Official HP iLO SNMP template and iLO 5

[csmall]

It seems that the Official template isn't reporting the correct overall system health on ilo 5

Anyone know if it is possible to fix it to make it work on both ilo5 and older ilo's?

[gofree]

can you elaborate more please ? possibly open a zabbix bug ? I think Ive seen that in the past also - dont have the ILOs in monitroing scope at the moment

[csmall]

can you elaborate more please ? possibly open a zabbix bug ? I think Ive seen that in the past also - dont have the ILOs in monitroing scope at the moment

When looking at the "Overall system health status" iLO 4 is reporting it correctly as "ok (2)" but iLO 5 is reporting it as "failed (4)".

If I look at the actual iLO 5 web interface it says the system health is good/green.

I just looked at different iLO 5 device and it is reporting as "ok (2)" (expected behavior). I wonder if it is a difference in the iLO firmware versions because the one with the newer firmware has some visual differences on its web interface and is also the one reporting failed. The newer firmware looks like it introduces a "security risk" under the system health etc..

iLO 5 firmware version that seems to report the system health correctly: Integrated Lights-Out 5 1.15
iLO 5 firmware that seems visually different and is not having the system health reported correctly: Integrated Lights-Out 5 1.45

[Hamardaban]

How do you get information from the iLo ? Are you using SNMP or IPMI ?
Pls show the OID or key you use.

[csmall]

How do you get information from the iLo ? Are you using SNMP or IPMI ?
Pls show the OID or key you use.

SNMP

I am using the built-in HP iLO template for SNMPv2.

The OID it is using is 1.3.6.1.4.1.232.6.1.3.0

Perhaps this OID changed in the newer iLO5 firmware.

[csmall]

The OID may be correct but the newer firmware looks to have introduced additional functionality that may be contributing to the overall system health status.

For example there is new security risk functionality and I'm wondering if that is not green/OK, is the overall system health impacted and changed from ok (2) to failed (4)

[Hamardaban]

Yes - this is quite possible, since this is a summary indicator:
(failed(4): If any single component condition is failed)

Is there a list of risks on the problem server in Security Dashboard table?

You may be interested in these OIDs
(1.3.6.1.4.1.232.9.2.2.34)
cpqSm2CntlrSecurityState
SYNTAX INTEGER {
factory(1),
wipe(2),
production(3),
highSecurity(4),
fips(5),
cnsa(6)
}
ACCESS read-only
STATUS mandatory
DESCRIPTION
"Indicate security state "


(1.3.6.1.4.1.232.9.2.2.37)
cpqSm2CntlrOverallSecStatus OBJECT-TYPE
SYNTAX INTEGER {
Ok(1),
Risk(2),
Ignored(3)
}
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The field indicates the overall security status."

[csmall]

I will check but I'm sure there are because it it red.

These oid's look very useful. Where did you find the information?

[Hamardaban]

HPE Systems Insight Manager - MIB Kit

https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-c04272529

[rvanderkooi]

Hi, i have the same problem here, but i can't fixed the security problems on all servers here.. like certificate.. only my preference sounds like not a warning in Zabbix.