– OS absent server health and server power control

– Storage and retrieval of system event logs

– A standard messaging mechanism for use with HP agents on Windows, HPUX, and Linux

� Upon this foundation, HP builds more features, to further enhance the manageability solution– Independent management LAN with secure (https) web interface or convenient Telnet UI to the management processor

– Embedded web console

– Enhanced event logging and diagnosis

– Unique collaboration and repair features

– Partition management, and more…

IPMI In Action

IPMI Supports Value Added FeaturesIPMI Supports Value Added Features

48

Dell Computer � Dell and IPMI

– Dell a founding IPMI Promoter

– IPMI a core management technology for today’s Dell PowerEdge servers

� IPMI benefits for Dell Customers

– Helps lower server acquisition, training and operations costs

– Enhances server availability

– Enables server management with common tools and processes

� IPMI 2.0 extends these benefits

– Enhances IPMI management security

– Extends administrators reach with serial-over-LAN operations

– Demonstrates industry focus on driving management standards

“Standards simplify the

computing environment and

establish a common hardware

and software platform, make it

easier for systems to work

together and to exchange

information. Standards also

simplify product development

and service, thereby reducing

our costs.”

Michael Dell

IPMI In Action

IPMI Delivers CommonIPMI Delivers CommonManagement InterfacesManagement Interfaces

49

Dell PowerEdge™ 3250:An IPMI Manageable Standards-Based Server

A cost effective, scalable solution for compute intensive applications

utilizing Itanium Processor Family and standards-based

manageability

IPMI In Action

� Standards-based manageability for high performance computing

– IPMI 1.5 server management

– SMART drive monitoring

– DMTF SMBIOS and ASF alerting

� Pro-active management for the scalable enterprise

– Centralized operations enabled with IPMI monitoring and alerting

– Remote control and recovery functions through IPMI server control, remote consoling

– Large-scale remote operations via IPMI command-line interface

IPMI Supports IPMI Supports ““Real ServerReal Server”” ManagementManagement

50

Intel Corporation

� One of the Founding Companies for IPMI

� Over 5 years of IPMI-based Management for Server Building Blocks

– In pedestal, rack, andmodular (blade) chassis

– In Entry through Enterprise

– With Itanium®, Xeon™,and IA-32 processors

– In General Purposeand Telco systems

– Small business to Data Center

IPMI In Action

IPMI Works Across System ClassesIPMI Works Across System Classes

51

Intel Corporation

� Over 7 product generations

� Over 5 different processors used for BMCs

– some large systems have had as many as four management controllers

� Use IPMI SDRs to tailor server building blocks to customer

� Implementations take advantage of Intel processor and chipset management features

– E.g. Memory and Bus Correctable and Uncorrectable error status, power state information, temperature and throttling status, etc.

IPMI In Action

IPMI Is Proven TechnologyIPMI Is Proven Technology

52

IPMI Technology is Widely SupportedIPMI Technology is Widely SupportedIPMI Technology is Widely Supported

� Exabyte Corporation� Extreme Engineering Solutions, Inc.� Fabric7 Systems, Inc.� First International

Computer, Inc.� FORCE Computers GmbH� Forward Technologies� Flextel SpA� Freedom Technologies Corp.� FreeIPMI Core Team� Fujitsu, Ltd.� Fujitsu Siemens Computers� GoAhead Software, Inc.� Gluon Networks, Inc� HADCO Corporation� HCL Infosystems Ltd.� Hewlett-Packard Company� Hewlett-Packard GmbH� Hitachi Ltd.� Hybricon Corporation� IBM� Ibus/Phoenix Corporation� InnoMediaLogic, Inc.� Integra Micro Sys. (P) Ltd.� Intel Corporation� Interphase Corporation� InterWorks Computer Products� Inventec Corporation� Ipex ITG� JMC Products� Kealia, Inc� Kaparel Corporation� L-3 Communications Corp.� LANDesk Software� LANTRONIX� Legend (Beijing) Limited� LeoStream Corp.� Linux NetworX, Inc.� Lynux Works, Inc.� Macrolink, Inc.� Magnetek, Inc.� MEGWARE Computer GmbH

�� ExabyteExabyte CorporationCorporation�� Extreme Engineering Solutions, Inc.Extreme Engineering Solutions, Inc.�� Fabric7 Systems, Inc.Fabric7 Systems, Inc.�� First InternationalFirst International

Computer, Inc.Computer, Inc.�� FORCE Computers GmbHFORCE Computers GmbH�� Forward TechnologiesForward Technologies�� FlextelFlextel SpASpA�� Freedom Technologies Corp.Freedom Technologies Corp.�� FreeIPMIFreeIPMI Core TeamCore Team�� Fujitsu, Ltd.Fujitsu, Ltd.�� Fujitsu Siemens ComputersFujitsu Siemens Computers�� GoAheadGoAhead Software, Inc.Software, Inc.�� Gluon Networks, IncGluon Networks, Inc�� HADCO CorporationHADCO Corporation�� HCL HCL InfosystemsInfosystems Ltd.Ltd.�� HewlettHewlett--Packard CompanyPackard Company�� HewlettHewlett--Packard GmbHPackard GmbH�� Hitachi Ltd.Hitachi Ltd.�� HybriconHybricon CorporationCorporation�� IBMIBM�� IbusIbus/Phoenix Corporation/Phoenix Corporation�� InnoMediaLogicInnoMediaLogic, Inc., Inc.�� Integra Micro Sys. (P) Ltd.Integra Micro Sys. (P) Ltd.�� Intel CorporationIntel Corporation�� InterphaseInterphase CorporationCorporation�� InterWorksInterWorks Computer ProductsComputer Products�� InventecInventec CorporationCorporation�� IpexIpex ITGITG�� JMC ProductsJMC Products�� KealiaKealia, Inc, Inc�� KaparelKaparel CorporationCorporation�� LL--3 Communications Corp.3 Communications Corp.�� LANDesk SoftwareLANDesk Software�� LANTRONIXLANTRONIX�� Legend (Beijing) LimitedLegend (Beijing) Limited�� LeoStreamLeoStream Corp.Corp.�� Linux Linux NetworXNetworX, Inc., Inc.�� LynuxLynux Works, Inc.Works, Inc.�� MacrolinkMacrolink, Inc., Inc.�� Magnetek, Inc.Magnetek, Inc.�� MEGWARE Computer GmbHMEGWARE Computer GmbH

� Abit Computer Corp.� Acer Inc.� Adtron� Amphus Inc.� Advanced Micro Devices, Inc� Agilent Technologies GmbH� Alberta Microelectronics� Allion Computer Inc.� American Megatrends Inc.� Arima Computer Corp.� Artesyn Communication Products,

Inc.� ASIS LTD.� ASUSTek Computer, Inc.� Aventail Corporation� Avian Communications� Avocent, Inc.� Axil Computer, Inc.� Blue Wave Systems� Bull S.A.� C&D Technologies, Inc.� California Digital Corp.� Celestica� C-MAC Engineering� ColoWATCH, Inc� Communication Automation

Corporation� Compellent Technologies, Inc. � Concurrent Technologies, PLC� CyberGuard Corporation� Cyclades Corporation� Data General Corporation� Decru, Inc.� Dell Computer Corporation� Demac Associates� Digi International� Egenera, Inc.� ElanVital Corporation� Ericsson UAB� ESO Technologies � Evans & Sutherland� Eversys Corporation

�� AbitAbit Computer Corp.Computer Corp.�� Acer Inc.Acer Inc.�� AdtronAdtron�� AmphusAmphus Inc.Inc.�� Advanced Micro Devices, IncAdvanced Micro Devices, Inc�� AgilentAgilent Technologies GmbHTechnologies GmbH�� Alberta MicroelectronicsAlberta Microelectronics�� AllionAllion Computer Inc.Computer Inc.�� American Megatrends Inc.American Megatrends Inc.�� ArimaArima Computer Corp.Computer Corp.�� ArtesynArtesyn Communication Products,Communication Products,

Inc.Inc.�� ASIS LTD.ASIS LTD.�� ASUSTekASUSTek Computer, Inc.Computer, Inc.�� AventailAventail CorporationCorporation�� Avian CommunicationsAvian Communications�� AvocentAvocent, Inc., Inc.�� AxilAxil Computer, Inc.Computer, Inc.�� Blue Wave SystemsBlue Wave Systems�� Bull S.A.Bull S.A.�� C&D Technologies, Inc.C&D Technologies, Inc.�� California Digital Corp.California Digital Corp.�� CelesticaCelestica�� CC--MAC EngineeringMAC Engineering�� ColoWATCHColoWATCH, Inc, Inc�� Communication Automation Communication Automation

CorporationCorporation�� CompellentCompellent Technologies, Inc. Technologies, Inc. �� Concurrent Technologies, PLCConcurrent Technologies, PLC�� CyberGuardCyberGuard CorporationCorporation�� CycladesCyclades CorporationCorporation�� Data General CorporationData General Corporation�� DecruDecru, Inc., Inc.�� Dell Computer CorporationDell Computer Corporation�� DemacDemac AssociatesAssociates�� DigiDigi InternationalInternational�� EgeneraEgenera, Inc., Inc.�� ElanVitalElanVital CorporationCorporation�� Ericsson UABEricsson UAB�� ESO Technologies ESO Technologies �� Evans & SutherlandEvans & Sutherland�� EversysEversys CorporationCorporation

� Mercury Computer Systems, Inc.� Micro-Star International� Mirapoint, Inc.� MiTAC International Corp.� Mitsubishi Electric Corp.

Info. Systems Engineering Ctr.� Motorola Computer Group� National Semiconductor Corp.� NEC Corporation� Nematron Corporation Network

Appliance, Inc.� Network Engines, Inc.� Network Storage Solutions, Inc.� NEWISYS, Inc.� NOCpulse, Inc.� OliData S.p.A.� Olivetti Computers Worldwide� OSA Technologies� Open Source Development Lab � PEP Modular Computers� Performance Technologies, Inc.� PetaStream Inc.� PFU Limited� Phoenix Technologies Ltd.� Pigeon Point Systems� Pinnacle Data Systems, Inc.� Praim, Inc.� Qlogic Corporation� Quanta Computer Inc.� Radisys Corporation� RADVISION� RAMIX Inc.� Raritan Computer, Inc.� Reliance Computer Corp.� Samsung Electronics Co., Inc.� Sanera Systems, Inc.� SANgate Systems, Inc.� Sanritz Automation Co., Ltd.� SBS Technologies

(Industrial Computers GmbH)� Scenix Semiconductor, Inc.� Siemens AG

�� Mercury Computer Systems, Inc.Mercury Computer Systems, Inc.�� MicroMicro--Star InternationalStar International�� MirapointMirapoint, Inc., Inc.�� MiTACMiTAC International Corp.International Corp.�� Mitsubishi Electric Corp.Mitsubishi Electric Corp.

Info. Systems Engineering Ctr.Info. Systems Engineering Ctr.�� Motorola Computer GroupMotorola Computer Group�� National Semiconductor Corp.National Semiconductor Corp.�� NEC CorporationNEC Corporation�� NematronNematron Corporation Network Corporation Network

Appliance, Inc.Appliance, Inc.�� Network Engines, Inc.Network Engines, Inc.�� Network Storage Solutions, Inc.Network Storage Solutions, Inc.�� NEWISYS, Inc.NEWISYS, Inc.�� NOCpulseNOCpulse, Inc., Inc.�� OliDataOliData S.p.A.S.p.A.�� Olivetti Computers WorldwideOlivetti Computers Worldwide�� OSA TechnologiesOSA Technologies�� Open Source Development Lab Open Source Development Lab �� PEP Modular ComputersPEP Modular Computers�� Performance Technologies, Inc.Performance Technologies, Inc.�� PetaStreamPetaStream Inc.Inc.�� PFU LimitedPFU Limited�� Phoenix Technologies Ltd.Phoenix Technologies Ltd.�� Pigeon Point SystemsPigeon Point Systems�� Pinnacle Data Systems, Inc.Pinnacle Data Systems, Inc.�� PraimPraim, Inc., Inc.�� QlogicQlogic CorporationCorporation�� Quanta Computer Inc.Quanta Computer Inc.�� RadisysRadisys CorporationCorporation�� RADVISIONRADVISION�� RAMIX Inc.RAMIX Inc.�� Raritan Computer, Inc.Raritan Computer, Inc.�� Reliance Computer Corp.Reliance Computer Corp.�� Samsung Electronics Co., Inc.Samsung Electronics Co., Inc.�� SaneraSanera Systems, Inc.Systems, Inc.�� SANgateSANgate Systems, Inc.Systems, Inc.�� SanritzSanritz Automation Co., Ltd.Automation Co., Ltd.�� SBS TechnologiesSBS Technologies

(Industrial Computers GmbH)(Industrial Computers GmbH)�� ScenixScenix Semiconductor, Inc.Semiconductor, Inc.�� Siemens AGSiemens AG

� Silicon Graphics, Inc.� SKY Computers, Inc.� SMIS R&D, Inc.� Snap Appliance� Stan Cox and Associates� Standard Microsystems Corp.� Stratalight Communications, Inc.� Stratus Computer Systems

Ireland Ltd.� Summit Microelectronics, Inc.� Sun Microsystems� Super Micro Computer, Inc.� SyAM Software � Symphony Group Intl. Co., Ltd.� Synergy Microsystems� Technobox, inc� Teknor Applicom, Inc.� T-Netix, Inc.� Tatung Co.� Tektronix� Texas Micro Corporation� Togabi Technologies, Inc.� Toshiba Corporation� Trilogic Systems, LLC� Trimm Technologies� Tyan Computer Corporation� Universal Scientific Industrial

Corp.� USAR Systems, Inc.� Vitesse Semiconductor Corp.� Watrin System Design� Wyselec� VIA Technologies, Inc.� Vividon, Inc.� Vooha, Inc.� Winbond Electronics Corp.� WIPRO Infotech� Xiotech Corporation� Ziatech Corporation� ZNYX Networks, Inc.

�� SiliconSilicon GraphicsGraphics, , IncInc..�� SKY Computers, SKY Computers, IncInc..�� SMIS R&D, SMIS R&D, IncInc..�� SnapSnap ApplianceAppliance�� Stan Cox and AssociatesStan Cox and Associates�� Standard Microsystems Corp.Standard Microsystems Corp.�� StratalightStratalight Communications, Inc.Communications, Inc.�� Stratus Computer SystemsStratus Computer Systems

Ireland Ltd.Ireland Ltd.�� Summit Microelectronics, Inc.Summit Microelectronics, Inc.�� Sun MicrosystemsSun Microsystems�� Super Micro Computer, Inc.Super Micro Computer, Inc.�� SyAMSyAM Software Software �� Symphony Group Intl. Co., Ltd.Symphony Group Intl. Co., Ltd.�� Synergy MicrosystemsSynergy Microsystems�� TechnoboxTechnobox, inc, inc�� TeknorTeknor ApplicomApplicom, Inc., Inc.�� TT--NetixNetix, Inc., Inc.�� TatungTatung Co.Co.�� TektronixTektronix�� Texas Micro CorporationTexas Micro Corporation�� TogabiTogabi Technologies, Inc.Technologies, Inc.�� Toshiba CorporationToshiba Corporation�� TrilogicTrilogic Systems, LLCSystems, LLC�� TrimmTrimm TechnologiesTechnologies�� TyanTyan Computer CorporationComputer Corporation�� Universal Scientific Industrial Universal Scientific Industrial

Corp.Corp.�� USAR Systems, Inc.USAR Systems, Inc.�� VitesseVitesse Semiconductor Corp.Semiconductor Corp.�� WatrinWatrin System DesignSystem Design�� WyselecWyselec�� VIA Technologies, Inc.VIA Technologies, Inc.�� VividonVividon, Inc., Inc.�� VoohaVooha, Inc., Inc.�� WinbondWinbond Electronics Corp.Electronics Corp.�� WIPRO WIPRO InfotechInfotech�� XiotechXiotech CorporationCorporation�� ZiatechZiatech CorporationCorporation�� ZNYX Networks, Inc.ZNYX Networks, Inc.

















































53

Agenda




� IPMI in Action

� IPMI Futures

54

Advancing Platform ManagementIPMI Futures

�� Session and Security Session and Security

EnhancementsEnhancements

�� Serial Over LANSerial Over LAN

�� SSIFSSIF

�� Alignment with ASF Alignment with ASF

AuthenticationAuthentication

�� Encryption supportEncryption support

�� Firmware FirewallFirmware Firewall

�� Command DiscoveryCommand Discovery

�� Modular (blade) support Modular (blade) support

v2.0 Additionsv2.0 Additions

Feb 04

r1.0

Feb 05??

r1.1?

v2.0+ v2.0+ ……

�� New Payload TypesNew Payload Types

�� Enhanced Configuration Enhanced Configuration

InterfacesInterfaces

�� Links to DirectoryLinks to Directory--

based Authenticationbased Authentication

�� Improved Group ControlImproved Group Control

�� Auxiliary Log AccessAuxiliary Log Access

�� Integration with Web Integration with Web

InterfacesInterfaces

�� Web servicesWeb services--based based

access access

�� MonitoringMonitoring(temp, volt, fan, etc.)(temp, volt, fan, etc.)

�� ControlControl(power on/off/cycle,(power on/off/cycle,reset, reset, diagdiag. interrupt). interrupt)

�� System Event LoggingSystem Event Logging

�� FRU & SDR FRU & SDR InformationInformation

�� Watchdog TimerWatchdog Timer

�� Serial and LAN accessSerial and LAN access

�� Serial and LAN alertsSerial and LAN alerts

�� Platform Event Platform Event FilteringFiltering

�� Serial Port sharingSerial Port sharing

�� Management bussesManagement busses

IPMI v1.5 IPMI v1.5

r1.0

Feb 01 Feb 02

r1.1

Proven Foundation for New Platform Management FeaturesProven Foundation for New Platform Management Features

55

New Capabilities Under Consideration

� Additional redirection payloads:

– e.g. KVM, USB-media

� Improved configuration interfaces

–Simplified save/restore of configuration settings

–Secure migration of user configuration

– Integration with configuration of ‘Alternative Access’features, e.g. Web Server, Telnet

� Interfaces to Directory-based authentication

� More efficient options for ‘group control’–E.g. option for ‘persistent’ connections

IPMI Futures

56

New Capabilities Under Consideration

� Auxiliary Log access

� OOB configuration integration with web-based interfaces

– enabling/disabling web server, CLI, Telnet

–Configuring user privileges associated with secured interfaces

– Integration with directory-based authentication

� Web-services –based interfaces

–Alignment with “CIM+” / DMTF SMWG

– “IPMI over XML/SOAP”

IPMI Futures

IPMI will continue to evolve with valuable new capabilities

IPMI will continue to evolve with IPMI will continue to evolve with valuable new capabilitiesvaluable new capabilities

57

Where to get More Info

IPMI Web Site

– Latest IPMI Specifications & Errata

–Presentations

– IPMI Conformance Test Suite

–Example Drivers

– Tools

– FAQ and Integration Guides

–Mailing List

– List of IPMI Adopter Companies

–Adopter Agreements

IPMI Web Site

– Latest IPMI Specifications & Errata

–Presentations

– IPMI Conformance Test Suite

–Example Drivers

– Tools

– FAQ and Integration Guides

–Mailing List

– List of IPMI Adopter Companies

–Adopter Agreements

IPMI In Action

developer.intel.com/design/servers/ipmideveloper.intel.com/design/servers/ipmi

58

Summary

� IPMI reduces TTM and development cost for platform management

� IPMI v2.0 enables cross-platform manageability across server classes

� IPMI v2.0 technology enables secure remote management

� IPMI v2.0 technology is widely supported

� IPMI will continue to evolve with valuable new capabilities

59

Advances in Intelligent Platform Management

Tom Slaight, Intel CorporationSteve Lyle, HP

Phil Chidester, Dell

Please remember to turn in your session survey form

Questions?More on IPMI and IPMI v2.0 at IDF:• “Birds Of A Feather” - Get Together at lunchtime today

Join us for an informal dialog and Q&A on IPMI and related technologies

• Session: OSA S010 - Design Considerations for the Open Standards

Manageability Stack - IPMI, HPI and CIM

1st session after lunch

• Technology Showcase - See demos of IPMI-based systems and SOL capabilities

in the Intel Pavilion

60

Birds-of-a-Feather Lunch Discussions

� What: – Informal lunch discussions with Intel and industry technical experts on next-generation technologies, latest industry standards and specifications

� When: Wednesday 12PM – 1:30PM

802.11* Extensible Firmware Interface (EFI )

802.16*/ WiMax* Latin America Mobile/Data Environment

Server Manageability Advanced TCA*

Client Manageability Advanced Switching based on PCI Express* Architecture

Mobile Wireless Manageability Convergence in the digital home

IPMI (Intelligent Platform Management Interface)

Thursday 12PM – 1:30PM

Enthusiast PC Ethernet in the Datacenter

Trusted Computing Group for More Secure Computing

Advanced Switching based on PCI Express* Architecture

Extended Battery Life

Where: Level 3 Foyer Where: Level 3 Foyer (Not in the main lunch area)(Not in the main lunch area)

Arrive early Arrive early –– seating is limitedseating is limited

61

Please fill out the Session Evaluation Form.

Thank You!

62

Backup Slides

63

SSIF - SMBus System InterfaceIPMI v2.0 Technology

Write Block0x07- Middle part(s) if any

Read Block, first data byte after length = 0x01

0x09- End – last part

Read Block, first data byte after length = 0x00

0x09- Middle part(s) if any

Read Block, first two data bytes after length = [0x01,0x00]

0x03BMC Multi-Part Read- Start – first part

Read Block0x03BMC Single Part Read

Write Block0x08- End – last part

Write Block0x06BMC Multi-Part Write- Start – first part

Write Block0x02BMC Single Part Write

SMBus ProtocolSMBusCMDOperation

64


IPMI v1.5IPMI v1.5

ExtendedExtended










LoggingLogging





RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads













LoggingLogging





RemoteAccess

IPMICore

Local Access





RMCPRMCP

Serial ICMB LAN

PayloadsPayloads




VLANVLAN

advances in intelligent platform management: introducing the … · advances in intelligent...

Documents