The Server Administrator Remote Access Controller provides a complete remote system management solution for SNMP- and CIM-instrumented systems equipped with a Dell™ Remote Access Card (DRAC) III, a DRAC III/XT, an Embedded Remote Access (ERA) controller, or an ERA Option (ERA/O) card. These hardware and software solutions are collectively known as Dell Remote Access Controllers (DRACs). DRAC 4 and DRAC 5 also allow a basic management task to be performed from Dell OpenManage Server Administrator: you can connect to DRAC 4 or DRAC 5 from the Server Administrator graphical user interface depending on the DRAC card installed.
The DRAC 4 and DRAC 5 are systems management hardware and software solution designed to provide remote management capabilities, crashed system recovery, and power control functions for Dell PowerEdge™ systems.
By communicating with the system's baseboard management controller (BMC), the DRAC 4 and DRAC 5 can be configured to send you e-mail alerts for warnings or errors related to voltages, temperatures, and fan speeds. The DRAC 4 and DRAC 5 also log event data and the most recent crash screen (available only on systems running Microsoft® Windows® operating system) to help you diagnose the probable cause of a system crash.
Depending on your system, the DRAC 4 hardware is either a system card (DRAC 4/I) or a short PCI card (DRAC 4/P). The DRAC 4/I and DRAC 4/P are identical except for the hardware differences.
The DRAC 5 hardware is an embedded system card.
The DRAC 4 and DRAC 5 have their own microprocessor and memory, and are powered by the system in which they are installed. The DRAC 4 and DRAC 5 may be preinstalled on your system, or available separately in a kit.
NOTE: The information contained in this section pertains to the previous generation of DRACs. See the Dell Remote Access Controller 4 User's Guide for more information on using DRAC 4 or Dell Remote Access Controller 5 User's Guide for more information on using DRAC 5.
The Remote Access Controller provides remote access to an inoperable system, allowing you to get the system up and running as quickly as possible. The Remote Access Controller also provides alert notification when a system is down and allows you to remotely restart a system. Additionally, the Remote Access Controller logs the probable cause of system crashes and saves the most recent crash screen.
You can log in to the Remote Access Controller through the Server Administrator home page or by directly accessing the controller's IP address using a supported browser.
See the Dell OpenManage Server Administrator Command Line Interface User's Guide and the Dell Remote Access Controller Racadm User's Guide for information about running the Remote Access Controller from the command line.
When using the Remote Access Controller, you can click Help on the global navigation bar for more detailed information about the specific window you are viewing. Remote Access Controller help is available for all windows accessible to the user based on user privilege level and the specific hardware and software groups that Server Administrator discovers on the managed system.
NOTICE: Do not query or configure a DRAC 5 card using Server Administrator, remotely or locally, when the card is resetting or performing a firmware update. During reset, the DRAC 5 card goes offline for a short duration. Accessing the DRAC 5 card during reset may cause problems with the data displayed in the graphical user interface or command line interface (CLI.)
NOTE: The Remote Access Controller is not available on modular systems. You must directly connect to the DRAC on a modular system. See the Dell Embedded Remote Access/MC Controller User's Guide for more information.
NOTE: See the Dell Remote Access Controller Installation and Setup Guide for complete information about installing and configuring a DRAC III, a DRAC III/XT, ERA, or an ERA/O controller, and using a DRAC to remotely access an inoperable system. See the Dell Embedded Remote Access/MC Controller User's Guide for complete information about configuring and using an ERA/MC controller to remotely manage and monitor your modular system and its shared resources through a network.
Hardware Prerequisites
The managed system must have a DRAC installed to use the Remote Access Controller.
For a list of specific hardware requirements for your DRAC, seethe readme file for your remote access controller on the Systems Management Consoles CD and the Dell Remote Access Controller Installation and Setup Guide or the Dell Embedded Remote Access/MC Controller User's Guide on the Documentation CD.
NOTE: The DRAC software is installed as part of the Typical Setup and Custom Setup installation options when installing managed system software from the Dell PowerEdge Installation and Server Management CD, provided that the managed system meets all of your DRAC's installation prerequisites. See the appropriate DRAC documentation for complete software and hardware requirements.
Software Prerequisites
The managed system must have the DRAC software installed. See the Dell Remote Access Controller Installation and Setup Guide or the Dell Embedded Remote Access/MC Controller User's Guide for a complete list of software installation prerequisites.
NOTE: The DRAC software is installed as part of the Typical Setup and Custom Setup installation options when installing managed system software from the Dell PowerEdge Installation and Server Management CD, provided that the managed system meets all of your DRAC's installation prerequisites. See the appropriate DRAC documentation for complete software and hardware requirements.
Adding and Configuring DRAC Users
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
The DRAC can store information for up to 16 users. The Remote Access Controller provides security by requiring a user to provide a user name and password prior to establishing a remote connection. The Remote Access Controller can also provide paging services to notify users if the system crashes, loses power, or experiences a defined list of other events. Paging services are only available for DRAC III cards.
NOTE: Some configuration capabilities are available only on systems with DRAC III, DRAC III/XT, ERA, and ERA/O, and not on systems with DRAC 4 or DRAC 5. To configure DRAC 4 or DRAC 5, use the Launch Remote Connect Interface option in the RAC Properties window. See the Dell Remote Access Controller 4 User's Guide for more information on using DRAC 4 or Dell Remote Access Controller 5 User's Guide for more information on using DRAC 5.
To create a DRAC user, perform the following steps:
Click the Main System Chassis object on the Server Administrator home page, and then click the
Remote Access object.
Click the Users tab.
The Remote Access Users window appears.
Click Add.
The Add Remote Access User window appears.
Type a user name in the User Name field.
Type a new password in the New Password field.
Type the new password again in the Confirm Password field.
Configure numeric paging (for DRAC III users only):
Click the check box next to Enable Numeric Paging and enter a pager number in the
Pager Number field.
Enter the numeric message in the Numeric Message field that you want the DRAC to send when
it receives certain events.
Configure e-mail paging:
Click the check box next to Enable Email Paging and enter an e-mail address in the Email
Address field.
Enter the message in the Message field that you want the DRAC to send when it receives
certain events.
Configure alphanumeric paging (for DRAC III users only):
Click the check box next to Enable Alpha-Numeric Paging and enter a pager number in the
Pager Number field.
Select the alphanumeric protocol used by the pager's service provider, 7E0 or 8N1.
Select the pager's baud rate, 300 or 1200.
Enter the message in the Custom Message field that you want the DRAC to send when it receives
certain events.
Enter the pager's PIN in the Pager ID field, and then, if required, enter a pager password in the
Pager Password field.
Click Apply Changes at the bottom of the window.
Under Severity Configuration, specify the trap and the severity that the trap must have to trigger a
paging action from the DRAC.
Traps enable you to configure the DRAC to respond to alert conditions from the system's ESM hardware or to other conditions such as operating system crashes or power failures.
The first (left-most) column of check boxes corresponds to the severity level Informational, the second column corresponds to the severity level Warning, and the third column corresponds to the severity level Critical. The last seven events can only report the severity level Informational.
Click Apply Changes and then click OK to save the alert, paging, and user configuration to the Server
Administrator data repository.
Server Administrator returns to the Users tab. The user you just created and configured is displayed in the User Name list.
Configuring an Existing DRAC User
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
To configure a DRAC user, perform the following steps:
Click the Main System Chassis object on the Server Administrator home page, and then click the
Remote Access object.
Click the Users tab.
The Remote Access Users window appears.
Click the user name for the user you want to configure.
Change the password:
Select the check box next to Change Password and type a new password in the Password field.
Type the new password again in the Confirm Password field.
Configure numeric paging (for DRAC III users only):
Select the check box next to Enable Numeric Paging and enter a pager number in the
Pager Number field.
Enter the numeric message in the Numeric Message field that you want the DRAC to send when
it receives certain events.
Configure e-mail paging:
Select the check box next to Enable Email Paging and enter an e-mail address in the
Email Address field.
Enter the message in the Message field that you want the DRAC to send when it receives
certain events.
Configure alphanumeric paging (for DRAC III users only):
Select the check box next to Enable Alpha-Numeric Paging and enter a pager number in the
Pager Number field.
Select the alphanumeric protocol used by the pager's service provider, 7E0 or 8N1.
Select the pager's baud rate, 300 or 1200.
Enter the message in the Custom Message field that you want the DRAC to send when it receives
certain events.
Enter the pager's PIN in the Pager ID field, and then, if required, enter a pager password in the
Pager Password field.
Click Apply Changes at the bottom of the window.
Under Severity Configuration, specify the trap and the severity that the trap must have to trigger a
paging action from the DRAC.
Traps enable you to configure the DRAC to respond to alert conditions from the system's ESM hardware or to other conditions such as operating system crashes or power failures.
The first (left-most) column of check boxes corresponds to the severity level Informational, the second column corresponds to the severity level Warning, and the third column corresponds to the severity level Critical. The last seven events can only report the severity level Informational.
Click Apply Changes and then click OK to save the alert, paging, and user configuration to the Server
Administrator data repository.
Server Administrator returns you to the Users tab.
Configuring the DRAC Network Properties
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
Your DRAC contains an integrated 10BASE-T/100BASE-T Ethernet NIC and supports TCP/IP. The NIC has a default address of 192.168.20.1 and a default gateway of 192.168.20.1.
NOTE: If your DRAC is configured to the same IP address as another NIC on the same network, an IP address conflict occurs. The DRAC stops responding to network commands until the IP address is changed on the DRAC. The DRAC must be reset even if the IP address conflict is resolved by changing the IP address of the other NIC.
NOTE: Changing the IP address of the DRAC causes the DRAC to reset. If SNMP polls the DRAC before it initializes, a temperature warning is logged because the correct temperature is not transmitted until the DRAC is initialized.
To configure the network properties of your DRAC, perform the following steps:
Click the Main System Chassis object on the Server Administrator home page, and then click the
Remote Access object.
Click the Configuration tab.
The Configure Network Properties window appears.
Select the check box next to Enable NIC (this option is selected by default).
To have the DHCP system assign the NIC information, select the check box next to Use DHCP (For
NIC IP Address). If you do not, deselect this check box and enter the DRAC's NIC information in the
Static IP Address, Static Subnet Mask, and Static Gateway Address fields.
Enable dial-in networking (for DRAC III users only):
Select the check box next to Enable Dial-In (this option is selected by default).
To have the DHCP system assign the dial-in information, select the check box next to Use DHCP
(For Dial-In IP Address). If you do not, deselect this check box and enter the DRAC III modem's
base IP Address in the Base IP Address field.
Specify the Dial-In Authentication settings that dial-in connections require:
Any — Allows the connection to use any type of encryption, including no encryption
Encrypted — Requires the connection to use some type of encryption
CHAP — Requires the connection to use the CHAP
To enable SMTP server address control, click the check box next to Enable SMTP, and type the
SMTP server address in the SMTP (Email) Server Address field.
Click Apply Changes and click OK to save your changes.
Configuring the DRAC Alert Properties
DRACs can be configured to respond to alert conditions from the system's ESM or to other conditions such as operating-system crashes or power failures.
DRACs offer the following types of alert actions:
Alphanumeric paging (DRAC IIIs only) (See "Adding and Configuring DRAC Users" for information about configuring this type of alert action.)
Numeric paging (DRAC IIIs only) (See "Adding and Configuring DRAC Users" for information about configuring this type of alert action.)
SNMP traps (See the following subsection for information about configuring this type of alert action.)
Configuring the SNMP Alert Properties
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
To configure the Remote Access Controller alert properties, perform the following steps:
Click the Main System Chassis object on the Server Administrator home page, and then click the
Remote Access object.
Click the Configuration tab.
Click SNMP.
Click Add or click the Destination IP Address to edit existing SNMP alert properties.
Select the check box next to Enable SNMP Trap, if it is not already selected.
Enter the SNMP community name to which the destination management station belongs in the
Community field.
Enter a destination IP address of the management station to which you want the DRAC to send
SNMP traps when an event occurs in the IP Addressfield.
Use the check boxes under Severity Configuration to specify the events and the severity level that
those events must have to trigger an alert action from the DRAC.
The first (left-most) column of check boxes corresponds to the severity level Informational, the second column corresponds to the severity level Warning, and the third column corresponds to the severity level Critical. The last seven events can only report the severity level Informational.
Click Apply Changes and then click OK to save your changes.
Configuring DRAC III Dial-in (PPP) Users and Modem Settings
Dial-in (PPP) users and modem features are currently only available for the DRAC III.
Adding and Configuring a DRAC III Dial-In (PPP) User
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
This subsection describes how to add and configure a dial-in (PPP) user. After dial-in users are authenticated, they must enter the DRAC user authentication at the remote access controller login screen to access the DRAC III.
NOTE: The Server Administrator managed-system PPP client uses the 192.168.234.235 network to talk with the installed DRAC III. It is possible that this network IP address could already be in use by other systems or applications. If this situation occurs, the PPP connection fails to operate. If this address is already in use, the user is required to change the managed-system PPP client IP address to a different number. To change the managed-system PPP server IP address to use another network so that conflicts do not occur, you must use the racadm utility. See the Dell Remote Access Controller Racadm User's Guide for information about using the racadm utility.
To add and configure dial-in users, perform the following steps:
On the Server Administrator home page, click the Main System Chassis object, and then click the
Remote Access object.
Click the Configuration tab.
Click Dial-In Users.
Click Add.
Type a user name in the User Namefield.
Type a new password in the Password field.
Type a callback number in the Callback Number field.
This number is the one the Remote Access Controller calls if Callback Type is set to Preset.
Select a setting from the Callback Type drop-down menu:
None — When called, the Remote Access Controller does not disconnect and call back; the connection remains active.
Preset — When called, the Remote Access Controller disconnects and calls the number specified in the Callback Number field; this setting activates the callback number control.
User Specified — When called, the Remote Access Controller asks the user for the callback number. Then the Remote Access Controller disconnects and calls the number the user specified.
Click Apply Changes and then click OK to save your changes.
Adding and Configuring DRAC III Demand Dial-Out Entries
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
If you set the dial-in (PPP) setting to Preset, the demand dial-out entry causes the Remote Access Controller to disconnect and call the management station back at a preset number. Upon callback, you must provide your DRAC user authentication to access the Remote Access Service.
NOTE: The DRAC III managed system software uses a PPP connection to talk to the installed DRAC. The IP address for this PPP connection is 192.168.234.235. It is possible that this network IP address could already be in use by other systems or applications. If this situation occurs, the PPP connection fails to operate. If this address is already in use, the user is required to change the managed-system PPP client IP address to a different number. To change the managed-system PPP server IP address to use another network so that conflicts do not occur, you must use the racadm utility. See the Dell Remote Access Controller Racadm User's Guide for information about using the racadm utility.
To add a demand dial-out entry, perform the following steps:
On the Server Administrator home page, click the Main System Chassis object, and then click the
Remote Access object.
Click the Configuration tab.
Select Demand Dial-Out.
Click Add.
Enter the management station IP address that the Remote Access Controller calls back when called by
this user.
Enter the phone number used by the system's modem in the Phone Number field.
Enter the user name for the demand dial-out user in the User Namefield.
Enter the password for the demand dial-out user in the Passwordfield.
Select a setting from the Authentication drop-down menu:
Any — Allows the connection using any type of encryption, including no encryption
Encrypted — Requires the connection to use some type of encryption
CHAP — Requires the connection to use the CHAP
Click Apply Changes and click OK to save your changes.
Configuring the DRAC III Modem Settings
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
If your DRAC III kit includes the optional PCMCIA modem, you must configure the modem prior to use.
To configure the DRAC III modem, perform the following steps:
On the Server Administrator home page, click the Main System Chassis object, and then click the
Remote Access object.
Click the Configuration tab.
Click Modem.
For Dial Mode, choose either Pulse or Tone.
From the Country Code drop-down menu, select the country where the DRAC III is located.
For Initialization String, enter the required initialization string for the DRAC III modem in the
text field.
Select a Baud Rate setting from the drop-down menu (the default is 38400).
Click Apply Changes, and then click OK to save your changes.
Configuring the DRAC Remote Features Properties
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
If the local boot image on the managed system has been corrupted, a DRAC has the ability to boot its host server using a diskette boot image that it downloads from a Trivial File Transfer Protocol (TFTP) server. This feature is called remote floppy boot. A DRAC can also update its firmware using a firmware image located on a TFTP server. This feature is called remote firmware update, and the process is similar to flashing a system BIOS.
To configure the remote floppy boot feature and the remote firmware update feature of your DRAC, perform the following steps:
Click the Main System Chassis object on the Server Administrator home page, and then click the
Remote Access object.
Click the Configuration tab.
The Configure Network Properties window appears.
Click Remote Features.
The Remote Properties window appears.
Select the check box next to Enable Remote Floppy Boot to configure the remote boot parameters,
Configure the DRAC's remote boot parameters:
Select the check box next to Enable Remote Floppy Boot.
Type the TFTP server's IP address in the Remote Floppy TFTP Address field.
Type the boot image filename in the Remote Floppy TFTP Path field. The path must be relative
to the root directory of the TFTP server.
Configure the DRAC's firmware update parameters:
Select the check box next to Enable Remote Firmware Update.
Type the TFTP server's IP address in the Remote Firmware TFTP Address field.
Type the firmware image filename in the Remote Firmware Update Path field. The path must be
relative to the root directory of the TFTP server.
Click Apply Changes and click OK to save your changes.
Configuring DRAC Security
NOTE: You must have Administrator privileges in Server Administrator to use the Remote Access Controller.
NOTE: See the Dell Remote Access Controller Installation and Setup Guide for more information about DRAC security features.
To configure your DRAC security from the Server Administrator home page, click System®Main System Chassis®Remote Accessand then click the Security tab. Under the Securitytab, you can perform CSR certificate management and set DRAC user login authentication options.
NOTE: Some of the DRAC certificate management operations use the FTP protocol to communicate with the DRAC firmware. If a firewall software is installed on the system, these operations may fail.
Certificate Management
Use the Certificate Management window to generate a certificate signing request (CSR), upload a server certificate or certificate authority (CA) certificate to the DRAC firmware, or view an existing server certificate or CA certificate. From the Certificate Management window, the following options are available:
A CSR is a digital request to a CA for a secure server certificate. Secure server certificates ensure the identity of a remote system and ensure that information exchanged with the remote system cannot be viewed or changed by others. To ensure the security for your DRAC, it is strongly recommended that you generate a CSR, submit the CSR to a CA, and upload the certificate returned from the CA.
A certificate authority is a business entity that is recognized in the IT industry for meeting high standards of reliable screening, identification, and other important security criteria. Examples of CAs include Thwate and VeriSign. Once the CA receives your CSR, they review and verify the information the CSR contains. If the applicant meets the CA's security standards, the CA issues a certificate to the applicant that uniquely identifies that applicant for transactions over networks and on the internet.
After the CA approves the CSR and sends you a certificate, you must upload the certificate to the DRAC firmware. The CSR information stored on the DRAC firmware must match the information contained in the certificate.
Generating a CSR
NOTICE: Each new CSR overwrites any previous CSR on the firmware. It is crucial that the CSR on the firmware matches the certificate returned from a CA.
From the Certificate Management window, select the Generate a new CSR option and click Next.
The Certificate Signing Request (CSR) Generation window appears.
Type a value or choose a value from a drop-down menu for each listed attribute and click Generate.
A message appears stating that the CSR was successfully generated and giving the path where it was saved.
You are now ready to send your CSR to a CA.
Uploading a Certificate
To upload your server certificate or CA certificate to the DRAC firmware, the certificate must reside on the DRAC's host server. You must designate the CSR type, the exact filename, and the absolute file path to the certificate on the server. Then, click Upload.
NOTE: Failure to enter the correct path for the location of the certificate on the host server does not result in a warning message.
From the Certificate Management window, select the Upload certificate option and click Next.
The Upload Certificate window appears.
Select the certificate type from the drop-down menu.
The selections are Server Certificate and CA Certificate.
Type the exact path and filename of the certificate to be uploaded.
NOTE: When you have a fully qualified path or filename that contains spaces, you must place double quotation marks around the string. For example, if your file is contained in c:\security files\certificates\sslcert.cer, you must place the fully qualified path name and filename in double quotations because a space appears between "security" and "files." For example: c:\security files\certificates\sslcert.cer
Click Upload.
A message appears stating that the certificate was successfully uploaded to the DRAC firmware.
Reset the DRAC to enable the new certificate.
NOTE: You must reset the DRAC after uploading the certificate to ensure that the new certificate is used.
Viewing a Certificate
The following information is included on both the View Server Certificate and View CA Certificate windows. See Table 7-1.
Table 7-1. Certificate Information
Attribute
Value
Type
Type of certificate, either a server certificate or a CA certificate
Serial
Certificate serial number
Key Size
Encryption key size
Valid From
Issuance date of the certificate
Valid To
Expiration date of the certificate
Subject
Certificate attributes entered by the subject
Issuer
Certificate attributes returned by the issuer
Configuring Remote Connect Authentication Options
Use the Remote Connect Authentication Options window to set DRAC user login authentication options. You can configure the DRAC to only allow login by users created through the Remote Access Controller (RAC users), or to allow DRAC login by users created both through the Remote Access Controller and through the local operating system.
Click System®Main System Chassis®Remote Accessand then click the Security tab.
The Certificate Management window appears.
Click Authentication Options.
The Remote Connect Authentication Options window appears. There are two configuration options, each proceeded by a check box.
The RAC Authentication check box is selected by default and cannot be deselected. This setting allows login to the DRAC by users created through the DRAC (DRAC users).
Select the Local Operating System Authentication check box to also allow login to the DRAC by users created through the local operating system.
NOTE: The Local Operating System Authentication check box is grayed out by default and cannot be checked or unchecked for DRAC firmware version 3.20 or later. Use Active Directory Authentication for DRAC
firmware version 3.20 or later. See the Dell Remote Access Controller Installation and Setup Guide for information on using Microsoft Active Directory with your Dell Remote Access Controller (DRAC III, DRAC III/XT, ERA, and ERA/O).
Click Apply Changes and click OK to save your changes.
Accessing and Using a Dell Remote Access Controller
To link to the Remote Access Controller DRAC Log in window from the Server Administrator home page, click the Main System Chassis object, click the Remote Access Controller object, click the Remote Connect tab, and then click Remote Connect. The DRAC Log in window appears.
After connecting to the DRAC you can monitor and manage your system, including accessing system and session information, managing the DRAC configurations, and performing remote access functions on the managed system. See the Dell Remote Access Controller Installation and Setup Guide for instructions on using a DRAC.
* DELL'S TERMS AND CONDITIONS: All sales subject to Dell's terms and conditions. You can find them by clicking on "Terms and Conditions of Sale" located at the bottom of our website, www.dell.co.nz OR on request.
