HPE iLO standard and licensed features on HPE Gen8,

Gen9, and Gen10 servers

Abstract
This guide provides information about purchasing HPE iLO licenses.

Part Number: P00307-006

Published: July 2020
Edition: 1
© Copyright 2016-2020 Hewlett Packard Enterprise Development LP

Notices
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard Enterprise
products and services are set forth in the express warranty statements accompanying such products and services. Nothing
herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical
or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or copying.
Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical
Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard Enterprise has no
control over and is not responsible for information outside the Hewlett Packard Enterprise website.

Acknowledgments

Microsoft® and Windows® are either registered trademarks or trademarks of Microsoft Corporation in the United States
and/or other countries.

Java® and Oracle® are registered trademarks of Oracle and/or its affiliates.

Google™ is a trademark of Google Inc.

Google Chrome™ browser is a trademark of Google Inc.

Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries.

Red Hat® is a registered trademark of Red Hat, Inc. in the United States and other countries.

VMware® is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions.
SD is a trademark or registered trademark of SD-3C in the United States, other countries or both.
All third-party marks are property of their respective owners.
HPE iLO standard and licensed features
The following table provides information about the features available with each iLO license. For more information about these
features, see Standard and licensed feature descriptions.

Feature iLO Standard iLO Advanced1, 2, 3 iLO for ODIM

Platform support Ships at no extra cost in all All servers with iLO, All Gen10 servers with iLO
servers that support iLO. including ProLiant servers, 5 v2.10 or later
Apollo servers, Synergy
compute modules,
Edgeline servers installed
in an EL8000 chassis, and
Moonshot cartridges with
iLO used in an Edgeline
chassis.

Active Health System X X X

Advanced Power Management (Power X X

history graphs, Dynamic Power Capping)

Agentless Management X X X

Automatic Secure Recovery4 X X

Backup and Restore4 X X X

Chassis Power Regulator Mode5 X X

Commercial National Security Algorithm X X

(CNSA) Security State4

Core Boosting6 X X

Directory Service Authentication X X

Discovery Services X X

Email-Based Alerting X X

Embedded Remote Support X X X

Embedded System Health X X X

Firmware Verification4 X X

Table Continued

HPE iLO standard and licensed features 3

Feature iLO Standard iLO Advanced1, 2, 3 iLO for ODIM

Platform support Ships at no extra cost in all All servers with iLO, All Gen10 servers with iLO
servers that support iLO. including ProLiant servers, 5 v2.10 or later
Apollo servers, Synergy
compute modules,
Edgeline servers installed
in an EL8000 chassis, and
Moonshot cartridges with
iLO used in an Edgeline
chassis.

Global Team Collaboration through X X

Integrated Remote Console

HPE Resource Aggregator for ODIM X

support through the iLO plugin for ODIM

iLO Federation Discovery X X X

iLO Federation Management X X

iLO Reset with server UID button7 X X X

iLO RESTful API X X X

iLO Web Interface X X X

Integrated Remote Console (IRC/Virtual Pre-OS only for all servers X X

KVM—Supports text and graphics) except BL and WS. Standard
offering on BL and WS
servers

Integrated Remote Console Record and X X

Playback

IPMI Over LAN/DCMI X X X

IPv6 X X X

Jitter Smoothing4 X X

Kerberos Authentication X X

Key Manager support X X

One-Button Secure Erase X X

Table Continued

HPE iLO standard and licensed features 4

Feature iLO Standard iLO Advanced1, 2, 3 iLO for ODIM

Platform support Ships at no extra cost in all All servers with iLO, All Gen10 servers with iLO
servers that support iLO. including ProLiant servers, 5 v2.10 or later
Apollo servers, Synergy
compute modules,
Edgeline servers installed
in an EL8000 chassis, and
Moonshot cartridges with
iLO used in an Edgeline
chassis.

Performance Monitoring X X

Remote Syslog X X

RIBCL X X X

Scripted/URL-Based Virtual Media X X

Security Dashboard X X X

Server Configuration Lock X X

Server Health Summary7 X X X

Server System Restore4 X X

Silicon Root of Trust4 X X X

Smart Array Secure Encryption X X

SSH command-line interface X X X

Text-based Remote Console (Textcons) X X

Text-Based Remote Console through SSH8 X X

Two-Factor Authentication (Kerberos, X X

Smart Card - PIV/Common Access Card)

Update Service Access Settings4 X X

Virtual media through Remote Console Standard offering on BL and X X

WS servers only

Virtual Power Button X X X

Table Continued

HPE iLO standard and licensed features 5

Feature iLO Standard iLO Advanced1, 2, 3 iLO for ODIM

Platform support Ships at no extra cost in all All servers with iLO, All Gen10 servers with iLO
servers that support iLO. including ProLiant servers, 5 v2.10 or later
Apollo servers, Synergy
compute modules,
Edgeline servers installed
in an EL8000 chassis, and
Moonshot cartridges with
iLO used in an Edgeline
chassis.

Virtual Serial Port X X X

Virtual Serial Port Record and Playback X X

Workload Matching Profiles4 X X X

Workload Advisor X X

Zone Mapping, Zone Priority X X

1 Some of the iLO Advanced features were previously provided with the discontinued iLO Advanced Premium Security Edition license.
2 The iLO Advanced license is automatically included with Synergy compute modules.
3 The iLO Advanced license is automatically included with ProLiant e910 server blades that ship after June 1, 2020.
4 Available on Gen10 and later servers.
5 A license is required to use the User Configurable Mode setting.
6 Available on Gen10 servers only.
7 Available on Gen9 and later servers.
8 Text-Based Remote Console through SSH is supported only on servers that are configured to use the Legacy BIOS boot mode. It is not
supported on servers that are configured to use UEFI mode.

HPE iLO standard and licensed features 6

Standard and licensed feature descriptions
The following list describes standard and licensed HPE iLO server features.
Active Health System
The Active Health System monitors and records changes in the server hardware and system configuration. It enables you
to continuously monitor more than 1600 system parameters and receive consolidated health and service alerts.
Recommended for: All customers
Advanced Power Management
Enables power-related features such as time spent in Power Regulator Dynamic Savings mode, power consumption, and
power capping.
Recommended for: Enterprise, financial, government, security conscious customers
Agentless Management
Monitors and generates SNMP traps and additional OS data independently of the OS and processor.
Recommended for: All customers
Automatic Secure Recovery
Validates the iLO firmware when power is applied. If the firmware is invalid, the iLO firmware is flashed automatically (iLO
Standard license). Also validates the system ROM during server startup. If valid system ROM is not detected, the server is
prevented from booting. Recovery options include: Swapping the active and redundant ROM and initiating a firmware
verification scan and recovery action.
Backup and Restore
Allows you to restore the iLO configuration on a system with the same hardware configuration as the system that was
backed up. This feature is not meant to duplicate a configuration and apply it to a different iLO system.
Chassis Power Regulator Mode
A license is required to use the User Configurable Mode setting on the chassis Power Regulation page. When this mode
is configured, a user can specify a valid power cap value from a predefined range.
Commercial National Security Algorithm (CNSA) Security State
The CNSA security state (also called SuiteB) is available only when the FIPS security state is enabled.
When set to this security state:

• iLO operates in a mode intended to comply with the CNSA requirements defined by the NSA.
• iLO operates in a mode intended to secure systems that hold United States government top secret classified data.
• iLO credentials are required when you use SUM to access iLO.
• You cannot connect to the server with network-based tools that do not support TLS 1.2.
• The system maintenance switch iLO security setting (also called the iLO Security Override switch) does not disable the
password requirement for logging in to iLO.

Core Boosting
Core Boosting works with selected Intel processors to enable higher performance across more processor cores. This
feature is available on Gen10 servers. It is not supported on Gen10 Plus servers.

Standard and licensed feature descriptions 7

Directory Service Authentication
Integrates directory services, such as Microsoft Active Directory, to authorize directory users with assigned user roles to
Integrated Lights-Out processors.
Discovery Services
Automatically reports server locations to HPE SIM and Insight Control. Power Discovery Services is an enhancement to the
iPDU technology. It automatically reports iPDU power status.
Email-Based Alerting
Sends iLO alert conditions that are detected independently of the host operating system to a specified email address.
Recommended for: All customers
Embedded Remote Support
Enables you to register servers for HPE remote support.
Recommended for: All customers
Embedded System Health
Monitors fans, temperature sensors, power supply sensors, and VRMs without loading the System Management Driver.
You can access the status of these components from all iLO interfaces, independently of the host operating system. The
management processor also reports sensor status to the operating system through an IPMI specified interface. The
intelligence of iLO manages the Sea of Sensors thermal control, directs the Dynamic Power Capping technology, and
monitors the health of server components.
Recommended for: All customers performing system maintenance
Firmware Verification
Allows you to run scheduled or on-demand firmware verification scans. You can configure recovery actions to implement
when an issue is detected. You can also view, download, and delete quarantined firmware.
Global Team Collaboration through Integrated Remote Console
Enables up to six iLO users with remote console privileges to collaborate by using the Integrated Remote Console to
troubleshoot, maintain, and administer remote servers.
iLO Federation Discovery
Queries any iLO in a Federation Group of multiple systems to return results from the full group.
Recommended for: Enterprise customers with many Hewlett Packard Enterprise servers
iLO Federation Management
Enables you to manage multiple servers from one system running the iLO web interface.
Recommended for: Enterprise customers with many Hewlett Packard Enterprise servers
iLO Reset with server UID button
Pressing the UID button for five seconds initiates a manual iLO reset without bringing down the server.
Recommended for: All customers
iLO RESTful API
iLO includes the iLO RESTful API, which is Redfish API conformant. The iLO RESTful API is a management interface that
server management tools can use to perform configuration, inventory, and monitoring tasks by sending basic HTTPS
operations (GET, PUT, POST, DELETE, and PATCH) to the iLO web server.
The RESTful Interface Tool (iLOREST) is a scripting tool that allows you to automate HPE server management tasks. It
provides a set of simplified commands that take advantage of the iLO RESTful API. You can install the tool on your
computer for remote use or install it locally on a server with a Windows or Linux Operating System. The RESTful Interface

Standard and licensed feature descriptions 8

 Tool offers an interactive mode, a scriptable mode, and a file-based mode similar to CONREP to help decrease automation
times.
Recommended for: Customers with multivendor data centers who want a common way to manage them, and do not like
the insecure nature of IPMI.
iLO Web Interface
Adds web-based monitoring and management of licensed features to the standard iLO user interface.
Recommended for: All customers
Integrated Remote Console
The iLO remote console can be used to remotely access the graphical display, keyboard, and mouse of the host server.
The remote console provides access to the remote file system and network drives.
With remote console access, you can observe POST messages as the server starts, and initiate ROM-based setup activities
to configure the server hardware. When you install an OS remotely, the remote console (if licensed) enables you to view
and control the host server monitor throughout the installation process.
Recommended for: All customers with remote management needs.
Integrated Remote Console Record and Playback
Records and plays back video streams of events, such as startup, ASR events, and sensed operating system faults. You can
manually start and stop the recording of console video. You can use the Integrated Remote Console applet to view saved
iLO video files.
Recommended for: Enterprise customers
IPMI over LAN/DCMI
Uses the LAN or Data Center Management Interface function of the IPMI specification to establish remote connectivity
independently of the processor, firmware, and OS.
Recommended for: Customers with multivendor data centers who want a common way to manage them.
IPv6
Provides IPv6 network support.
Jitter Smoothing
Levels and balances frequency fluctuation (jitter) in the processor, resulting in lower latency.
Kerberos Authentication
Kerberos support enables a user to log in to iLO by clicking the Zero Sign In button on the login page.
Because a system administrator establishes a trust relationship between iLO and the domain before user sign-on, any
form of authentication (including two-factor authentication) is supported.
Recommended for: Enterprise, financial, government, security conscious customers
Key Manager support
Key managers can be used in conjunction with HPE Smart Array Secure Encryption and UEFI-managed encryption.
A key manager generates, stores, serves, controls, and audits access to data encryption keys. It enables you to protect and
preserve access to business-critical, sensitive, data-at-rest encryption keys.
One-Button Secure Erase
This feature is used to decommission a server or prepare it for a different use.
One-button secure erase implements the NIST SP 800-88 Revision 1 Sanitization Recommendations for Purging user
data and returns the server and supported components to the default state. This feature automates many of the tasks you
follow in the Statement of Volatility document for a server.

Standard and licensed feature descriptions 9

Performance Monitoring
View performance data collected from supported sensors on servers with Innovation Engine support. You can configure
alerts based on the collected data.
Remote Syslog
Sends event notification messages to Syslog servers.
Recommended for: Enterprise customers with Security and Event Management (SIEM) systems
RIBCL
Provides Remote Insight Board Command Language for server administration.
Scripted/URL-Based Virtual Media
Connects scripted media for access by the servers in an iLO Federation group.
Security Dashboard
The Security Dashboard displays the status of important security features, the overall system security status, and the
current configuration for the Security State and Server Configuration Lock features. Use the dashboard to evaluate your
configuration for potential risks. When a risk is detected, you can view details and advice for how to improve system
security.
Server Configuration Lock
The Server Configuration Lock feature alerts the administrator to activities such as device substitution or addition,
hardware removal, Secure Boot changes, and firmware installations. You can configure this feature in the UEFI System
Utilities or by using the iLO RESTful API.
Server Health Summary
You can use iLO to display the Server Health Summary on an external monitor. This feature is useful for troubleshooting
when the server will not start. You can also use it to view the server IP address and other health information.
Recommended for: All customers
Server System Restore
You can use iLO to generate a recovery event that triggers a separate management tool to initiate a full system recovery.
Recovery involves installation of the System Recovery Set followed by reimaging the server operating system.
Silicon Root of Trust
Starting With HPE Gen10 servers, Hewlett Packard Enterprise offers the first industry-standard servers to include a silicon
root of trust built into the hardware. The silicon root of trust provides a series of trusted handshakes from the lowest level
firmware to the BIOS and software to ensure a known good state.
Smart Array Secure Encryption
Supports HPE Smart Array controllers, providing data-at-rest encryption for direct-attached HDD or SSD storage
connected to servers. This encryption provides an integrated solution to encrypting HDD or SSD volumes by using 256-bit
XTS-AES algorithms.
Recommended for: Enterprise, financial, government, security conscious customers
SSH Command Line Interface
Provides monitoring and management through a Secure Shell CLI.
Recommended for: All customers who have remote management needs.
Text-Based Remote Console (Textcons)
Textcons allows you to perform two-way data stream communication through the server BIOS.
Recommended for: Hyperscale customers who mainly use Linux in BIOS mode.

Standard and licensed feature descriptions 10

Text-Based Remote Console through SSH
Provides a text-based remote console you can customize that is protected by the SSH encryption.
Recommended for: Hyperscale customers
Two-Factor Authentication (Kerberos, Smart Card - PIV/Common Access Card)
You can implement two-factor authentication by configuring Kerberos authentication or PIV/CAC Smartcard
authentication.
Update Service Access Settings
This access setting allows you to configure a downgrade policy and decide whether to accept third-party firmware update
packages.
Virtual Media through Remote Console
Enables you to use the Remote Console to control virtual media.
Recommended for: All customers with remote management needs.
Virtual Power Button
Remotely operates the power button of a host.
For example, if the host server is off, you can power it on. You can also power off and on the server in one step. A "press
and hold" option is available in case a momentary press is insufficient to power off a server experiencing an OS failure.
Recommended for: All customers who have remote management needs.
Virtual Serial Port
Provides a bidirectional data flow with a server serial port. Using the remote console, this feature enables you to operate
as if a physical serial connection exists on the remote server serial port.
Recommended for: Hyperscale customers who are predominantly Linux users.
Virtual Serial Port Record and Playback
The Virtual Serial Port provides a bidirectional data flow with a server serial port. Using the remote console, you can
operate as if a physical serial connection exists on the remote server serial port.
The Virtual Serial Port is displayed as a text-based console, but information is rendered through graphical video data. iLO
displays this information through an SSH client when the server is in a pre-operating-system state. This feature enables an
iLO Standard system to observe and interact with the server during POST.
Workload Matching Profiles
Allows you to tune the resources in supported servers by choosing a preconfigured workload profile. The server will
automatically configure the BIOS settings to match the selected workload.
Workload Advisor
Allows you to view selected server workload characteristics. You can view and configure recommended performance
tuning settings based on the monitored data.
Zone Mapping, Zone Priority
Allows you to set each node to be grouped with the entire chassis or an existing user-defined zone.
When zones are configured, you can set the power regulation priority for each zone. When power caps are set, zones with
the highest priority receive more power than zones with lower priority settings.

Standard and licensed feature descriptions 11

Websites
General websites
Hewlett Packard Enterprise Information Library
https://www.hpe.com/info/EIL
For additional websites, see Support and other resources.

Product websites
iLO
https://www.hpe.com/info/ilo
iLO 5 Information Library
https://www.hpe.com/support/ilo-docs
iLO support
https://www.hpe.com/support/ilo5
iLO helpful links and resources
https://www.hpe.com/support/ilo-resource-ref-en
iLO RESTful API and RESTful Interface Tool
https://www.hpe.com/support/restfulinterface/docs

Websites 12
License, SAID, and software update support
HPE iLO licensing support contact addresses
To obtain support, you must provide proof of a license purchase.

NOTE: You cannot exchange a license that is redeemed (activated).

• Americas: licensing.ams@hpe.com
• Europe, Middle East, and Africa: licensing.emea@hpe.com
• Asia-Pacific and Japan: licensing.apj@hpe.com

Linking an SAID to an HPE Passport account

The SAID is a 12-digit number assigned for entitlement to a service agreement contract. You must have an SAID to access
Hewlett Packard Enterprise Technical Support and Software Updates for Hewlett Packard Enterprise hardware and software
products.
When you register a license on the My HPE Software Center website, you receive a Welcome to Support letter or email that
includes your SAID and other contract information.
After you receive your SAID, you can link it to your HPE Passport account so that you can access updates directly from the My
HPE Software Center website (http://www.hpe.com/downloads/software).

Procedure

1. Navigate to the Hewlett Packard Enterprise Support Center at https://www.hpe.com/support/hpesc.

2. Log in with your HPE Passport account.
3. On the left navigation menu, click CONTRACTS AND WARRANTIES.
4. Click Link support agreements and follow the onscreen instructions.

License, SAID, and software update support 13

Support and other resources

Accessing Hewlett Packard Enterprise Support

• For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website:
https://www.hpe.com/info/assistance
• To access documentation and support services, go to the Hewlett Packard Enterprise Support Center website:
https://www.hpe.com/support/hpesc

Information to collect
• Technical support registration number (if applicable)
• Product name, model or version, and serial number
• Operating system name and version
• Firmware version
• Error messages
• Product-specific reports and logs
• Add-on products or components
• Third-party products or components

Accessing updates
• Some software products provide a mechanism for accessing software updates through the product interface. Review your
product documentation to identify the recommended software update method.
• To download product updates:
Hewlett Packard Enterprise Support Center
https://www.hpe.com/support/hpesc
Hewlett Packard Enterprise Support Center: Software downloads
https://www.hpe.com/support/downloads
My HPE Software Center
https://www.hpe.com/software/hpesoftwarecenter
• To subscribe to eNewsletters and alerts:
https://www.hpe.com/support/e-updates
• To view and update your entitlements, and to link your contracts and warranties with your profile, go to the Hewlett
Packard Enterprise Support Center More Information on Access to Support Materials page:
https://www.hpe.com/support/AccessToSupportMaterials

Support and other resources 14

 IMPORTANT: Access to some updates might require product entitlement when accessed through the Hewlett Packard
Enterprise Support Center. You must have an HPE Passport set up with relevant entitlements.

Remote support
Remote support is available with supported devices as part of your warranty or contractual support agreement. It provides
intelligent event diagnosis, and automatic, secure submission of hardware event notifications to Hewlett Packard Enterprise,
which will initiate a fast and accurate resolution based on your product's service level. Hewlett Packard Enterprise strongly
recommends that you register your device for remote support.
If your product includes additional remote support details, use search to locate that information.

Remote support and Proactive Care information

HPE Get Connected
https://www.hpe.com/services/getconnected
HPE Proactive Care services
https://www.hpe.com/services/proactivecare
HPE Datacenter Care services
https://www.hpe.com/services/datacentercare
HPE Proactive Care service: Supported products list
https://www.hpe.com/services/proactivecaresupportedproducts
HPE Proactive Care advanced service: Supported products list
https://www.hpe.com/services/proactivecareadvancedsupportedproducts

Proactive Care customer information

Proactive Care central
https://www.hpe.com/services/proactivecarecentral
Proactive Care service activation
https://www.hpe.com/services/proactivecarecentralgetstarted

Warranty information
To view the warranty information for your product, see the links provided below:
HPE ProLiant and IA-32 Servers and Options
https://www.hpe.com/support/ProLiantServers-Warranties
HPE Enterprise and Cloudline Servers
https://www.hpe.com/support/EnterpriseServers-Warranties
HPE Storage Products
https://www.hpe.com/support/Storage-Warranties
HPE Networking Products
https://www.hpe.com/support/Networking-Warranties

Regulatory information
To view the regulatory information for your product, view the Safety and Compliance Information for Server, Storage, Power,
Networking, and Rack Products, available at the Hewlett Packard Enterprise Support Center:
https://www.hpe.com/support/Safety-Compliance-EnterpriseProducts

Support and other resources 15

 Additional regulatory information
Hewlett Packard Enterprise is committed to providing our customers with information about the chemical substances in our
products as needed to comply with legal requirements such as REACH (Regulation EC No 1907/2006 of the European
Parliament and the Council). A chemical information report for this product can be found at:
https://www.hpe.com/info/reach
For Hewlett Packard Enterprise product environmental and safety information and compliance data, including RoHS and
REACH, see:
https://www.hpe.com/info/ecodata
For Hewlett Packard Enterprise environmental information, including company programs, product recycling, and energy
efficiency, see:
https://www.hpe.com/info/environment

Documentation feedback
Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help us improve the
documentation, send any errors, suggestions, or comments to Documentation Feedback (docsfeedback@hpe.com). When
submitting your feedback, include the document title, part number, edition, and publication date located on the front cover of
the document. For online help content, include the product name, product version, help edition, and publication date located on
the legal notices page.

Support and other resources 16