Operational Defect Database
BugZero found this defect 55 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
Hewlett Packard Enterprise | a00138485en_us
Advisory: HPE Multiple Server Platforms - Logical Drives Connected to an Enterprise Secure Key Manage (ESKM) Server May Report a Status of Standby Offline After an iLO 5/6 Firmware Upgrade
Last update date:
3/26/2024
Affected products:
HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers
HPE Integrated Lights-Out 6 (iLO 6)
HPE Apollo 4200 Gen10 Server
HPE Apollo 4510 Gen10 System
HPE Apollo 2000 Gen10 Plus System
HPE Apollo 6500 Gen10 Plus System
HPE Apollo 6500 Gen10 System
HPE ProLiant BL460c Gen10 Server Blade
HPE ProLiant DL110 Gen11
HPE ProLiant DL120 Gen10 Server
HPE ProLiant DL160 Gen10 server
HPE ProLiant DL180 Gen10 server
Affected releases:
HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers, HPE Integrated Lights-Out 6 (iLO 6)
Fixed releases:
No fixed releases provided.
Description:
Info
Any HPE Gen10, HPE 10 Plus or HPE Gen11 server, running in production security mode may report the logical drives connected to the Enterprise Secure Key Manage (ESKM) server as "standby offline" mode after performing an iLO 5/6 firmware update, as shown in the following image: For iLO 5, any upgrades from iLO 5 version 2.91 (or earlier) to iLO 5 version 3.01 (or later) will have this issue. For iLO 6, any upgrades from iLO 6 version 1.45 (or earlier) to iLO 6 version 1.56 (or later) will have this issue. Logical drives are reported as 'standby offline' since the iLO is unable to reach the ESKM server after the update is completed. Note: A bug in the production security state setting after the iLO update incorrectly enabled the "Disable weak ciphers" settings by default and it is not able to connect with the ESKM server.
Scope
Any HPE Gen10, HPE Gen10 Plus or HPE Gen11 server.
Resolution
As a workaround, follow the steps below to solve this issue: Go to Security > Encryption > Update Security Settings on the iLO User Interface. Uncheck the "Disable Weak Ciphers". A button to apply and reset will be displayed. Click on the Apply button. Note that iLO will request a reset. Reset the iLO for the change to apply. After resetting, the iLO will successfully connect to the ESKM and the status for the Logical drives will be reported correctly. Note: Once resolved, future updates from iLO 5 3.01 or iLO 6 1.56 (or later) will not exhibit the behavior. A future release of iLO will resolve this issue and this document will be updated when this information is available. RECEIVE PROACTIVE UPDATES : Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively in your e-mail through HPE Support Alerts. Sign up for Support Alerts at the following URL: HPE Email Preference Center. NAVIGATION TIP: For hints on navigating HPE.com to locate the latest drivers, patches and other support software downloads, refer to the Navigation Tips document. SEARCH TIP: For hints on locating similar documents on HPE.com, refer to the Search Tips document.
