How to access IPMI remote console in Supermicro X8 systems in 2023 | Supermicro Tech Tips
ฝัง
- เผยแพร่เมื่อ 20 ต.ค. 2024
- In this video, I'm going to show you how to access the IPMI remote console application of Supermicro X8 systems. Supermicro X8 generation servers are over 10 years old now, and their old java web start based remote console application no longer works with modern web browsers due to various security restrictions. I'm going to show you the 3 steps that will allow you to still use these remote console applications in 2023.
Timestamps:
0:49 - Demonstration of the problem
3:24 - How to fix this problem
3:34 - Step 1: Have Java Web Start from JRE 1.8 installed
5:40 - Step 2: Download and use old Firefox 33 browser
8:16 - Step 3: Add IPMI site to Java security exception list
9:49 - Remote console application works!
10:11 - Recap of solution
If you'd like to support this channel, please consider shopping at my eBay store: ebay.to/2ZKBFDM
eBay Partner Affiliate disclosure:
The eBay links in this video description are eBay partner affiliate links. By using these links to shop on eBay, you support my channel, at no additional cost to you. Even if you do not buy from the ART OF SERVER eBay store, any purchases you make on eBay via these links, will help support my channel. Please consider using them for your eBay shopping. Thank you for all your support! :-)
just had the same problem with an old 3U SM. I launch the jnlp file using the Openwebstart and java 1.8 added to it.
that's cool. i was not aware of that option! thanks for sharing!
I have learned a lot from your videos and have gained knowledge about servers thanks to your teachings, and I hope you will continue to make videos in the future.
Thank you so much for your kind words. I'm happy to hear that some of my videos have been helpful to you! Thank you for watching!
for my Dells I roll a windows 7 machine running an older Java, but I like your way as well.
Yeah, running old OS in VM is certainly another way. Thanks for watching @UnkyjoesPlayhouse!
I have an old PDU that was set to SSL only but it's SSL is too old and all the modern browsers have deprecated these old ciphers and protocols it was using. Lol, the only browser that let me connect was IE and I able to disable SSL on the PDU. Great video! I've already fought through these issues in the past and I recall on Windows there was an additional issue with colors (console was green?) but it might have been specific with the SM IPMIView application and I recall replacement of a DLL was involved to fix it. BTW, this is a good case for a virtual machine with all the obsolete software/settings installed and auto-updates disabled!
Yeah, I feel the pain as I have an old PDU from APC like that as well. I don't use the HTTP/HTTPS anymore and just use SSH, but even then, the ciphers it wants to use for SSH are deprecated! LOL It sucks when you have a very useful device that is no longer maintained but still good at doing its job. And it's even worse if there's no modern replacement that can do the job better.
Best and easiest way is Super Micro IPMIView To use. No Java or old browser required.
You are so right! I thought IPMIView was only for Windows and android, but i see they have a version for Linux too and they use their own included JRE. Thanks for pointing that out! :-)
you saved my life!
@@dHNNNmovies you are welcome
These java-based applets were absolute PITA to deal with. That's why I think solutions like PiKVM (although not full BMC) are much better for out-of-band power and access control. Most server brands (Dell, HP, IBM, Lenovo) these days are supported for max 5 years. After that time, manufacturers stop supporting the product. Considering the fact that web technologies are evolving so quickly these days, and new security vulnerabilities are discovered frequently, being stuck with vendor provided KVMoIP is huge limitation; those onboard KVMoIPs are crippling perfectly working servers that can continue working far beyond their regular vendor-provided support lifetime.
I could not agree with you more. They were a PITA even when they were still supported. It's not just these virtual kvm applications, but all the old IoT web interfaces on power controllers, UPSes, old cameras, and various other IoT or IoT like devices. They were never designed for long term maintenance but people are using them well beyond their lifespan because they are useful and they don't really do complicated things.
I think a unified open source virtual kvm/bmc solution that is community maintained with some sponsorship from commercial interests would be able to provide a longer term solution that could be properly maintained. Nobody buys servers because they like one vendors OOB management solution over another, so there's no point in keeping these type of things proprietary in my opinion.
there appears to be a *nix version of palemoon possibly(I've not tried it); if it's anything like the windows version of it, it's a still maintained old version of firefox that I have had luck with using with old NVR's that use old plugins/etc.... **my solution was just install win7 and install old jre in a vm dedicated to the purpose(home use:P)
That's one way to do it! :-)
there needs to be a much easer way. than a bunch of crazy stuff. this is like this with the x9 mother boards as well. my x10 works great but they use the html now instead. with there was a way to update the IPMI on the other boards to use HTML instead of Java.
the "easier" way is to simply have a VM of a really old OS like XP with an old browser and old java and only use it for accessing legacy stuff
I never liked the java / javaws virtual kvm solutions even when they were still supported.
I actually came across this video while searching for setting up ipmi with kvm console on a X9. Never really dealt with these SuperMicro boards before but I am in dire need of video output bc VGA output and PnP isnt working at all in its current live state, im sure I just need a reboot BUT from what ive been told (was just hired as sysadmin here) that the server RAID is down and will need to get to boot manager to select correct partition to boot from. Just need a backup plan if the reboot doesnt re-enable PnP. I Appreciate this. Hopefully IPMI is enabled in BIOS or else I think im screwed!
I bought a Supermicro X8DT3 2U off of eBay and it has a dedicated IPMI LAN port, I cleared the CMOS as stated on the manual, my router never picked the dedicated IPMI LAN port's MAC address. I have no clue to this knowledge, asking you, even when after clearing the CMOS, does it require us to manually configure the IPMI IP address settings using a VGA monitor? Since it only has a VGA monitor and I was trying to figure out a way how to get it set up purely headless mode. I ended up connecting a VGA monitor to the server and I saw that the IPMI BMC BIOS's IP address was still set to the previous owner's settings and that the IP was set to static, this made it impossible to access headless mode without knowing these details.
Clearing the CMOS only clears the settings for the system BIOS. The IPMI stuff has it's settings saved somewhere else. If you want to reset the IPMI settings, then you need to use a different tool like Supermicro IPMICFG to factory reset the IPMI.
@@ArtofServer Thanks for your reply. So lets say I have another server like this, I have no details about it and no VGA monitor or cable, but have a laptop, LAN cable and a router, how can I access the server's IPMI without knowing any static IP address set to it and the router is not picking up any info about the server? Thanks.
So I feel like I had this working in the past and I have no idea why it's not working now, but I had gone through this whole process the last time it was working, but now when I get past the warning prompts and the jviewer opens up I get an error "unable to find certificate in default keystore for validation".
Is there a certificate I need to get somewhere? And even if I do, looking at the certificate provided from the KVM interface (one of the prompts has a 'view more' option) it looks like it expires in 2013 so I'm not sure it would work.
There's no way in the settings that I can see to ignore certificates, but maybe there is in a config file somewhere?
See the next video I made after this. I show another way that is much easier.
I need to run this on windows, is there another way?
I'm not a Windows user, but I don't see why this method would not work in Windows? Alternatively, you can use the method in my other video here: th-cam.com/video/YWdWl6ATi50/w-d-xo.htmlsi=n1LaFjUbtxS1tmEb
Same pain i went through on a windows server, old version of the browser and old version of java and there is nothing else i can do for the devices i need to support.
I know the pain. You can either try to run older software like in this video, or run a virtual machine with an old OS just for the purpose of supporting those old interfaces.
@@ArtofServer CyberSec keep flagging the server (its a vm) because of the old versions and so every 90 days or so i have to go through the same conversation of its needed to support X device(s)
Carn't you upgrade them ?
You got £3m to replace the active appliances out there ?
Silence
repeat 90 days later when a different Cyber sec analyst picks the report up
Its frustrating because HTML5 support has been there for some time in the browsers but they thought fit to not use it and provide no other way to connect to the kit than java
Even with new firmware dropped (last year) its still java based, the newer versions of the appliances i think are java too for the ipmi side.
I'd be happy if they would allow us to ssh into the impi interface and get all the settings we get via the webui (what we get currently is cut down) and then a way to export our display and launch the java or other remote console window; same method we use for getting the java interface on some other machines to work but it doesn't in this case.
This is only going to get harder the older this stuff gets and the more java is left to rot.
Side note: supermicro has a piece of software call ipmiview, not tried it but it looks like it might have the remote console in it.
I need some help logging into my server the ADMIN/ADMIN password is not working could you possibly help with that
Look up a tool called ipmicfg from supermicro. You can use it to factory reset the ipmi configuration so the default credentials will work.
Supermicro provides you with a python script that can reset the credentials, just search it in google
X8 is 5500 5600 right
yes, that's correct.
Luckily on my Dell Server It's new enough to use HTML5.
Thanks a lot for sharing however you took too long, I was waiting for a videos can you please drop your LinkedIn profile or your email 😊
go here: artofserver.com