BMC
Baseboard Management Controller
Designed for the X13 and H13 Series

USER'S MANUAL
Revision 1.0a

The information in this user’s manual has been carefully reviewed and is believed to be accurate. The manufacturer
assumes no responsibility for any inaccuracies that may be contained in this document, and makes no commitment
to update or to keep current the information in this manual, or to notify any person or organization of the updates.
Please Note: For the most up-to-date version of this manual, please see our website at www.supermicro.com.
Super Micro Computer, Inc. ("Supermicro") reserves the right to make changes to the product described in this manualat any time and without notice. This product, including software and documentation, is the property of Supermicro and/or its licensors, and is supplied only under a license. Any use or reproduction of this product is not allowed, except
as expressly permitted by the terms of said license.
IN NO EVENT WILL Super Micro Computer, Inc. BE LIABLE FOR DIRECT, INDIRECT, SPECIAL, INCIDENTAL,
SPECULATIVE OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OR INABILITY TO USE THIS PRODUCTOR DOCUMENTATION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN PARTICULAR, SUPERMICRO COMPUTER, INC. SHALL NOT HAVE LIABILITY FOR ANY HARDWARE, SOFTWARE, OR DATA STOREDOR USED WITH THE PRODUCT, INCLUDING THE COSTS OF REPAIRING, REPLACING, INTEGRATING,
INSTALLING OR RECOVERING SUCH HARDWARE, SOFTWARE, OR DATA.
Any disputes arising between manufacturer and customer shall be governed by the laws of Santa Clara County in theState of California, USA. The State of California, County of Santa Clara shall be the exclusive venue for the resolutionof any such disputes. Supermicro's total liability for all claims will not exceed the price paid for the hardware product.
FCC Statement: This equipment has been tested and found to comply with the limits for a Class A digital device
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmfulinterference when the equipment is operated in industrial environment. This equipment generates, uses, and canradiate radio frequency energy and, if not installed and used in accordance with the manufacturer’s instruction manual,
may cause harmful interference with radio communications. Operation of this equipment in a residential area is likely
to cause harmful interference, in which case you will be required to correct the interference at your own expense.
California Best Management Practices Regulations for Perchlorate Materials: This Perchlorate warning applies only
to products containing CR (Manganese Dioxide) Lithium coin cells. “Perchlorate Material-special handling may apply.
See www.dtsc.ca.gov/hazardouswaste/perchlorate”.

!

WARNING: This product can expose you to chemicals including
lead, known to the State of California to cause cancer and birthdefects or other reproductive harm. For more information, go
to www.P65Warnings.ca.gov.

The products sold by Supermicro are not intended for and will not be used in life support systems, medical equipment,
nuclear facilities or systems, aircraft, aircraft devices, aircraft/emergency communication devices or other criticalsystems whose failure to perform be reasonably expected to result in significant injury or loss of life or catastrophic
property damage. Accordingly, Supermicro disclaims any and all liability, and should buyer use or sell such products
for use in such ultra-hazardous applications, it does so entirely at its own risk. Furthermore, buyer agrees to fully
indemnify, defend and hold Supermicro harmless for and against any and all claims, demands, actions, litigation, andproceedings of any kind arising out of or related to such ultra-hazardous use or sale.
Manual Revision 1.0a
Release Date: August 07, 2024
Unless you request and receive written permission from Super Micro Computer, Inc., you may not copy any part of thisdocument. Information in this document is subject to change without notice. Other products and companies referredto herein are trademarks or registered trademarks ofW their respective companies or mark holders.
Copyright © 2024 by Super Micro Computer, Inc.
All rights reserved.
Printed in the United States of America

Preface

Preface
About This ManualThis manual is written for system integrators, IT technicians, and knowledgeable end users
who intend to configure the IPMI settings supported by the ASPEED AST2600 Baseboard
Management Controller embedded in Supermicro motherboards. It provides detailed
information on how to configure the BMC settings supported by the AST2600 controller

User's Guide Organization
Chapter 1 provides an overview of the ASPEED AST2600 controller. It also introduces thefeatures and the functionalities of BMC.
Chapter 2 provides detailed instructions on how to configure the BMC settings supported by
the AST2600 controller.
Chapter 3 provides the answers to frequently asked questions.

An Important Note to the User
For documents concerning utility support such as Redfish, SMCIPMITool, SUM, SSM,
IPMICFG, SPM, SuperDoctor, BIOS, RSD/SSC, TAS, and IPMIView, please refer to our
website at https://www.supermicro.com/en/solutions/management-software/bmc-resources
for details.
The graphics shown in this user's guide were based on the latest information available at thetime of publishing of this guide. The BMC screens shown on your computer may or may notlook exactly like the screen shown in this user's guide.

3

Super BMC User's Manual

Conventions Used in the Manual
Special attention should be given to the following symbols for proper installation and to prevent
damage done to the components or injury.
Warning! Indicates important information given to prevent equipment/property damage
or personal injury.

Warning! Indicates high voltage may be encountered while performing a procedure.

Important: Important information given to ensure proper system installation or torelay safety precautions.
Note: Additional information given to differentiate various models or to provide information for proper system setup.

4Preface

Contacting Supermicro
Headquarters
Address:

Super Micro Computer, Inc.

Tel:
Fax:

980 Rock Ave.
San Jose, CA 95131 U.S.A.
+1 (408) 503-8000+1 (408) 503-8008

Email:

marketing@supermicro.com (General Information)
Sales-USA@supermicro.com (Sales Inquiries)

Website:Government_Sales-USA@supermicro.com (Gov. Sales
Inquiries)
support@supermicro.com (Technical Support)
RMA@supermicro.com (RMA Support)
Webmaster@supermicro.com (Webmaster)www.supermicro.com

EuropeAddress:

Super Micro Computer B.V.
Het Sterrenbeeld 28, 5215 ML's-Hertogenbosch, The NetherlandsTel:+31 (0) 73-6400390

Fax:+31 (0) 73-6416525

Email:

Sales_Europe@supermicro.com (Sales Inquiries)
Support_Europe@supermicro (Technical Support)
RMA_Europe@supermicro (RMA Support)

Website:www.supermicro.nl

Asia-Pacific
Address:

Tel:

Super Micro Computer, Inc.
3F, No. 150, Jian 1st Rd.
Zhonghe Dist., New Taipei City 235
Taiwan (R.O.C)+886-(2) 8226-3990

Fax:+886-(2) 8226-3992

Email:

Sales-Asia@supermicro.com.tw (Sales Inquiries)
Support@supermicro.com.tw (Technical Support)
RMA@supermicro.com.tw (RMA Support)

Website:www.supermicro.com.tw5Super BMC User's Manual

Table of Contents
Chapter 1 Introduction
1.1 Introduction to the BMC Platform..........................................................................................8
1.2 Overview of the ASPEED AST2600 BMC.............................................................................8
1.3 Supermicro BMC Features....................................................................................................9
1.4 Software Licenses Available................................................................................................12
1.5 Special Notes for Motherboard and Firmware Support......................................................16

Chapter 2 Configuring the BMC Settings
2.1 Configuring UEFI BIOS.......................................................................................................17
2.2 Connecting to the Remote Server.......................................................................................28
2.3 Accessing the Remote Server Using the Browser..............................................................29
2.4 BMC Dashboard..................................................................................................................30
2.5 System.................................................................................................................................35
2.6 Configuration.......................................................................................................................69
2.7 Remote Control.................................................................................................................120
2.8 Maintenance......................................................................................................................154

Chapter 3 Frequently Asked Questions
Appendix A Firmware Update via WEB GUI and SUM
A.1 Overview............................................................................................................................198
A.2 Updating Firmware Using BMC WEB GUI........................................................................199
A.3 Updating Firmware Using SUM.........................................................................................207

Appendix B Introduction to SMASH
B.1 Overview............................................................................................................................211
B.2 An Important Note to the User..........................................................................................212
B.3 Using SMASH...................................................................................................................212
B.4 Initiating the SMASH Protocol...........................................................................................213
B.5 SMASH-CLP Main Screen................................................................................................214
B.6 Using SMASH for System Management...........................................................................215
B.7 Definitions of Commands Verbs........................................................................................216
B.8 SMASH Commands..........................................................................................................218
B.9 Standard Command Options.............................................................................................219
B.10 Target Addressing............................................................................................................220

6

Preface

Appendix C Unique Password for BMC
C.1 Overview............................................................................................................................221
C.2 Notice and Shipping Label Identifier.................................................................................222
C.3 Label Specifications..........................................................................................................224
C.4 Restore Factory Default....................................................................................................230
C.5 Change All Unique Passwords Using Script.....................................................................230
C.6 Frequently Asked Questions.............................................................................................231

Appendix D Remote Attestation
D.1 Overview............................................................................................................................233
D.2 License Requirements.......................................................................................................233
D.3 Attest Your System Using the Supermicro Website..........................................................233
D.4 Attest Your System Using RESTful APIs..........................................................................236

7

Super BMC User's Manual

Chapter 1
Introduction
1.1 Introduction to the BMC Platform
The Baseboard Management Controller (BMC) provides remote access to multiple users at
different locations for networking. It also allows a system administrator to monitor system
health and manage computer events remotely.
BMC operates independently from the operating system. When used with an IPMI Management
utility installed on the motherboard, the ASPEED AST2600 BMC will connect the Platform
Controller Hub (PCH) to other onboard components, providing a remote network interface
via serial links. With the AST2600 controller and the BMC firmware built in, the Supermicro
motherboard allows you to access, monitor, diagnose, and manage a remote server via
Console Redirection. It also provides remote access to multiple users from different locations
for system maintenance and management.

1.2 Overview of the ASPEED AST2600 BMC
The ASPEED AST2600 BMC is designed to interface with the host system via PCIexpress
connections to communicate with the graphics core for the X13 and H13 series motherboards.
Designed for the X13 series, the AST2600 connects with the host system via PCIexpress Gen2x1 bus to communicate with the graphics core. It supports a 64-bit 2D Graphics Accelerator
with 32-bit memory and 16-bit I/O space.
Additionally, AST2600 supports USB 1.1 and 2.0 for remote KVM emulation and provide LPC
interface support to control Super IO functions. ASPEED AST2600 include Keyboard/Video/
Mouse Redirection (KVMR). The BMC is connected to the network via an external Ethernet
PHY module or a shared NCSI connection.

AST2600 DDR5 Memory Interface
The ASPEED AST2600 Baseboard Management Controller (BMC) is designed to interface
with the host system via PC.

8Chapter 1: Introduction

1.3 Supermicro BMC Features• Remote KVM (graphics) console• Virtual Media and ISO images• Remote server power control• Remote Serial over LAN (text console)• Event Log support• Automatic Notification and Alerts (SNMP and email)• Hardware Monitoring• Overall health display on the main page
• Out of band management through shared or dedicated LAN• Option to change LAN connection interface at Runtime• VLAN• RMCP and RMCP+ protocols supported• SMASH/CLP• Secure command line interface (SSH) and Telnet• RADIUS authentication support• Secure browser interface (Secure socket layer - SSL support)• Lightweight Directory Access Protocol (LDAP) supported• System Lockdown• Backup and restore the configuration file• Factory defaults from web support• Video quality settings• Session video recording and playback• Server data/information

9Super BMC User's Manual• Preview of the remote screen on the main page
• Update Firmware through browser and OS• OS-indentation• KCS Privilege Control• Unique pre-programmed password• Redfish

10Chapter 1: Introduction

AST2600 Block Diagram
The following diagram represents a typical system setup for the AST2600 controller.

11Super BMC User's Manual

1.4 Software Licenses Available
Software license is required for respective features using different interfaces such as Web/
CLI/Redfish API.
Warning: Changing MAC addresses will wipe out Software License Keys.
•

SFT-OOB-LIC: Basic Out of Band Management
It covers features such as UEFI BIOS/BMC firmware update and configuration,
mounting ISO images, asset info, and many more.

•

SFT-DCMS-Single: System Management Suite
It covers the above two license SKU as well as all enterprise features, such as RAIDManagement, Advanced Redfish APIs, NIC FW management, and many more.

Please refer to the following comparison chart for more info.
(*) Available through Redfish APIs.
(**) Additional SKU is required.

Features
IPMI 2.0
DCMI 1.5
BMC Web GUI
SMASH-CLP
Serial Redirection (COM2/
SOL)
Redfish APIs (Basic Redfish
APIs (Redfish 1.0) supported with OOB license)
Shared NIC (LOM, LAN1
with automatic failover)
Dedicated NIC
VLAN tagging
IPv4
IPv6

Standard Package
✓
✓
✓
✓
✓

SFT-OOB-LIC
✓
✓
✓
✓
✓

SFT-DCMS-Single
✓
✓
✓
✓
✓

✓

✓

✓

✓

✓

✓

✓
✓
✓
✓

✓
✓
✓
✓

✓
✓
✓
✓

12

Chapter 1: Introduction

DHCP
Dynamic DNSKCSLAN over USB
Unique pre-programmed
default password
HW Root of Trust
Signed BMC/BIOS images
Host secure communication(LAN over USB)
User account management
and Role-based authority(User, Operator, Administrator)
SSL Redirection
SSL Encryption (HTTPS)
IP Access Control
SNMPv3.0
AD / LDAPRADIUS
PK authentication (for SSH)KCS Control
Port Configuration
UEFI Secure Boot
System Lock down
TEE-OS
BIOS/BMC automatic recovery (ROT)
Disk secure erase of internal
storage devices (For Broadcom controller connected
drives)Power control
Boot configuration
Serial-over-LAN
Virtual Media
Virtual Console
HTML5 access to Virtual
ConsoleHTML5 VM
Virtual Console collaboration(3 users)
Remote Keyboard Operation

✓
✓
✓
✓
✓

✓
✓
✓
✓
✓

✓
✓
✓
✓
✓

✓
✓
✓

✓
✓
✓

✓
✓
✓

✓

✓

✓

✓
✓
✓
✓
✓
✓
✓
✓

✓
✓
✓
✓
✓
✓
✓
✓
✓

✓

✓

✓
✓
✓
✓
✓
✓
✓
✓
✓
✓
✓
✓
✓
✓

✓
✓
✓
✓
✓
✓

✓
✓
✓
✓
✓
✓

✓
✓
✓
✓
✓
✓

✓

✓

✓
✓

✓

✓

✓

13

Super BMC User's ManualTemperature monitoring✓
Real-time power reading✓
Power thresholds and alerts ✓Real-time power graphing✓
Historical power values✓
Power Capping (ThroughSPM)
Out-of-Band System Checks ✓Predictive failure monitor✓ing (for Broadcom controller
only)
SNMPv1, v2, and v3 (traps ✓and gets, SNMPv3 MIBs
needs DCMS license)
Email Alerting✓
Fan monitoring✓
Power Supply monitoring✓
Memory monitoring✓
CPU monitoring✓
RAID monitoring and configuration (Broadcom/Marvell
storage controller)
GPU monitoring (NVIDIA✓
GPUs)
NIC monitoring✓
HDD monitoring (Broadcom/Marvell/NVME controller)
Remote agent-free out of✓band FW updates (BIOS,
BMC, CPLD, Backplane)
Component FW Update
Inband FW Updates✓
Local configuration via BIOS ✓setup
System Component Inven✓tory
Auto-Discovery (Via SSM
web)Remote OS deployment (ViaSSM)
BMC/BIOS configurations(Redfish/SSM/SUM)

✓
✓
✓
✓
✓

✓
✓
✓
✓
✓
✓

✓
✓

✓
✓

✓

✓

✓
✓
✓
✓
✓

✓
✓
✓
✓
✓
✓

✓

✓

✓

✓
✓

✓

✓

✓
✓

✓
✓
✓

✓

✓
✓
✓

✓

14

✓

Chapter 1: Introduction

Remote configuration(Mousemode, Fanmode,Radius, AD, NTP, Chassis intrusion, SNMP, SMTP
alerts, Syslog etc.)
CMM Management
FW update policy (Through
SUM)
TPM Management (ThroughSUM)
HGX2 FPGA, CEC FW
UpdateOffline Diagnostic
Crash Dump
Health /System Events
Events acknowledgement
Crash screen capture
Crash video capture
Virtual NMI (Via SMCIPMITool)
License Management
Post Snooping

✓

✓

✓

✓

✓
✓
✓
✓

✓
✓
✓

✓
✓
✓

✓

✓

✓
✓
✓
✓
✓
✓
✓

✓
✓

✓
✓

✓
✓

15

Super BMC User's Manual

1.5 Special Notes for Motherboard and Firmware Support
For documents concerning utility support such as Redfish, SMCIPMITool, SUM, SSM,
IPMICFG, SPM, SuperDoctor, UEFI BIOS, TAS, and IPMIView, please refer to our website
at https://www.supermicro.com/en/solutions/management-software for details.
Please refer to the motherboard product page at www.supermicro.com to see if themotherboard supports BMC.

16

Chapter 2: Configuring the BMC Settings

Chapter 2
Configuring the BMC Settings
With the ASPEED AST2600 BMC and the BMC firmware built-in, Supermicro motherboards
allow you to access, monitor, manage, and interface with multiple systems from different
remote locations. The necessary firmware for accessing and configuring the BMC settings isavailable on Supermicro website at https://www.supermicro.com/support/resources/bios_ipmi.
php?type=BMC. This section provides detailed information on how to configure BMC settings.
Note: Some features might not be available if you are using an X13 motherboard as afew newer features are not supported by this generation.

2.1 Configuring UEFI BIOS
Before configuring the BMC, follow the instructions below to configure the system UEFI BIOS
settings.

Entering and Using the UEFI BIOS
1. During the system bootup, press the <Del> key to enter the UEFI BIOS.
2. To navigate in the UEFI BIOS, use the arrow keys and press <Enter>. To go back toprevious screens, press <Esc>.

17

Super BMC User's Manual

Enabling the COM port for SOL (BMC)
1. Select the Advanced tab from the UEFI BIOS Setup menu display.
2. Select Serial Port Console Redirection and press <Enter>.
3. Highlight Console Redirection under COM2/SOL, press <Enter>, and select [Enabled].

18Chapter 2: Configuring the BMC Settings

Configuring IP Address Using the UEFI BIOS
1. Select the Server Management tab.
2. Select BMC Network Configuration and press <Enter>.
3. Highlight Update IPMI LAN Configuration, press <Enter> and select [Yes].

19

Super BMC User's Manual

4. Highlight Configuration Address Source and select [Static].

20

Chapter 2: Configuring the BMC Settings

5. Once the Configuration Address Source is set to [Static], the Station IP Address, Subnet
Mask, and Gateway IP Address fields will display 0.0.0.0, which indicates that thesefields are ready for you to change to new values. Select each of the three items andenter the values. Press <Enter> when finished.

21Super BMC User's Manual

Connecting to BMC Using the UEFI BIOS
1. To bring up the BIOS menu, connect one end of an Ethernet Cat 5 to the Ethernet portof the laptop or device being used.
2. Plug the other end of the cable into the IPMI / SHARED port of the server.
3. Power on the server by pressing the DEL key to enter the BIOS menu.
4. In the BIOS menu, follow the instructions below to configure the Network settings for
Static IP as well as assign an IP Address (i.e. 192.168.0.4) and a subnet.
5. Use the arrow key to navigate to Server Management.
6. Select BMC Network Configuration.

22

Chapter 2: Configuring the BMC Settings

7. Select Update IPMI LAN Configuration and select [Yes].

23

Super BMC User's Manual

8. Navigate to IPMI LAN Selection, and you will see three options as shown below. Select[Shared].

24

Chapter 2: Configuring the BMC Settings

9. Navigate to Configuration Address Source and select [Static]. Then you can assign an
IP (such as 192.168.0.4) and subnet.

25

Super BMC User's Manual

Now that both Laptop and the BMC are on the same subnet. With the static IP connected, you
should be able to communicate. To establish the connection, please follow the steps below.
1. Keep the terminal of the Windows/Laptop. Ping the IPMI IP, 192.168.0.4, and make surethat it is pingable.
2. If it is pingable, open a web browser on the laptop. Enter the IP in the URL bar, and thelogin screen will appear as shown below.
3. Enter the username, ADMIN, and a BMC unique password. Please refer to Appendix D
on how to retrieve the BMC unique password.

26

Chapter 2: Configuring the BMC Settings

4. After logging in, go over to <Network> under <Configuration>. You can then see all the
IPv4 and IPv6 info to configure.

27

Super BMC User's Manual

2.2 Connecting to the Remote ServerUsing the Browser to Connect to the Remote Server
1. Connect a LAN cable to the onboard LAN1 port or the BMC LAN port.
2. Choose a computer that is connected to the same network and open the browser.
3. For each server that you wants to connect to, enter the IP address in the address bar of
the browser.
4. Once the connection is made, the Login screen as shown on the next page will display.

28

Chapter 2: Configuring the BMC Settings

2.3 Accessing the Remote Server Using the Browser
To Log In to the Remote Console
Login with your local BMC user credentials or as a user from Active Directory, LDAP, or
RADIUS. You will be able to navigate pages based on your assigned user privilege. To viewthe hidden password, please click on the eye icon. Once connected to the remote server via
browser, the following BMC login screen will display.
Note 1: A (*) symbol indicates the feature is an optional field.
Note 2: Please keep page zoom level at 100% to avoid any overlapping icons or tabs.

1. Enter the username in the Username box.
2. Enter the password in the Password box and click on <Login>.
3. The home page will display as shown on the next page.
Note 1: To use the IPMIView utility for Console Redirection, please refer to the IPMIView User's Guide for instructions.
Note 2: The Administrator account cannot be deleted or disabled.

29

Super BMC User's Manual

2.4 BMC Dashboard
The BMC Dashboard provides an overview of the System, Host Information, Power
Consumption, and System Health. You can also access quick links to System, Storage (ifa storage component is connected), UID Control, Firmware Update and Sensor Readings,
Power Consumption, Remote Console Preview, and Recent Logs. If storage components
are connected, then you will also be able to access Storage from here. This page will be
displayed as shown below.

In the upper right hand corner, hover over the icon to view user status.

Information includes:• User• Role• Server• Logout

30

Chapter 2: Configuring the BMC Settings

The following WebGUIs indicate different purposes.
: Power Control: Refresh: Help: Language

Power Options
The following power options are available to turn on and off the system.

• Power ON: You can do this to power on the server system. Once the device is poweredon, becomes responsive, and its software and hardware components starts functioning,you will be able to interact with the system and use its various features and functionalities.

• Force Shutdown: You can do this to power off the server system immediately as a nongraceful shutdown. This is the immediate action of turning off the system without any delay.
When a system is powered down immediately, all power supply to its components is cut
off instantly, leading to an abrupt shutdown.

• Graceful Shutdown: You can do this to power off the server system gracefully by properly
shutting down the operating system before turning off the system. This behavior is akin toa quick press and release of the physical power button, allowing the system OS to safely
offload necessary services and save critical data before smoothly terminating the operating system.

• Power Cycle: You can do this to power off the server system completely and power it backon.

• Power Reset: You can do this to perform a warm restart on the server system. This action istypically performed to resolve issues or clear temporary glitches in the system’s operation.
During a power reset, the server is turned off completely befpre power is restored after abrief interval, initiating the device's startup sequence from an initial state.

• AC Cycle: This action will momentarily disconnect the power cable from the system before
reconnecting it. This action will completely disconnect the system from the power source,which may result in data loss of unsaved data. After 10 to 20 seconds, the power is restored
and BMC is automatically reset. Please use it with caution.
Note: Action of power on and off will happen automatically. When the system iscurently powered down (therefore not "on"), you can see and only choose the [PowerON] option. If the system is currently powered up (therefore is "off"), you can see from
[Reset] and [Off] options.
31Super BMC User's Manual

RefreshYou can click on refresh to retrieve the latest update for the respective page.

Help
You can click on help to get additional information regarding every page.

Language
You can select different languages from the pop-up window.

• English• Simplified Chinese• Japanese
The BMC Main displays the following information.

Quick Links
You can use the options in the upper bar to navigate to widely used pages for quick actions.
Quick actions include the following.

• System: You can use to navigate to the System page.
• Storage: You can use to navigate to the Storage page if a storage component is connected.
• UID Control: To identify the server, you can click the UID icon to navigate to UID control
component to turn ON or OFF the blinking LED.

• Firmware Update: You can use to navigate to Firmware Management page to update
firmware.

• Sensor Readings: You can use to navigate to Sensor Readings page.

32

Chapter 2: Configuring the BMC Settings

System HealthThis section contains the overall system health status notifications. You can click on the healthstatus to get more details about the system component health. Symbols indicating the healthinclude the following.
[Good]: This symbol means that the overall health of all system components is good.
[Warning]: This symbol means that one or more components need attention and could fail.
[Critical]: This symbol means that one or more components health is critical.

Storage HealthIn this section, users can find overall storage component health and notification if a storage
component is connected and detected, as well as HOST is powered on. Click on the healthstatus to get more details about the hard drive or controller health. Symbols indicating thehealth include the following.
[Good]: This symbol means that the overall health of all system components is good.
[Warning]: This symbol means that one or more components need attention and could fail.
[Critical]: This symbol means that one or more components health is critical.
Note: Storage Information will be displayed only when the monitored system has respective storage component(s) installed and HOST is powered up.

SystemThe System frame displays a brief summary of system components such as Firmware
version, Firmware Build Time, Redfish Version, BIOS Firmware Version, BIOS Build Time,
CPLD Version, BMC MAC Address, and LAN MAC Addresses. Unless there is at least an
AOC NIC in the system, BMC Dashboard will provide a Link to Network AOC and message
to users that all Add-On-Cards’ information can be viewed on the Network AOC page. The
tooltip message will be “Go to the Network AOC page”.
Note: In special motherboards without onboard LANs, AOC NIC information is displayed in place of onboard LANs. Additionally, no System LAN interfaces will beshown if LAN interfaces are not detected.

33

Super BMC User's Manual

HostThis section displays a brief summary of host information such as Server Host Name,
Server IPv4 Address, and Server IPv6 Address.
Note: IPv4 Address or IPv6 Address(es) will only be shown upon configured in the
Network Configuration.

Power Consumption
This section displays a graphical representation of the system power consumption with timestamps. Click on the graph to go to Power page for more details about power consumption.
The power consumption will be updated at least at a 5-minute interval.

Remote Console Preview
This section displays the preview of the remote console state. Click on settings to modify
the Virtual Console configurations. The page will automatically continue on its own or you
can use the mouse to click to continue. You can choose HTML5 or Java plug-in for yourpreferred virtual console option, with HTML5 being selected by default.

34

Chapter 2: Configuring the BMC Settings

2.5 System
The BMC System page displays system component details and health information, health
events, sensor readings, and storage monitoring if the server is connected to the storage
component(s).

2.5.1 Component Info
You can use this page to view details about the system, installed components, health, andsensor readings.
Note: Not all information of components listed under Help Page are available for all
types of servers. The Help Page is the General Guide for most system servers. See
individual server manuals for any particular information.

Overview• UID Control: You can use this to turn on or off the UID for you to identify the server.
• Health Status Summary: You can use this to to check the health status for each installed
component. Click on the individual health status icons to view details about the component.

• CPU – This displays the overall health status of installed CPUs in the system. Issues
that are occurred in CPU modules should not affect Sensor Health monitoring.

• Memory – This displays the overall health status of installed memory components in thesystem. Issues that are occurred in memory modules should not affect Sensor Healthmonitoring.
35Super BMC User's Manual• PSU – This displays the overall health status of installed Power Supply Units in the system. Issues that are occurred in PSU units should not affect Sensor Health monitoring.

• Sensor – This displays the overall health status for the sensors present in the system.
• Fan – This displays overall health status of installed fans in the system. Issues that are
occurred in FAN units should not affect Sensor Health monitoring.

• Information: You can check the detailed system information.
• Manufacturer – Manufacturer name• Product Part Number – Product part number of the product• Serial Number – Serial number of the product. For multi-node system, SN is from theMulti-node controller.

• Power State – System power status• Host Name – Host name of the system• BMC IP Address – IP address of the BMC host
• BMC MAC Address – MAC address of the BMC• BMC Firmware Version – BMC Firmware version• BIOS Firmware Version – BIOS Firmware version• FRU Reading: You can configure the FRU settings by using SMCIPMITool utility and checkdetailed FRU information.

• Device ID: You can view System Device ID.
• Chassis Info: The kind of chassis info displayed will depend you the type of node system installed.
On Single-Node System, the following information will display for chassis info.

• Type – Chassis type detail• Part Number – Chassis part number• Serial Number – Chassis serial number.

36

Chapter 2: Configuring the BMC Settings

On Multi-Node System, the following information will display for chassis info.

• Configuration ID – Chassis configuration ID• MCU Firmware Version – Chassis MCU firmware version• User Defined System Name – Chassis user defined system name• BP Model Name – Backplane model name• BP Serial Number – Backplane serial number• BP Revision – Backplane revision• Board Info: You can view detailed board information.
• Language – Supported language for the board• Manufacturer – Manufacturer details• Product Name – Product details• Serial Number – Board serial number• Part Number – Board part number• Product Info: You can view detailed product information.
• Language – Product supported language• Manufacturer – Manufacturer details• Product Name – Product details• Serial Number – Product serial number• Part Number – Product part number• Version – Product version• Asset Tag – Product asset tag

37

Super BMC User's Manual

CPU
This tab provides the following information about each processor installed in the server.

This page displays the following information.

• Health Status: You can view the health status of the CPU. It will include one of the following options.

• Normal• Warning• Critical• Name: You can view the name of the processor.
• Model: You can view the information about processor models.
• Speed: You can view the speed (current speed in MHz) of the processor.
• TDP Watts: You can view the supported values for TDP (Thermal Design Power).
• Cores / Active: You can view the total number of cores of the processor as well as whether
the processor is active or inactive.

• Threads: You can view the total number threads.
• Manufacturer: You can view the processor manufacturer info.

38

Chapter 2: Configuring the BMC Settings

MemoryThe tab provides the following information about each DIMM(s) installed in the server.

This page displays the following information.

• Status: You can view the health status of the DIMM. It will include one of the following
options.

• Normal• Warning• Critical• Name: You can view the memory device name.
• Device Type: You can view the memory device type defined by SMBIOS (e.g., DDR4,
DDR5, RDIMM, LRDIMM, or DCPMM).

• Error Correction: You can view the supported error correction info defined by SMBIOS.
• AddressParity: Address parity errors can be corrected.
• MultiBitECC: Multibit data errors can be corrected by ECC.
• SingleBitECC: Single bit data errors can be corrected by ECC.
• Operating Speed: You can view operating speed of memory in MHz as reported by thememory device. Memory devices that operate at your bus speed shall report the operating
speed in MHz (bus speed).

• Size: You can view the size of the memory region in mebibytes (MiB).
• Serial Number: You can view the product serial number of the memory device.

39

Super BMC User's Manual• Part Number: You can view the product part number of the memory device.
• Manufacturer: You can view the manufacturer info of the memory device.
PSU
This tab shows power supply unit information. BMC is designed to display information for all
Power Supply Units (PSUs) that are currently inserted into the system. In instances where
power cables are disconnected, the BMC will indicate 'N/A' values for the corresponding PSUs.
To ensure a streamlined and accurate representation, the BMC will NOT display information
for PSUs that have been removed or are identified as non-real/dummy PSUs. This functionality
is specifically intended to exclude any 'dummy' PSUs inserted into the system, providing amore precise overview of the active and connected power supply units. Any action taken to
remove a Power Supply Unit (PSU) or disconnect a power cable will generate a Machine
Event Log (MEL) entry for documentation and tracking purposes.

This page displays the following information.

• Health Status: You can view the health status of the PSU. It will include one of the following options.

• Normal• Warning• Critical• Temperature 1: You can view the temperature reading of the PSU.
40

Chapter 2: Configuring the BMC Settings• Temperature 2: You can view the temperature reading of the PSU (if present).
• Fan 1: You can view the FAN reading of the PSU.
• Fan 2: You can view the FAN reading of the PSU (if present).
Note: N/A will display for FAN2 if not detected.

• Serial Number: You can view the serial number of the PSU.
• Product Name: You can view the name of the PSU.
• Product Part Number: You can view the part number of the PSU.
You can also view following additional information under drop down menu.

• AC Input Voltage (V)• AC Input Current (V)• AC Input Power (W)• DC Main Output Voltage (V)• DC Main Output Current (A)• DC Main Output Power (W)41Super BMC User's Manual

Please refer to the following samples provided below.
If the PSU module is removed, the expected display will be as follows.

If the power cable is disconnected from the PSU, the expected display will appears as follows.

42

Chapter 2: Configuring the BMC Settings

Power
The tab displays system board power consumption information.

This page displays the following information.

• System Board Power Consumption Graph: You can view the system power consumption
value (in Watt) with time. Readings can be checked for the last hour/days/week.

43Super BMC User's Manual• Power Consumption Since Power On: You can view the power consumption during current time.

• Peak – Highest peak/Lower peak
• Value – Power consumption value in Watts• Time – Timestamp value• Historical Trend: You can view the past data of power consumption.
• Time – Last hour/day/week• Average Usage – Average power usage• Max Peak – Maximum peak power value (W)• Max Peak Time – Maximum peak time stamp• Min Peak – Minimum peak power value (W)• Min Peak Time – Minimum peak time stamp

44

Chapter 2: Configuring the BMC Settings

Network AOC
This tab provides the following information about add-on network devices installed in thesystem.
Note: This page will only display AOC NIC card Information. Temperature will display
as “Unsupported” for AOC NIC cards that do not support the temperature feature.

This page displays the following information.

• Health Status: This displays the health of the AOC NIC card.
• Model: This displays the model number of the AOC NIC card.
• Temperature: This displays the temperature of the AOC NIC card.
• Location: This displays the location of the AOC NIC card.
• Serial Number: This displays the serial number of the AOC NIC card.
• Switch MAC Address: This displays the MAC Address of the Switch that the NIC AOC
connects to.

• Switch Port ID: This displays the Port ID of the Switch that the NIC AOC connects to.
• Switch VLAN ID: This displays VLAN ID of the Switch that the NIC AOC connects to.
• Port: This displays the port number of the AOC NIC card.
• MAC Address: This displays the MAC address of AOC NIC card.
• FW Version: This displays the firmware version of the AOC NIC card.

45

Super BMC User's Manual

In certain system platforms there is a power option for the AIOM slot. Users can power on
the AIOM slot when the system is in the S5 state. This feature allows the NIC card to remain
operational even when the system is powered down. The button’s purpose is to enable users
to maintain NIC functionality in the AIOM slot during the S5 state. See the image below fora sample.

The following is the naming rule for Physical LAN which is used by BMC to pass onto SSM.
X and Y are numerical index (0…9).

Physical LAN

A system WITH / WITHOUT TAS installed and running / WITHTAS REMOVED

AOC NIC

Redfish API: /redfish/v1/Systems/1/EthernetInterfaces/X
Name: AOC LAN Y
Description: AOC-STGS-i2T #Y

Onboard NIC

Redfish API: /redfish/v1/Systems/1/EthernetInterfaces/X
Name: Onboard_NIC Y
Description: OnBoard #Y

46

Chapter 2: Configuring the BMC Settings

SensorThis tab provides information about the sensors' status, corresponding readings, and its
threshold value.

The sensor table displays the following information about each sensor(s):• Health: Sensor status indicates the health state of the sensors.
This symbol means that the sensor reading is normal.
This symbol means that the sensor reading is not within the range and needs attention.

• Name: This column displays sensor names of currently available sensors from the system.
• Reading: This column displays the value of the current sensor's reading.
• Type: This column displays sensor type categories from the following list.
• Temperature Sensors• Voltage Sensors• Physical Security• Battery (aka Power Supply)• Low NR: This column displays a lower non-recoverable threshold value for each sensor.
• Low CT: This column displays a lower critical threshold value for each sensor.

47

Super BMC User's Manual• High NR: This column displays a higher critical threshold value for each sensor.
• High CT: This column displays a higher non-recoverable threshold value for each sensor.
Note: If components are not installed then static sensor values will display N/A. All
sensors with “N/A” values will not be displayed on Web UI.
Sensor Type Categories
By default, [All Sensors] categories are selected and sorted by the order received by BMC;
users can sort Sensor Readings by:• Severity• Name• Reading• Type• Low NR
• Low CT
• High CT• High NR
Furthermore, you can filter the sensors by using the following categories:• Temperature Sensors• Voltage Sensors• VBAT Status• Physical Security
Export to Excel
You can export sensor reading in Excel format.

Intrusion Reset
You can use this button to reset chassis intrusion.

48

Chapter 2: Configuring the BMC Settings

Thermal (or Cooling)
In this tab, you can manage both air cooling and liquid cooling functionalities. For air cooling,
this tab shows the FAN status and will allow you to configure the FAN speed for installed fans.
For liquid cooling, this tab will show the liquid leak detection status and options for power
control. All fan sensors will be detected once the system HOST is powered on. Currently,
fan data is obtained from BMC Sensor Data Record (SDR) noted in the Supermicro Thermal
System Thermal Design Guide (SSTDG).

This page displays the following air cooling information.

• Operating Status: This column indicates whether the fans are in operating state or not.
This symbol means the fan is not installed or that it has lost the connection to thesystem.
This symbol means that the fan is not in a good operating state.
This symbol means that the fan is in a good, normal operating state.

• Health Status: This column indicates the fan health status.
• Name: This column indicates the system fan number.
• RPM: This column indicates the revolution per minute for each fan. The RPM should provide the actual, real value detected in the system. If there is a faulty FAN present, RPM
should be shown zero (0) if the fan does not work. PSU FAN A or FAN B speeds will be
the same as speed of PSU FAN 1.

49

Super BMC User's Manual• Low NR: This column displays a lower non-recoverable threshold value for the fan sensor.
• Low CT: This column displays a lower critical threshold value for the fan sensor.
• High CT: This column displays a higher critical threshold value for the fan sensor.
• High NR: This column displays a higher non-recoverable threshold value for the fan sensor.
Sample from ipmitool (# ipmitool sdr | grep Fan)
Front Fan RPM| 5400 RPM| okRear Fan RPM| 5400 RPM| ok

PS 1-4 Fan RPM| 5600 RPM| ok

PS 5-8 Fan RPM| 6000 RPM| ok

Liquid CoolingThis feature provides details about possible sensors leakages.

• Operating Status: This column indicates whether there is any leakage.
This symbol indicates there is a leakage and is not in good operating state.
This symbol indicates there is no leakage and operating in good and normal condition.

• Name: This column provides the sensor name.
• Location: This column indicates the location of the leakage. It will provide one of three ofthe following locations.

• CPU Coldplate• CPU Tray
• PCIe Manifold

50

Chapter 2: Configuring the BMC Settings

Advanced Settings
For Fan control, users can configure the following Fan Mode settings. Fan modes are
dynamically received from Redfish API. Hence, Web UI will display all available speed settings
for users to select. The following possible fan speeds are as follow:• Standard Speed: This is the standard fan speed setting is for standard power saving andefficiency.

• Full Speed: This is the full speed setting is for maximum system performance.
• Optimal or PUE2 Speed: This is the optimal fan speed setting. It will adjust the fan speedby balancing the needs between system performance and power savings. This is the mostefficient cooling setting under normal usage.

• Heavy I/O Speed: This is the heavy I/O fan speed setting, which will boost cooling to the
add-on card zone.
For liquid leak detection control, users can configure different power mode settings. The
available power options including the following:• No Action: When a leak occurs, the following alert icon will notify you about the leakage.
You must acknowledge that the area is dry and operational before turning off the alert.

• Force Shutdown: If a leak is detected, the system will immediately power down, lock thepower options, and notify users with the same alert. Before turning the system back on,
you must navigate to the Thermal page to unlock the power lock. To unlock the powerlock, you must first confirm that the leak area is dry and operational. Once the power lockis unlocked, users can power on the system.

• Graceful Shutdown: Selecting this option will cause the system to power down gracefully
and save all data before shutting down. You must confirm that the area is dry and operational before powering the system back on.
Additionally, the prompt for the disabled power button after liquid leakage detection will display:“Power button is currently disabled due to detected liquid leakage. Please go to the Thermal
page to unlock the Leak-Detect Power Lock.” The unlocking prompt addresses both the ‘LeakDetect Power Lock’ option and the ‘Liquid Leak Detected’ icon: “Liquid leakage detected.
Please confirm that the area is dry and all conditions for safe operation have been met."

51

Super BMC User's ManualGPU
This tab provides the following details about each installed GPU unit in the system. For
HaBaNa system, the AIP (Advanced Integrated Peripheral) tab will be in place of the GPUtab. Therefore, the following tab will be displayed instead.

• Location: This column displays add-on device slot location.
• Vendor: This column displays the vendor name of the GPU device.
• Model: This column displays the model name of the GPU device.
• Serial Number: This column displays the serial number of the GPU device.
• Part Number: This column displays the part number of the GPU device.
• Firmware Version: This column displays the firmware version for GPU device.

52

Chapter 2: Configuring the BMC Settings

AIP
This tab provides following details about each installed AIP (HaBaNa Gaudi) units in thesystem. This tab provides following details about each installed AIP units in the system.

• Location: This column displays the add-on device slot location.
• Model: This column displays the vendor and model names of the AIP device.
• Serial Number: This column displaysthe serial number of the AIP device.
• Part Number: This column displays the part number of the AIP device.
• Firmware Revision: This column displays the firmware revision info for the AIP device.
PCIe AOC
This tab provides the following details about each installed PCIe AOC such as BlueField-3
DPU in the system.

• Status: This column displays the ealth of the AOC card.
• Location: This column displays the location of the AOC card.
• Temperature: This column displays the temperature of the AOC card.
• Manufacturer: This column displays the manufacturer of the AOC card.
• Vendor Model Name: This column displays the vendor model name of the AOC card.
• AOC Serial Number: This column displays the serial number of the AOC card.
• AOC Part Number: This column displays the part number of the AOC card.
• AOC Firmware Version: This column displays the firmware version of the AOC card.

53Super BMC User's Manual

2.5.2 Health Event Log
This page provides a record of events that occurred on the management system. You canview, export to Excel files, clear, and acknowledge events from the monitored system. Logged
events can help you to diagnose issues or detect potential issues. You can also performprohibitive actions to resolve any such issues for the managed system and configure it tosend notification alerts, SNMP Traps, or Syslog server entries for specific types of system
events. You can Enable/Disable AC Power On Event Log and Enable/Disable FIFO Event
Log using ON/OFF switches in Advanced Settings. The default option is enabled.
Note: By default, all event types will be selected so that you can view all events. You
can apply filters for event selection based on event types (Supported event types:
Sensor-Specific, Threshold, Generic, OEM, Unspecified). Currently, the number of
Health Event logs is limited to 4096.

The Health Event Log table shows the following information about each event(s).

• Severity: This column indicates the severity of the events with one of the following states.
[Green]: This symbol indicates info de-assertion events.
[Yellow]: This symbol indicates warning events that need attention.
[Red]: This symbol indicates critical events that need immediate actions in case of
possible failure.

54

Chapter 2: Configuring the BMC Settings• Date/Time: This column indicates the timestamp of event occurrence• Sensor: This column indicates the type (Name) of the sensor that triggered the event.
• Description: This column indicates view the basic description of the event.
• Event Type: This column indicates view the events that will be listed based on the following categories.

• Sensor-Specific• Threshold• Generic• OEM• Unspecified
You can apply the following administrator options.

• Export to Excel: You can use this option to export the current event log to an Excel file.
• Clear Health Event Log: You can use this to select all rows to clear the recorded event log.
• Mark as Acknowledged: You can use this acknowledge warning/critical events. Select alog entry that you want to acknowledge and click on Mark as Acknowledged.

• Clear Acknowledgements: You can clear all acknowledgements and click on Clear Acknowledgement.

55

Super BMC User's Manual

Multi NodeThis page is used to view details about the current node as well as other nodes in the server.
Under System Tab, you can view the nodes of the server in “Logical Front View of Node” andgeneral information of the present nodes. In “Logical Front View of Node”, you can see thenumber of nodes, whether the node is present or not, and the power status of a particular
node. Detailed information for a particular node can be viewed when you select the node.
You can view Status, Power State, DC Output Power, DC Output Current, CPUs, System
Temperature, Part Number, Board Serial Number, IP Address, BIOS Version, CPLD Version
or MCU Version (if motherboard of the system is using MCU instead of CPLD), and BMC
Version of the node in interest. For H12 Multi Node systems, you can also view POST CODEas well as Max Power. This page will not be available for non-multi-node servers. For H12
Multi Node systems, you can also view POST CODE as well as Max Power. This page will
not be available for non-multi-node servers.
Note: Under User Privilege, you are limited to View Only mode. However, users under
User Privilege can automatically log into another BMC window. The first method is byclicking on a white arrow on the current node in the Logical Front View Node frame of
the Multi Node page. The second is by clicking on the IP Address in the Node frame toopen up the current node into a new web browser tab or window.
As shown in the Multi-Node image below, you can click on any of these nodes to get a BMC/Web UI redirected. From there, log in BMC as a single or individual node to perform tasks,
including firmware updates.

56

Chapter 2: Configuring the BMC Settings

2.5.3 Storage Monitoring
You can use this page to view details about installed storage components if the serveris connected to those storage component(s). This page will not be available if a storage
component is not connected. If you do not have a storage device installed in your system,
the system will not display this page. Use this page to view details about installed storage
components if the server is connected to storage component(s).

Overview
This page shows the drive status, the sum of physical drives, logical drives, controllers, battery
status, and total capacity of all physical drives. Drive status provides the health overview ofconnected disks. If BMC detects that all connected drives are functional, the drive status willshow GREEN. If BMC detects one or more drives are offline or being rebuilt, drive status willshow YELLOW. If BMC detects that one or more connected drives is not functional, drive
status will show RED.
Note: BMC Web UI storage page currently only supports NVMe drives (U.2 or M.2)
which are directly connected to a backplane. As BMC detects the NVME Backplane,
if backplane is there, the storage page will be shown and drive hot plug in-out will bemonitored. For Onboard U.2, onboard M.2, or M.2 installed on an AOC storage controller, BMC would provide only temperature sensor readings.
If the system supports only direct NVMe without NVMe Backplane, hot-plugged NVMe drives
WILL NOT be supported. Hence, the storage page will not display any NVMe drives when
NVMe drives are hot plugged after the system is booted up. Furthermore, BMC memory spaceis limited. The maximum number of Storage AOC controllers for OOB/BMC support is three.

57

Super BMC User's Manual

Physical View
Physical view shows physical disk information for SAS, SATA, NVMe SSDs, etc. It also shows
the details about physical disks attached to the controller or present in the storage subsystem.
For additional information about the physical disk, click on the button to expand the menu.

You can also perform actions associated with each disk. All actions are available andapplicable based on the selected disk.
Note: The function of button(s) will be greyed out if the function(s) is not available. For
instance, LED blinking button will be disabled and greyed out if the connected disk
does not possess the capability.

• Slot Number: This columns displays the connected physical disk's slot number.
• LED: This columns displaysthe LED blinking status of the corresponding disk.
• Status: This columns displays the indicated the health of the connected disk.
This symbol indicates the health of all the storage component is good.
This symbol indicates the storage component needs attention and could fail.
This symbol indicates the storage component health is critical.

• Supported Actions: This columns displays the indicated what actions are supported basedon HDD type.

• Disk Info#: This columns displays the available disk info.

58

Chapter 2: Configuring the BMC Settings• Capacity: This columns displays the capacity of the physical disk (GB).
• Link Speed: This columns displays the link speed of the physical disk (b/s).
• Connected Logical Drive: This columns displays the connected logical drive info (if any).
• Connected Controller: This columns displays the connected controller info (if any).
Physical View Actions
All physical actions are available and applicable based on the selected disk. You can performthe following physical actions correlated to each disk.

• Blink: This action is used to locate a physical disk.
• Un-blink: This action is used to to stop the blink action.
• Make Unconfigured Good: This action is used to select an unconfigured drive to make anunconfigured good drive.

• Insert: This action is used to insert a new NVMe disk if the VMD mode is disabled.
• Eject: This action is used to eject an existing NVMe disk if VMD mode is disabled.
• Disk Erase: This action is applied to erase the disk connected with the Broadcom 3108
controller. It allows you to instantly and securely render data on attached drives.

• Erase Abort: This action is used o stop/abort the erase action once you start the Secure
Erase action.

59

Super BMC User's Manual

The following table provides details on which storage controller is supported. In X12 and latermotherboards, BMC users can select more than one NVMe drive at a time. Therefore, theEject and Insert buttons would appear whether VMD is enabled or disabled. If there is only
SATA drive connected to Broadcom storage controller, there would be no Eject nor Insert
buttons appear.
Table for Supported Controller(s)Blink

Unblink

Make

Eject

InsertNot supported

Not supported

Not supported
if NVMe in
VMD mode

Not supported
if NVMe in
VMD mode

Unconfigured
Good
Broadcom

Supported

Supported

Marvell(88NR2241)
NVMe

Supported
Not supported

Supported

Supported

Not supported

Table for Supported Controller(s)Disk Erase
Broadcom

Marvell(88NR2241)
NVMe

Erase Abort

Supported only for Broadcom Mega
Supported only for Broadcom Mega RAID
RAID controllers such as AOCcontrollers such as AOC-S3108L-H8IR,
S3108L-H8IR, AOC-S3908L-H8IR
AOC-S3908L-H8IR (-16DD/-32DD), and(-16DD/-32DD), and AOC-S3916LAOC-S3916L-H16IR (-32DD).
H16IR (-32DD).
Not supported
Not supported

Not supported

60

Chapter 2: Configuring the BMC Settings

You can also view the following HDD detailed information by clicking the arrow pointer next toa particular HDD (NVMe or SATA). Web UI will only display available and supported features.

• Temperature (in Celsius)• Name of Manufacturer• Product Name of the storage controller• Serial Number• Drive functional (1 or 0)• Percentage of drive life used (in %)• VMD Mode (Disable / Enable)• Port 0 Max Link Speed (in GT/s)• Port 0 Max Link Width (i.e. 4)• Port 1 Max Link Speed (this will not show if HDD drives have only single port)• Port 1 Max Link Width (this will not show if HDD drives have only single port)

61

Super BMC User's Manual

Logical View
This page shows the details about virtual disks created with respective physical disks in thestorage subsystem, including the following information.
Note: The function of button(s) will be greyed out if the function(s) is not available. For
instance, LED blinking button will be disabled and greyed out if the connected disk
does not possess the capability.

• Slot Number: This will display the slot info of the logical disk.
• State: This will display the logical disk state info (Offline/Partially Degraded/Degraded/
Optimal/Foreign, etc.).

• Blink: This will display the blinking status of the disk.
• Name: This will display the given name of the logical disk.
• Capacity: This will display the capacity of the logical disk (GB).
• RAID: This will display the configured RAID level.
• Stripe: This will display the the stripe level of the logical disk.
• Number of drives: This will display the number of drives connected to a logical disk.
• Connected Controller: This will display the connected controller info.
Logical View Actions
All logical view actions are available and applicable based on the selected disk. You canperform the following actions correlated to each disk.

• Blink: This action can be used to locate a virtual disk.
• Un-blink: This action can be used to stop the blink action.
• Delete: This action can be used to delete a virtual disk.

62

Chapter 2: Configuring the BMC Settings

Controller
This page shows the information about the connected controllers to the system. It displays
different controller info and allows user to create RAID and apply changes to Controller
actions. BMC supports all RAID levels from available RAID level of the manufacturers. (e.g.,
If AOC-S3916L-H16IR(-32DD) supports RAID 0, 1, 5, 6, 10, 50, and 60, then BMC will also
provide the same RAID levels.) Select controller and click on expandable button to view
details about the controller.
You can see the following collection of configuration and informational data associated witha particular Storage Controller.
Note: This page will be empty unless a storage controller is installed in the system.

• Product Number• Product Revision• Controller Name
• Controller Revision• Location• FW Version• BIOS Version• Serial Number• Link Speed• Controller PCIE Link Width• Vendor ID• Device ID• SubVendor ID• SubDevice ID• Manufacture Date Timestamp• Controller Chip Revision• Manufacture Batch

63

Super BMC User's Manual• SAS Address (Optional)• Checksum/Reserved (Optional)
Note: The system slot allows for the viewing of location. Below are examples illustrating how the system displays location based on its position within the system.
PCI-E Card: Onboard, Slot 2 to PCIE card: Onboard, System Slot 2
PCI-E Card: SXB1, Slot: 2 to PCIE card: SXB1, System Slot: 2
PCI-E Card: Riser, Slot: 2 to PCIE card: Riser, System Slot: 2Create RAID
You can perform the following actions to create and configure RAID.

• Create: Select an available physical disks and add configuration options such as RAID
level, capacity, name, stripe size, R/W policy, access policy, initialization state, etc. To
confirm action, click Submit.

• Add [Select Group]: Use this cation to select or add logical drive to the existing group.

64Chapter 2: Configuring the BMC Settings

Controller Actions
You can perform the following controller actions.
Note: Available actions will change based on the controller selection.

• Import Foreign Configurations: This option is used to import foreign RAID configurations.
• Clear Foreign Configurations: This option isused to clear foreign RAID configurations.
• Clear All Configurations: This option isused to clear all current configurations.
• BIOS Boot Mode: This option isused to configure BIOS boot mode to one of the following
options.

• Stop on error• Pause on error• Ignore on error• Safe mode on error• JBOD Mode: This option isused to enable or disable JBOD mode.

65Super BMC User's Manual

2.5.4 Secure State Monitoring
The Secure State Monitoring feature allows users to monitor the security status of the systemthrough the supply-chain manufacturing process and its entire life cycle. Security measures
allow users to be aware of any state changes and may take necessary remediation if they arecaused by unexpected activities. This page allows users to view security state of the system.
When users click on the tab, they will drill down to the security monitoring page which lists all
indicated monitored security states. Such security states include: RoT State, BMC Runtime
Protection, and Attestation Certificate Verification. When the status of any monitored stateschanges, an alert is sent to notify users.

66

Chapter 2: Configuring the BMC Settings• RoT State – When green, Root of Trust in the BMC has been provisioned.
• BMC Runtime Protection – When green, the BMC monitoring of the runtime environment
has not found unexpected changes to the environment.

• Attestation Certificate Verification – When green, the supply chain Remote Attestation has
been provisioned and contains a valid certificate chain.
If the system does not support Remote Attestation, Attestation Certificate Verification will not
be available in the WebUI.
If the system does not support Root of Trust, Security Monitoring tab will not be visible.

67Super BMC User's Manual

Green icon denotes the security status is active or enabled while Yellow (warning) icon
indicates the security status is disabled or inactive. Users should take action if non-green
states are caused by unexpected activities. When the status for monitored security statechanges, SEL will be generated.

State
RoT State

Green
RoT is enabled.

Yellow

Grey/Not shown

The Root of Trust (RoT) is
deactivated or disabled. Pleasecontact Supermicro for further
clarification.

BMC Runtime

BMC Runtime

BMC Runtime Protection isProtection

Protection isdeactivated or disabled. This

enabled.

should not occur unless debug orengineering firmware has been
provided. Please check the System
Event Log (SEL) and Management
Event Log (MEL) for relevant entries

Attestation

The provisioned• The certificate validation for the

Certificate

device cert isprovisioned device certificate is

Verification

validated.

invalid.

• This issue may be caused by BMC
configuration errors, such as anincorrect BMC date/time leading toa Certificate Path Validation (CPV)error.

• To resolve this, try synchronizing
the BMC time and recheck thestatus. If the warning persists,
contact Supermicro for assistancein identifying the cause.

68

Not supported

Chapter 2: Configuring the BMC Settings

2.6 Configuration
This page allows you to perform various configuration settings such as Account Services(user account management and directory services), Notifications (Alert, SNMP, Syslog, andSMTP), Network (IPv4 and IPv6 settings, SSL Certificates, Ports, IP Access Control, andSSDP), Virtual Media (status for connected devices such as Floppy Disk and Virtual CDROM), and BMC Settings (Date and Time, Dynamic DNS, SMC RAKP, KCS Control, IPMI
Configuration, Host Interface, System Lockdown, and Web Session). Network setting values
should be integer values and cannot be negative values. Please refer to the additional
information on each page below.

69Super BMC User's Manual

2.6.1 Account Services
Users
This page allows administrators to monitor and configure user accounts for BMC privileges.
The Users tab provides the current user information including User Status, User ID, UserName, and Network Privilege settings. Administrator users can add, delete, or modify settings
for all user-access levels and privileges in this tab as well as control login settings in Advanced
Settings. Users with Operator privileges can only modify their own passwords and view thestatus of other users with Operator and User privileges. If you have User privileges, you can
only modify your own passwords and view the status of other users.

• Add New User: Users with Administrator privileges can click the [Add] button to add a newuser. You can also define User Name, Password, Network Privilege (Administrator, Operator, or User), enable or disable the user account, and set up the Account Type (Redfish/
IPMI or SNMP).
Note: Administrative users can edit, lock, or delete any users from the table except forthe default and reserved Anonymous and ADMIN users.
To add a user with Redfish or IPMI account type, the Administrator can click the Add
button to enter Username and Password parameters after selecting Network Privileges andAccount Type options. The Administrator can then enable or disable the new user account.
If the Administrator selects Redfish or IPMI account type, Username and Password are
required.

70

Chapter 2: Configuring the BMC Settings

When Administrator wants to open an SNMP account type, there are some more parametersthat need to be selected. Extra parameters include Authentication Protocol (MD5 or SHA1),
Encryption Protocol (DES and AES), Authentication Key, and Encryption Key.

User TableThe user table displays the following details for each user:• User Status: This feature indicates whether user login is enabled, disabled, or locked. The
green icon indicates that the corresponding user account is enabled and the grey icon
indicates that it is disabled or locked.

• User ID: This feature indicates the ID number used to identify the configured users. The
BMC manages user access through unique IDs. It supports a maximum of 15 configurable
user accounts, with one reserved for anonymous access (restricted use). This allows for
up to 16 concurrent login sessions for authorized users.

• User Name: This feature shows the list of current users which have been created.
• Network Privilege: This feature will indicate one of the following types of privilege levelassigned to users.

• Administrator• Operator• User71

Super BMC User's Manual• Pencil Icon (Modify User): Administrator users can modify any other user account except
the default administrator account (the default ADMIN user).

• Trash Icon (Delete User): Administrator users can delete any user account, including those
not in use. you cannot delete the default administrator account (the default ADMIN user)that are currently being logged into. If there is an attempt to do so, there will be a prompt
to alert the administrator users.

• Password Requirements: You can preview the password by clicking on the eye icon.
• Required password length: 8 to 20 characters• Password cannot be the reverse of the username• Password must include characters from at least three of the listed character classes.
Allowed character classes include the following:• a through z• A through Z• 0 through 9• Special characters
Note: The maximum number of user profiles that can be created and exist at a time is16.

72

Chapter 2: Configuring the BMC Settings

Advanced Settings
You can perform the following actions to configure advanced settings:• Failed Login Lockout Control: The On or Off status indicates whether the Account Lockout
control for the User Account is enabled or disabled. If enabled, the user account will belocked due to excessive failed login attempts.

• Failed Login Attempt Lockout Threshold: The user account will be locked out after thisnumber of consecutive failed login attempts in less than the Failed Login Counter Resettime. The allowed range is from one to five attempts. If the value is zero (0), there is nolimit on the number of failed attempts allowed.

• Failed Login Counter Reset: This is the count reset. The count of consecutive failed login
attempts will be reset after this interval without a failed login attempt. If it is set to “Never”,
the Failed Login Lockout Controls will be disabled. The counter is also reset upon successful login.

• Account Lockout Duration:This indicates the amount of time the users will be locked out(unable to login) after Failed Login Attempt Lockout Threshold failed login attempts. If it is
set to “Never”, the Failed Login Lockout Controls will be disabled.

73

Super BMC User's Manual

Directory Services

Settings
You can use this page to configure either LDAP, Active Directory, or RADIUS directory services
by toggling the ON/OFF button in any of directory services to enable or disable the service.
Note: You can only enable one directory service at a time.

74

Chapter 2: Configuring the BMC Settings

LDAP (Lightweight Directory Access Protocol)
LDAP allows you to view and configure LDAP authentication by logging in to BMC Web UI or
access Redfish API. This page displays a list of role groups, their group IDs, group names,
domains, and network privilege settings.
Note: You can configure the following settings only after enabling LDAP service.

• Bind DN: This feature refers to the bind DN (Distinguished Name) is the username or the
LDAP server that is permitted to search in the LDAP directory within a defined search base.
For example: cn=admin,dc=example,dc=com.

• Bind Password: This feature refers to the bind password for LDAP server authentication.
Passwords can be previewed by clicking the eye-icon button.
Note: By default, the password characters are hidden under periods or dots (…).

• Username Attribute: This feature is used to enter the username login attribute.
• Groups Attribute: This feature is used to enter the group membership attribute.
• StartTLS: When enabled, this feature allows users to initiate a secure connection. Upon
activation, the connection between the client and the server is encrypted using the TLS(Transport Layer Security) or SSL (Secure Sockets Layer) protocol. This ensures that dataexchanged between them is protected from eavesdropping and tampering.

• Server Address: This section is used to enter up to three addresses for the LDAP server.
Click on [Add] to add server addresses.

75Super BMC User's Manual• Prefix – Select to use LDAP or SSL LDAP (ldap:// or ldaps://).
• IP Address or Domain Name – Select to enter the server IP or domain name.
• Port Number – Enter the number of the LDAP server. The default port number for LDAP
is 389 and SSL LDAP is 636. You can edit or delete current settings.

• Search Base: Search base is the distinguished name used to search an external LDAP
service. Click on [Add] to add search base values. You can enter up to three search basevalues as well as edit or delete current settings.

• Rules: You can enter up to five rules. Click on [Add] to configure the following settings.
• Prefix – Choose to use either LDAP or SSL LDAP (ldap:// or ldaps://).
• Role – Select the privilege level for a user or role group (Administrator, Operator, orUser).

• Remote User – Enter the LDAP username.
• Remote Group – Enter the name of the LDAP group. For example: cn=PowerUsers,ou=Groups,dc=example,dc=org.

76

Chapter 2: Configuring the BMC Settings

Active DirectoryThis page allows you to view and configure Active Directory authentication. Using thecredentials, Active directory users can also use their credentials to login to BMC UI and
Redfish API to update or delete current directory settings. You can obtain Active Directory
server addresses by DNS Lookup or by entering the directory server IP address.
Note: You can configure the following settings only after enabling AD service.

• DNS Lookup: This field can be used to turn on DNS Lookup to allow BMC to add Active
Directory servers through LDAP or LDAPS protocol.

• Domain Name: This field can be used to add up to five domain names to the Domain Namelist for Active Directory servers.

• Server Address: This is a read-only field that shows up to three addresses for the Active
Directory server(s).

• Prefix – Select to use LDAP or SSL LDAP (ldap:// or ldaps://).
• IP Address or Domain Name – Enter the server IP or domain name.
• Port Number: This field displays the port number of the server.
• Static Server Address: This field can be used add up to three static server addresses
instead of getting Active Directory Server Addresses from DNS Lookup for the Active Directory servers.

• Prefix – Select to use LDAP or SSL LDAP (ldap:// or ldaps://).

77

Super BMC User's Manual• IP Address or Domain Name – Enter the server IP or domain name.
• Port Number – Enter the port number. Values range between 1 and 65535 (half-width).
• Rules: In this field, you can enter up to five rules for Role, Remote User, and Remote
Group. Click on [Add] to add rules and enter the following fields.

• Roles – Select privilege level for that user or role group (Administrator/Operator/User).
• Remote User – Enter the AD/LDAP username.
• Remote Group – Enter the name of the LDAP group folder.
Note: You must click on the Submit button to allow BMC to make changes to Active
Directory settings.

RADIUSThis page allows users to view and configure RADIUS authentication. You can also edit ordelete current settings.

• Secret: This field is used to enter a bind password for the user to access the RADIUS
server. Password can be previewed with the eye-icon button.

• IP Address or Domain Name: This field is used toselect to enter the server IP or Domain
name.

• Port Number: This field is used to enter the port number. Values range between 1 and65535 (half-width).
Note: You must click on Submit button to allow BMC to make changes to AD settings.

78

Chapter 2: Configuring the BMC Settings

2.6.2 Notifications
Use this page to configure alerts for remote management using SNMP, Syslog, and SMTP.

Alerts
You can use this page to configure the alerts policies used for sending the event(s) out tothe predetermined destination. This alert will be sent out through HTTP or HTTPS to a web
service that is subscribed to the service.
Note: Please use half-width characters (e.g., English letters and numbers) when entering data into the textbox. You will encounter expected errors when using full-widthcharacters.

The Alerts table will display the following information:• No.: This field shows the number of available alert entries.
• Enable: This field shows whether the alerts are enabled or disabled with theandbell icons.

• Protocol: This field shows the supported protocol being set for the particular alert transmission (e.g., Redfish, SMTP, or SNMPv1).

• Destination: This field shows the destination address where the alerts will be sent.
• Event Types: This field shows the configured event types for respective alerts. Supported
event types include the following.

79Super BMC User's Manual• Alert• ResourceAdded• ResourceRemoved• ResourceUpdated• StatusChange• Modify: Click on the pencil iconon the row of an alert to configure the settings or makechanges to the alert.

• Modify Alert: This field can be used to configure the alert using the following options.
• Enable – Select to enable or disable the alert by clicking on the ON or OFF button.
• Protocol – Select one of the following protocol types to set up the alert.
• SNMPv1• SMTP• Redfish• SNMPv3• Severity – Select one of the following severity levels to configure the alert.
• Information• Warning• Critical
Note: This field will only be displayed when SNMPv1, SMTP, or SNMPv3 is selected.

• Event Type – Select one or more of the following event types if protocol SMTP or Redfish
is selected. Alert protocol will be preset if SNMPv1 or SNMPv3 is selected.

• Alert• ResourceAdded• ResourceRemoved• ResourceUpdated

80

Chapter 2: Configuring the BMC Settings• StatusChange• Destination Address – Enter an IPv4 or an IPv6 address where alerts will be sent.
Note: The format for the IPv4 or IPv6 should not contain a prefix length.

• Message – Enter a message to send out to the destination. This field is available when
SMTP protocol is selected. This field is required prior saving the configuration.

• Context – Enter a message string to send out to the destination.
Note: This field is required for Redfish protocols. You must fill in the context field for
Redfish protocols.

• Subject – You must provide a content for the Subject field. This field is only available
for SMTP protocol.
Note: This field is displayed only when SMTP is selected and required for SMTP protocol. You must fill in the Subject field for SMTP protocol.

• Trap Community – Enter information for traps.
Note: This field is only displayed when SNMPv1 is selected.

• Delete – You can delete respective alert by clicking on the trash can icon.
You can click on [Send Test Alert] to check if the alerts have been set and sent out correctly.
Respectively configured alerts will be sent for test purposes.

81Super BMC User's Manual

SNMP
Use this page to configure SNMP settings. You can choose either SNMPv2 or SNMPv3 as
the protocol for communicating with the SNMP client program.

To configure SNMP settings, refer to the following steps:
1. Enable SNMP by toggling the [Enable SNMP] button to ON before choosing the SNMP
version.
Note: By default, enabling SNMP will enable SNMPv1.
2. Add SNMP2 Community by selecting one or more SNMPv2 Communities and clicking
on [Add] to add a community with either Access Mode - ReadOnly or ReadWrite toconfigure a new Community for SNMPv2. Community String and Name can be left
empty and added later on, and you can make changes afterwards.
3. To enable SNMPv3, you can select one of the following protocols.

• Authentication Protocol: You can select either HMAC_MD5, HMAC_SHA96, or Accountfor Authentication Protocol.

• Encryption Protocol: You can select either None, CBC_DES, CFB128_AES128, or Account for the Encryption protocol.

82

Chapter 2: Configuring the BMC Settings

4. Click [Save] to save user settings. The saved configurations are to be used whenever
you start or stop the SNMP daemon.
Note: By default, all SNMP settings are disabled (OFF) and SNMP port is set to
UDP port 161. You can go to the Port page (Configuration → Network → Port) tochange the SNMP port number. Once SNMP setting is ON, you can turn ON SNMPv2
or SNMPv3 using the ON/OFF buttons. Once SNMP is turned OFF, SNMPv2 andSNMPv3 will also be turned OFF. Thereafter, no trap will be sent out.

83Super BMC User's Manual

SyslogThis page allows you to configure the Syslog server settings. Before using this feature, ensurethat the Syslog server is ready.
Note: This feature requires a software license.

To configure the syslog settings, refer to the following steps.
1. Select [Enable Syslog] to turn on Syslog.
2. Enter the address into the Syslog server field.
3. Enter the port number for the Syslog server.
4. Click [Save] to complete the configuration.

84

Chapter 2: Configuring the BMC Settings

SMTP (Simple Mail Transfer Protocol)
This page allows you to configure SMTP (Simple Mail Transfer Protocol) settings for emailtransmission through the network by selecting the SMTP tab..

To configure SMTP settings, refer to the following options:• Server Address: Use this field to enter the address for the SMTP mail server to configure
SMTP.

• Port Number: Use this field to enter a SMTP port number. By default, the port number is 587.
• Connection Protocol: Use this field to choose one of the following protocols to set up SMTP
authentication.

• AutoDetect• None• StartTLS• TLS_SSL• Authentication: You can choose one of the following authentication methods to set up SMTP.
• AutoDetect• CRAM_MD5• Login• None• Plain85

Super BMC User's Manual

Note: The types of authentication method that will be available depends on which
Connection Protocol is selected. For example, when you choose None as the Connection Protocol, the AutoDetect option in Authentication will be greyed out.

• User Name: Use this field to enter the user name for SMTP mail server. This is optional.
• Password: Use this field to set up the user password if User Name is added for the SMTP
mail. Passwords can be previewed by clicking the eye-icon button.
Note: By default, the password characters are hidden under periods or dots (…).

• Sender’s Address: Use this field to add the Sender's address.
Once you complete entering the information above, click [Save] to retain all the settings for
the SMTP configuration.

86

Chapter 2: Configuring the BMC Settings

2.6.3 Network
Use this page to configure BMC network settings such as IPv4, IPv6, SSL Certification, Ports,
IP Access Control, and SSDP. Network setting values should be non-negative integer values.
In addition, both IPv4 and IPv6 ports are ON (enabled) by default.

IPv4This page allows you to configure the BMC network settings such as IPv4, IPv6, and BMC
LAN connectivity.
Note: Network setting values should be integer values and should not be negativevalues. Both IPv4 and IPv6 ports are ON (Enabled) by default.

87Super BMC User's Manual

IPv4 Configuration
Use the following features to configure the iPv4 BMC network setting:• ON/OFF: This field has the ON/OFF toggle button to enable or disable the IPv4 network
connection for BMC.

• Automatically Obtain IP Address (via DHCP): This field gives you the choice to enable
automatic IPv4 configuration using DHCP (Dynamic Host Configuration Protocol). This
option streamlines the process, allowing the system to dynamically assign and manage IP
addresses, enhancing convenience, and efficiency.

• Manually Configure IPv4 Address: This features gives you the option to configure a static
IP address. Enter the following details.

• IP Address – Manually enter IPv4 address for BMC• Subnet Mask – Specify the IPv4 Subnet Mask
• Gateway – Enter IPv4 Gateway address
IPv4 Advanced Settings
Use the following features to configure the advanced iPv4 BMC network setting:• Auto Obtain DNS Server IP: If enabled, the DNS Server IP Addresses will be obtained
automatically.

• Manually obtain DNS Server IP: This field can be used tomanually assign a DNS server
IP address in IPv4 format.

• DNS Server IP: This field can be used to assign an IP address for the primary DNS Server
to retrieve host names from DNS (Domain Name Server).

• DNS Server IP 2: This field can be used to assign a secondary IP address for the backup
DNS Server.
Note: If DNS Server IP Addresses remain unassigned, the string length is 0.

88

Chapter 2: Configuring the BMC Settings

IPv6
Use the following features to configure the iPv6 BMC network setting:• ON: This feature enables/disables the IPv6 network connection for BMC.
• Auto Configuration: This feature allows BMC to obtain DHCPv6 Stateless or DHCPv6
Stateful.

• DHCPv6 Stateless: When selected, BMC will NOT apply the prefix/IPv6 address from the
DHCPv6 server. Auto Configuration (SLAAC) must be enabled for BMC to receive IP addresses when DHCPv6 Stateless mode is selected.

• DHCPv6 Stateful: When selected, BMC will apply the prefix/IPv6 address from the DHCPv6
server. Auto Configuration will be disabled when DHCPv6 Stateful mode is selected.
Note 1: When DHCPv6 Stateful selected and Auto Configuration is disabled, BMC isunable to get the IPv6 IP Address from the DHCPv6 server unless HOST OS, BMC IP
Address, and the DHCPv6 server are on the same network segmentation. Auto Configuration must be enabled (ON) for BMC to receive IPv6 IP address(es) when DHCPv6 Stateful mode is selected.
Note 2: Similarly, when transitioning from DHCPv6 Stateful or Stateless mode to
Static mode, the BMC should allocate a new IP address and discontinue the use of its
previous IPv6 address.

• Static Configuration: This option allows you to manually enter IPv6 Address.
Note: Similarly, when transitioning from DHCPv6 Stateful or Stateless mode to Staticmode, the BMC should allocate a new IP address and discontinue the use of its previous IPv6 address.

89Super BMC User's Manual• IPv6 Address: This option allows you to input IPv6 Address in the text field.
• Prefix Length: This option allows you to set a prefix length in the text field.
• Gateway IP: This option allows you to set a Gateway IP in the text field.
• Link local address: The IPv6 Address which is primarily used for communication on thesame local network and is not meant to be routed beyond that network segment.

• DUID: This is the Unit ID for you to get the DHCP IP from DHCP server. The DUID includes
client network information (address, lease time and DNS server info). This is READ ONLY.

IPv6 Advanced Settings
Use the following features to configure the advanced iPv6 BMC network setting:• Auto Obtain DNS server IP: For this feature to be enabled, Auto Configuration must be
enabled (ON) when you want to enable either DHCPv6 Stateless or DHCPv6 Stateful Mode.

• Manually obtain DNS server IP: This allows you to assign a DNS server IP address in
IPv6 form.

• Preferred DNS server IP: This allows you to input their first choice of DNS server IP inthis field.

• Alternative DNS server IP: This allows you to input their second choice of DNS server IP
in this field.

90

Chapter 2: Configuring the BMC Settings

GeneralIn this section, you can set up a name for server identification in Hostname, view MAC
Address, set up VLAN for BMC, and view current network settings for BMC connectivity.

• Hostname: You can enter a name for the server as in Server Identification.
Note: Hostname must start with a letter and end with a letter or digit. Alphanumericalcharacters and hyphen are allowed for interior. Except for hyphen, no special characters are not allowed. All hostnames must be 63 characters or shorter in length.

• MAC Address: You can view the MAC Address of BMC.
• VLAN: You can enable or disable Virtual LAN support.
• VLAN ID: You can enter the VLAN ID.
Note: By default, VLAN ID is preset to 1 when VLAN is enabled. Users need to makesure BMC interface was set to a member of VLAN 1 prior saving the setting if VLAN ID
was decided to set to 1. Otherwise, once the configuration is saved, users would lose
access to BMC via OOB unless BMC interface is connected to a Switch port which is
configured as VLAN 1.)• LAN Interface: You can select the type of the LAN interface.
• Failover• Dedicated• Shared91Super BMC User's Manual• Shared LAN: You can select one of the LAN modes.
• Auto• Onboard (Onboard1 or Onboard2)• AIOM (AIOM1 and AIOM2, if there is more than one AIOM)• AOC (AOC1 and AOC2, it there is more than one AOC)
Note: When "LAN Interface” is set to “Dedicated”, only Dedicated card will be available. When “LAN Interface” is set to “Shared”, only Shared card will be available.
When “LAN Interface” is set to “Failover”, Dedicated and Shared cards will be available.

92

Chapter 2: Configuring the BMC Settings

Network mode will DYNAMICALLY display LAN Interface and Shared LAN options basedon the hardware detected in the system. However, the display still follows alphanumericalorder. The LAN Interface options include: Dedicated, Failover, Failover-AOC, Failover-AIOM1,
Failover-AIOM2, Shared, Shared-AOC, Shared-AIOM1, and Shared-AIOM2.

Network Combination Mode
Dedicated

Network Mode Table
Definition“Dedicated” LAN

Shared (Auto Mode)Failover (Auto Mode)
Shared – Onboard/Onboard1/Onboard2
Shared – AIOM/AIOM1/AIOM2

Shared – AOC/AOC/AOC1/AOC2
Failover – AOC
Failover – AOC1
Failover – AOC2
Failover – AIOM
Failover – AIOM1
Failover – AIOM2
Failover – AOC1/AOC2
Failover – AIOM1/AIOM2

Onboard Shared LAN or AIOM Shared
LAN (if there is no Onboard Shared LAN
designed in)
Failover between the first Shared LAN and
Dedicated LAN
Onboard Shared LAN; Onboard1 andOnboard2 Shared LAN if there is more thanone Onboard LAN
AIOM Shared LAN; AIOM1 and AIOM2
Shared LAN if there is more than 1 AIOMLANAOC Shared LAN; AOC1 and AOC2 Shared
LAN if there is more than 1 AOC LAN
Failover between “Shared - AOC” and“Dedicated”
Failover between “Shared – AOC1” and“Dedicated”
Failover between “Shared – AOC2” and“Dedicated”
Failover between “Shared – AIOM” and“Dedicated”
Failover between “Shared – AIOM1” and“Dedicated”
Failover between “Shared – AIOM2” and“Dedicated”
Failover between “Shared – AOC1” and“Shared – AOC2”
Failover between “Shared – AIOM1” and“Shared – AIOM2”

93Super BMC User's Manual• Active Interface: You can view the parameter showing the type of LAN interface that iscurrently selected.

• Link: You can select one of the following link speeds.
• Auto negotiation• 100M half-duplex• 100M full duplex• 1G Full Duplex
Note: Link options are only enabled when the LAN Interface is in Dedicated mode.

• Status: You can view the status of the BMC link.
• Speed: You can view the indicated the speed of the system link connection.
• Duplex: You can view whether the BMC link is a full or half duplex.

94

Chapter 2: Configuring the BMC Settings

SSL Certificates
This tab allows you to upload custom SSL certificates. Supported SSL Certificate files are files
with .pem, .cer, or .crt extensions. The files are in PEM (Private Enhanced Mail) certificate
formats.

• Certification Valid From and Until: You can view current SSL certification validity in thegreyed out textboxes.

• New SSL Certificate: You can upload a new SSL Certificate by clicking on Select File button to select a supported SSL Certification file.

• New Private Key: You can upload a new private key by clicking on Select File button.
You can click [Upload] to upload the certificate and the private key to the server. Once
uploaded, the BMC will reset itself for the new certificate to take effect.
Note: SHA2 and RSA 2048-bit SSL is supported.

95

Super BMC User's Manual

Port
This tab provides the following ports along with the associated standard port numbers. Most
ports can be modified, except Web SSL Port. Users can turn ON individual port to modify the
port number. Click on [Save] to apply changes. The following ports are ON or OFF by default.
The default states and numbers for TCP ports are as follow.

• SSH Port: ON (22)
• Web Port: ON (80)
• Web SSL Port: ON (443)• Virtual Media Port: ON (623)
The default states and numbers for UDP ports are as follow.

• IPMI LAN Port: ON (623)• SNMP Port: OFF (161)
Once you finished configuring the settings, click on [Save] to apply changes.

Note: SSL Web Port cannot be configured by users. Doing so will cause a loss of
https communication. Therefore, SSL Redirection was removed and SSL Web Port isON and greyed/disabled out by default.

96Chapter 2: Configuring the BMC Settings

Network General Frame of WebUILAN Interface when in Dedicated ModeLAN Interface is in Shared Mode
When LAN Interface is in Shared mode and connected, the following information will be
displayed on Web UI.

97

Super BMC User's Manual

When LAN Interface is in Shared mode and disconnected, the following information will be
displayed on Web UI.

Note: In special motherboards without onboard LANs, AOC NIC information is displayed instead of onboard LANs. Redfish API will retrieve data and provide Web UI
display when it comes to display LAN Interface. On the next page is some special X13
motherboards.
Motherboard

MAC3

MAC4

X13DEM

AIOM

AOC

X13DET_B

AIOM

AOC

X13OEI

OnboardAIOM

X13SEDW_F

AIOMAIOM and AOC

X13SEFR_A

AIOM

AIOM or AOC

X13SEM_TF

Onboard and AOC

AOC

X13SCW

OnboardNote: If there is a riser card is used to allow an add-on card or AIOM, BMC will determine if the card is an add-on card or an AIOM by using VPD in the firmware. Users
must ensure VPD is present to get correct reading.

98

Chapter 2: Configuring the BMC Settings

Web UI LAN Design for X13
In 'Shared LAN Auto' mode, the NCSI Shared LAN defaults to using MAC3. However, if
MAC3 becomes unavailable, the BMC will switch to MAC4. Notably, even if MAC3 resumes
operation, the system will continue using MAC4. Additionally, the LAN Web UI now dynamicallyintegrates with the Redfish API. In scenarios lacking a dedicated onboard LAN, the systemdefaults to the Shared LAN. The UI displays only those LAN interfaces that are active andavailable, while hiding inactive or unavailable ones. It's important to note that Auto Mode is
the default setting. If only one LAN option is available, Auto Mode becomes disabled andwill appear greyed out.
When the onboard LAN is available, the following options will be shown.

• LAN Interface• Dedicated• Shared• Failover• Shared LAN• Auto Mode
• Onboard• AIOM• AOC
When the onboard Dedicated and/or Failover LAN is absent, the following options will beshown.

• LAN Interface• Shared• Failover• Shared LAN• Auto Mode
• AIOM• AOC

99

Super BMC User's Manual

There are five special scenarios to consider for non-LOM (non-LAN-on-Motherboard).
1. When X13SEDW is installed to AIOM, BMC will display the following.
Note: Not all AIOM2 can be used as Shared LAN.

• LAN Interface• Dedicated• Shared• Failover• Shared LAN• Auto Mode
• AIOM1• AIOM2
2. When X13SEFR is installed AIOM1 but the second NCSI is a jumper, BMC will not beable to differentiate which device is AOC or AIOM. Hence, it will display Shared LAN on
WebUI as follows.

• LAN Interface• Dedicated• Shared• Failover• Shared LAN• Auto Mode
• AIOM• AOC
3. When AIOM is installed in X13DEM and the second NCSI only supports AOC, BMC will
display AIOM and AOC on WebUI as follows.

• LAN Interface• Dedicated100Chapter 2: Configuring the BMC Settings• Shared• Failover• Shared LAN• Auto Mode
• AIOM• AOC
4. When X13SEED does not have the Dedicated and Failover options, BMC will display
AOCs on WebUI as follows.

• LAN Interface• Shared• Shared LAN• Auto Mode
• Onboard• AOC
5. When X13SEDW-F has two AIOM and one AOC installed, thus does not have the
Dedicated and Failover options, BMC will show AOCs on WebUI.

• LAN Interface• Shared• Shared LAN• Auto Mode
• AIOM1• AIOM2• AOC
Note: BMC can use VPD to determine which names to be shown. If BMC gets thestring “AOC-S” in VPD, then the NIC card will be a standard PCI-E card and BMC willshow the NIC card as an AOC. If BMC gets string “AOC-A”, the NIC card will be the
AIOM card and BMC will show it as AIOM2.

101

Super BMC User's ManualSample Web UI for X13XEFR

102

Chapter 2: Configuring the BMC Settings

IP Access Control
Use this page to configure IP access control policy. You can set up to 10 rules on this pagefor either IP Access Control List.
Note: The default policy is OFF (disable) and default rule is ACCEPT. You can set up
rules using either IPv4 or IPv6 IP addresses.

In the IP Access Control frame, you can view the following Access Control information.

• ID: This column shows the number of IP Access Control rules.
• IP Address Control List: This column shows the list of possible network rules for IP addresses that can be accessed by users.

• Prefix Length: This column shows the Mask settings. The length should be an integer value
between 0 and 128 and should not be a negative value.

• Policy: This column shows the status of an IP access policy of either ACCEPT or DROP.

You can adjust the following options.

• [Enable] button: You can click this button to enable or disable IP access control features.
• [Add] button: You can use the button to add a new rule to the IP access control list.
103

Super BMC User's Manual• [Pencil] icon: You can click on the Pencil iconof a policy to modify its rule.

• [Trash can] icon: You can delete a policy by clicking on the trash can icon.

The following rules apply to ACCEPT and DROP policies.

• You can set you own preferred policies.
• BMC Web UI will follow ID order. BMC always follows previous ID number when you set
a new policy.

• You can add the same IP Address with the different prefixes to the same policy of either
ACCEPT or DROP. BMC Web UI will still follow ID order.

• If you add the same IP Address with the same prefix and the same policy of either ACCEPTor DROP, then you will see a prompt “Duplicate data in the access control list” before pressing [Save] button. If users click [Save], no change will be made to the IP Access Control
List. See below example for details.

• If you add the same IP Address with the same prefix and the different policy of either ACCEPT or DROP, then you will see the new policy will be applied to the existing listing. For
example, if the existing IP Address is 10.2.3.4 with prefix 32 and ACCEPT policy in ID 3(line 3), when you add 10.2.3.4, prefix 32, and DROP policy, line 3 will display 10.2.3.4,
prefix 32 and DROP policy.

104

Chapter 2: Configuring the BMC Settings

SSDP (Simple Service Discovery Protocol)
Use this page for broadcast and discovery of network services on your local network.

You can enable or modify SSDP the following settings on this page.

• SSDP: You can toggle (ON/OFF) to enable or disable SSDP.
• Port: You can enter a port number (0-65535) for the SSDP. The default port is 1900.
• TTL: You can enter the TTL (Time To Live) hop count value for the SSDPs Notify messages.
• IPv6 Scope: You can select to set the scope of the IPv6 Notify messages for SSDP.

105

Super BMC User's Manual

LLDP (Link Layer Discovery Protocol)
Utilize this tab to enable or disable LLDP (Link Layer Discovery Protocol) for the network
interface.

When active, LLDP provides essential network information, including:• Chassis ID Subtype: This field specifies the format of the identifier used to uniquely identify
the connected network device, such as a MAC address or network address.

• Chassis ID:his field represents the actual identifier of the connected network device, helping to uniquely identify it.
106

Chapter 2: Configuring the BMC Settings• IPv4 Address: This field displays the IPv4 network address associated with the interface
or connected device.

• IPv6 Address: This field indicates the IPv6 network address, crucial for configuring connectivity in IPv6 networks.

• MAC Address: This is unique hardware address assigned to the network interface or device,facilitating local network communication.

• VLAN ID: This field identifies the Virtual LAN (VLAN) to which the interface or device belongs, aiding in traffic categorization and network management.

• Port ID Subtype: This specifies the format of the identifier used to uniquely identify theconnected port.

• Port ID: Represents the actual identifier of the connected network port, aiding in precise
port identification within the network.

107Super BMC User's Manual

2.7.4 Virtual Media
Using BMC Web UI, users can go to this page to connect to Floppy (IMA/IMG format file)or CD-ROM (ISO format file) images residing in remote file server(s) and check status ofconnected devices respectively. SFT-DCMS-SINGLE software license is required for HTTP
and HTTPS usage.

• Users can mount VM Devices to the same source of media.
• Web UI Users cannot unmount VM sources that are mounted via iKVM interface and viceversa.

VM Device
This field provides three devices that users can use to mount remote virtual media sources.

VM Mounting and Unmounting Notes

108

Chapter 2: Configuring the BMC Settings

StatusThis field provides the status of currently connected CD-ROM/ISO devices, indicating thatthe connection to the source is successfully established. You can also use this feature to
disconnect respective devices as well. The status of mounting devices should be in sync from
Virtual Media page in BMC Web UI and iKVM remote control. For example, if a user mounted
an image in Device 1 from Virtual Media page, the expected status should be shown in iKVM
remote control as well. The connection would show either URI or Applet depending on how theimages are mounted. If mounted via BMC Web UI, it is considered as mounted via URI and
if mounted via IKVM. The image is shown as mounted via Applet. Mounting and unmounting
a device can only be done by the initial method/interface (via Web UI or via IKVM).

Image Format
This field showcases the format of the connected images. For example, when the image
source is in ISO format, you will see the 'ISO Image' file type displayed on the user interface.

Connection Settings
This field in the Common Settings section specifies the connection type. For example, when
the VM source is connected through HTTP/HTTPS, you will be able to observe the URI in
the Connection Settings.

Click on the Connect/Disconnect Icons
Utilize 'Click to Connect'and 'Click to Disconnect'
icons to enable users to seamlessly
establish or terminate connections to the VM source(s).

109Super BMC User's Manual

Edit VM Connection

Users can access to VM devices by clicking on pencil icon:

• File Server: The host server for your console redirection. File Server can only accept alphanumeric characters, dash, and periods (i.e. a-z, A-Z, 0-9, – and . ) for the URL domain
part. Moreover, the domain part will only accept http:// or https:// at the beginning of thestring (i.e. HTTP+ IP Address, HTTPS + IP Address).]. Port number can be used after the
IP Address as an option.

• For example: http(s):/192.188.8.8:443 for IPv4 Address and http(s)://[2021::8888:443].
• Path to Image: The Path of the CD-ROM image file will only accept a-z, 0-9, @^/.-_ and will
reject all other special characters, including space and tab. The '/' character should only be
accepted when using them alone, not continuously, which means you cannot use //, \\, /\,and \/. The path must be started with ‘/’ or * character and ends with “.iso” file extension.

• Username: Users that have access to the CD-ROM image files will only accept a throughz and A through Z. All other special characters will be rejected, including space and tab.

• Password: The user password will only accept a-z, A-Z, and 0-9. All other special characters will be rejected, including space and tab. Passwords can be previewed by clicking
eye-icon button to view password.
Note: CD-ROM mounting supports HTTP, HTTPS, Samba, and Windows CIFS method.

110Chapter 2: Configuring the BMC Settings

iKVM Interface
Users can access HTML5 iKVM Console using the [Launch Console] icon. The following
image is a VM from the HTML5 iKVM Console.

IMG/IMA Image
Use the following options to upload floppy images:• Choose File: Upload a floppy image (Allowed file type: img and .ima type file)• Upload: Click on [Upload] to upload the IMA or IMG format file to the server
ISO ImageUse the following options to upload and mount ISO files:• Select File: Select an ISO file to upload from a local host (i.e. Laptop, workstation, etc.).
• Mount: Upon clicking [Mount] button, the ISO would be mounted.

Virtual Media (VM) License

Current X13 License

SMBV2

SMBV3

CIFS

SAMBA

STANDARD

STANDARD

STANDARD

STANDARD

111

HTTP

HTTPS

SFT-OOB- SFT-OOBLIC
LIC

Super BMC User's Manual

2.6.4 BMC Settings
Date and TimeYou can use the NTP (Network Time Protocol) server setting to set date and time. NTP is
designed to synchronize the clocks of computers over a network. You can adjust the following
fields:• NTP Enable: You can enable or disable NTP server settings by toggling the ON/OFF button. If NTP is disabled, the system time is used to set date and time. The Time Zone canbe adjusted as required. (in X12 BMC FW 01.03.xx and X13 BMC FW 01.01.xx). If NTP isenabled, the NTP server is used to set date and time. However, before BMC successfully
gets the date and time from NTP server, BMC will sync with system time (e.g.,, from BIOS).
If NTP was enabled and BMC has been using NTP for date and time, date and time willsync with system time (from BIOS) upon a system reboot when NTP is then set to disable.
Note: NTP will automatically be disabled whenever NTP servers cannot be reached orwhenever NTP servers become disconnected. Log will be sent to Maintenance Event
Log to notify you .

• Time Zone: You can select Coordinated Universal Time (or UTC) after enabling NTP.
Note: Time zone is enabled when NTP is selected. The options are UTC -12:00 hr.
through +14:00 hr.

• Primary NTP Server: You can enter primary NTP server info.
• Secondary NTP Server: You can enter secondary NTP server info. This is optional.
112

Chapter 2: Configuring the BMC Settings• Date/Time: You can view the time in YYYY-MM-DD/hh:mm:ss (date is in YYYY-MM-DD
and Time is in HH:MM).

• Auto Daylight Savings Time (ON/OFF): The ON-OFF button can be toggled to enable ordisable Auto Daylight Savings Time. When the Auto Daylight Savings feature is enabled,users will see adjusted time if the Time Zone observes Daylight Savings Time. For example,
being in the Spring Pacific Time will add one hour, as shown below
DST is disabled (OFF), 2023-01-18T 09:09:18
DST is enabled (ON), 2023-01-18T 10:09:18

Dynamic DNS
You can configure Dynamic Domain Name System (DDNS) properties.
Note: NTP service should be enabled prior to Dynamic DNS configuration.

• Dynamic Update Enable: You can enable/disable Dynamic DNS update support.
• Dynamic DNS Server Address: You can view the server address of your Dynamic DNS
server.

• BMC Hostname: You can name of the BMC (Baseboard Management Controller) hostserver.
Note: BMC will pop up the message: “Only alphanumeric are allowed (i.e. a-z, A-Z,
0-9), hyphen (-), and period (.) characters are allowed.” if users enter incorrect characters.

• TSIG Authentication: You can enable TSIG (Transaction Signature) authentication supportand upload TSIG.key files.
Note: Fields with * are optional.

113

Super BMC User's Manual

SMC RAKP
This page allows you to enable or disable the Supermicro supported RAKP (Remote
Authenticated KeyExchange Protocol). When you disable SMC RAKP, there will be a prompt
to inform users.

KCS Control
This feature allows you to secure your environment by configuring appropriate supported
privileges to access KCS interface. The supported privileges include the following.

• Administrator: Any users accessing KCS interface will be able to do all the operations thatan administrator user can do.

• Operator: Any users accessing KCS interface will be able to do all the operations that auser with Operator privilege can do.

• User: Any users accessing KCS interface will be able to do all the operations that a user
with User privilege can do.

• Callback: This may be considered the lowest privilege level. Only commands necessary
to support initiating a Callback are allowed.

• Callback: Users can disable KCS interface by choosing this option.

114

Chapter 2: Configuring the BMC Settings

BMC Configuration
This page can be used to save or restore BMC/IPMI configuration settings. You can save the
BMC/IPMI Configuration settings of the system in “Self-Config Backup” or “Platform-Config
Backup” option. Below are some key points highlighting the functionality of BMC/IPMI configuration:

Restore BMC/IPMI Configuration from Self Config file
You can restore all information with their own configuration file. BMC will restore all information
with configurations previously saved in the configuration file when you want to reload BMC/IPMI Configurations to the same system.

Restoring BMC/IPMI configurations from a file of another system with thesame platform
This option requires a software license. BMC does not modify the hardware dependency
configurations. After restoring the BMC/IPMI configuration, hardware dependencies will retain
their current configuration. For example, current storage card settings will not be modified.

Restoring BMC/IPMI configurations from a file of the same platforms withthe same GUID
For this restoration process to take place successfully, a crucial condition needs to be met:
the GUID (Globally Unique Identifier) of both system A and system B must be identical. The
GUID serves as a unique identifier for each device and ensures that the correct configuration
is being transferred to the intended recipient. If the GUID of system A matches that of system B, it indicates that the two devices share a common identification, making it possible torestore the BMC or IPMI configuration from one device to the other.
The key factor that determines whether the restoration process can take place is the GUID
(Globally Unique Identifier) of both system A and system B. If the GUID of system A does notmatch that of system B, it indicates that the two systems have distinct identification codes or
belong to different code bases. As a result, the system is unable to perform the restoration of
BMC or IPMI configuration from one device to the other.
The requirement for the GUID to be the same is essential because it ensures that the correctand compatible configuration settings are being transferred between the systems. When the
GUID differs (indicating different code bases or distinct systems), it implies that the configurations might not be compatible or applicable to the target device, making the restoration
process unfeasible.
Furthermore, BMC/IPMI configurations cannot be transferred across different BMC firmware.

115

Super BMC User's Manual

The restoration of BMC or IPMI configurations cannot occur between different BMC firmware
due to differences in code base and GUID. These differences imply potential incompatibility,
making it challenging to ensure that the configurations from one firmware are suitable andapplicable to the other. Consequently, seamless restoration across the diverse firmware is
not feasible.
Note: The 'Save BMC/IPMI Configuration' option will download an IPMI configuration.bin file. Hostnames cannot be transferred from one system to another. Passwords
cannot be transferred or overridden by another BMC/IPMI Configuration. IP addresses
are unaffected since they are not saved when saving the BMC/IPMI configuration.
This restriction is in place to maintain the security and integrity of the account settings,
ensuring that unauthorized changes cannot be made through the restoration process.
If the file is good, you will receive the prompt message: “Uploading new configuration…pleasereconnect once process is completed! BMC must be reset to apply new changes.” If the file
is corrupted, you will receive the prompt message: “Corrupted file! Click here to return”. If
the file is not correct file type, you will receive the prompt message: “Invalid file type! Please
upload a valid file. Click here to return."

116

Chapter 2: Configuring the BMC Settings

Host Interface
The BMC Host Interface (HI) provides an Ethernet-over-USB solution, offering the capability
to establish connections with Ethernet devices through USB.

You can adjust the following fields to configure the host interface:• Enable (ON/OFF): This option allows you to enable or disable the BMC Host Interface
service based on their requirements.

• Host IP Address: This option allows you to set up a host IP address, assigning it to thehost operating system for seamless communication.

• Service IP Address: This is the service IP address for the Management Host Interface isavailable in read-only mode, providing essential information about the current configuration.

• USB Connection Options: This option allows you to choose between RNDIS (Remote
Network Driver Interface Specification) Connection or CDC-ECM (Communication Device
Class - Ethernet Control Model) Connection, tailoring the USB connection to specific needs.

117Super BMC User's Manual

System Lockdown
The implementation of a System Lockdown feature enhances the system security bysafeguarding against inadvertent or unauthorized modifications to the system configuration
while it is operational. Once activated, System Lockdown rigorously blocks all attempts toalter system configurations, including firmware updates. Any attempt to make changes during
this lockdown state will be promptly intercepted, and the user will be duly notified of suchattempts. Additionally, to provide a clear visual indication of the system's secured state, theBMC will display a specific icon when the system is under lockdown. This proactive approachensures a robust defense against unintended changes, bolstering the overall integrity andreliability of the system.
Note: To enable System lockdown, you should have DCMS license and BMC Administration privilege.
When system is under lockdown, BMC will show the following icon.

The following features will be functional during system lockdown.

• System power operations (Power On, Power Off, Reset)• Identify operations (chassis identify)• IPMI configuration download• Maintenance events download• UID control

118

Chapter 2: Configuring the BMC Settings

Web Session
You can set the web session timeout to a value from 1 to 30 (minutes); or set it to 0 for no
timeout. The default timeout value is 30 minutes.

Smart Power
Smart Power is a new feature on X12 MB systems and later generations. Admin users of the
Master node of a Multi-node systems like ‘Big-Twin’ and ‘H12DST-B’ systems can turn on or
enable Smart Power Option in the Smart Power page. The feature will involve Power Supply,
BMC, and CPLD. Smart Power will be activated when a PMBUS alert happens. Alerts will
be sent to “Health Event Log”. The Smart Power can be enabled or disabled using the ON/
OFF button, a feature that will be applied to all nodes at the same time. The Smart Power
page provides Status, Input Voltage, Max Watts, and Total Watts for each Power Supply
Unit. It also provides Power Status, Max Watts, Smart Power, Power Consumption, and Total
Consumption for each respective node available in the system.
Note: IPMI/BMC will only set the power limitation if a) IPMI/BMC is reset or b) there isa lost or additional power supply into the system. In those cases, IPMI/BMC will findout the power supply and set the CPU power limit. ‘Enable Smart Power Event Log’
allows users to show Smart Power logs on supported platforms.

119Super BMC User's Manual

2.7 Remote Control
Remote control options allow you to perform operations on a remote server via remote access120

Chapter 2: Configuring the BMC Settings

Launch Console
Use this page to launch or configure current remote console interface settings. You can selectthe JAVA plug-in or HTML5 interface.
Note: HTML5 is the default selection for X13 platforms. After establishing a remoteconsole session, users will be unable to switch between JAVA and HTML5 interfaces.
A message “Once a remote console session is connected, switching between JAVA
and HTML5 is not allowed.” will prompt users if they attempt to change the remoteconsole interface after a session has been established. The maximum number ofsessions for either Java or iKVM console is 4. Hence, when there are more than 4
sessions open, there will be a message to users, “The maximum number of open sessions has been reached!”

To launch a remote console via the default, iKVM, refer to the following steps:
1. Select JAVA plug-in interface option.
2. Click on [Launch Console] to launch Console Redirection or KVM Console.
Please utilize OpenJDK as Oracle Java is no longer supported.
To launch a HTML5 remote console, refer to the following steps.
1. Select the HTML5 option.
2. Click on [Launch Console] to launch Console Redirection or KVM Console. A console ina new browser window will automatically pop up.
A new console will open in a separate browser window. For more detailed options, consider
launching iKVM.
Note: Video recording only works with Chrome browser.

121Super BMC User's Manual

Mouse Mode
You can modify mouse mode based on the OS environment for the remote console.

• Select Absolute Mode for Windows, Ubuntu, and RH6.x later.
• Select Relative Mode for other Linux/Unix distributions.
• Select Single Mouse Mode to use single mouse mode.
Note: IPMI is an OS-independent platform and iKVM support is an add-on feature of
BMC. For the mouse to function properly, please configure the Mouse Mode settings(see above) according to the type of OS used in the system.

Launch SOLThis feature allows you to launch a remote console using SOL (Serial over LAN), which
provides serial port connections over LAN to access a host server via console redirection. It
also allows the system administrator to monitor and manage servers from a remote site. In
order to connect the console through SOL, please consider the following setups.

• Console redirection must be enabled in BIOS.
• The remote system has been configured properly based on the operating system in use.
Note: SOL function will be disabled when IPMI LAN Port is turned OFF.
This option allows users to reset iKVM, which will reset virtual media as well as the iKVM
keyboard and mouse.

122Chapter 2: Configuring the BMC Settings

iKVM Reset
If iKVM service is reset, all active iKVM sessions will be disconnected and open iKVM
windows will be closed. The following message will be prompted, “iKVM service has been
reset, leading to the closure of all active iKVM windows. Please relaunch iKVM windows to
resume your activities.”

123Super BMC User's Manual

2.7.1 Console Redirection
This feature allows you to launch Console Redirection via IKVM (keyboard, video/monitor,
mouse) support. Refer to page 95 on how to first launch the Remote Console. Refer to theimage for the options available. The same descriptions for each icon are displayed whenthe mouse hovers over it.

Click [Help] for further assistance if needed.

124

Chapter 2: Configuring the BMC Settings

2.7.1a Console Redirection – PowerThis feature allows you to configure the power settings of the system.

Once you have reached the window shown above, the following options are available.

• Power On: You can power on the server system.
• Power Down – Immediately: You can power off the server system immediately (non-graceful
shutdown).

• Graceful Shutdown: You can power off the server system gracefully by shutting down theoperation system before turning off the system.

• Power Cycle: You can power off the server system completely and power it back on.
• Power Reset: You can perform a warm restart on the server system.

125

Super BMC User's Manual

2.7.1b Console Redirection – Users
This feature displays the user list, which shows the Session ID, User Name, and IP Addressof active users that are currently accessing the HTML5-iKVM.

126

Chapter 2: Configuring the BMC Settings

2.7.1c Console Redirection – Language
This feature allows you to configure the language setting and select one of the following
support languages.

• English• Japanese• Simplified Chinese• Korean• German• French• Spanish• Italian127

Super BMC User's Manual

2.7.1d Console Redirection – Keyboard
This feature allows you to access the virtual keyboard as an alternative input mechanism if
you are unable to use a physical keyboard. You can now select one of the following supported
languages.

• English (US International and the United Kingdom)• Spanish• French• Italian• Japanese• Korean• GermanAfter one of the languages is selected and set, the HTML5-iKVM virtual keyboard's language
will be set to the selected language.
Note: JAVA-iKVM virtual keyboard's language will be using US-international virtual
keyboard regardless of any of the supported languages is set. Please also note that
due to language differences in size and shape, the sizes of supported virtual keyboards will be varied. Thus, will not be the same.

128

Chapter 2: Configuring the BMC Settings

2.7.1e Console Redirection – Keyboard Mouse Hotplug
This option allows you to hot-plug the server-side Keyboard and Mouse devices using the
Hotplug icon.
Note: The action of this function is on the server side, not the client's side. Server sideis the server on which BMC is installed.

2.7.1f Console Redirection – Macro
This feature provides you the ability to set up patterns or rules for hotkeys and other function
keys. However, you can use the 19 pre-defined buttons for your convenience. Instead ofusing multiple keys (at least two keys) to virtually access the remote window, you can justclick on one of the options. The following are some example definitions for the Macro keys.

• Alt+Spacebar: A keyboard shortcut most often used to open the window menu of the program currently open in Microsoft Windows.

• Alt+Esc: A keyboard shortcut most often used to switch between windows in the order they
were first opened. When this macro is pressed, it will perform the same action.

• Alt+Tab: A keyboard shortcut to switch between all open applications.

Example of pressing Ctrl+Alt+Del

129

Super BMC User's Manual

Macro UI

130

Chapter 2: Configuring the BMC Settings

2.7.1g Console Redirection – Hotkey
Hotkey settings allow you to define your own set of keys to do predetermined actions.

The following display options are available.

• Adjust Mouse: You can switch between mouse modes.
• Exit Remote Location: You can exit/close iKVM.
• Refresh Screen: You can recapture one frame of the screen.
• Send Ctrl+Alt+Del: You can restart the Host OS.
• Toggle Mouse Display: You can hide or unhide the mouse cursor.

131

Super BMC User's Manual

The hotkeys for the display options can be modified to multiple users' preferences by choosing
any function keys (F2 to F12) and numbers (0 to 9) to combine with Ctrl+Shift, as shown
below. For example, one user can set the hotkey for Refresh Screen by combining Ctrl+Shiftand F2 for "Ctrl+Shift+F2". Another user can also set Refresh Screen by combining Ctrl+Shiftand 8 to set a new hotkey "Ctrl+Shift+8". Thus, when the second user presses the "Ctrl","Shift", and number "8" keys, iKVM recaptures one frame of the screen.
If you do not complete choosing the third key to save, an error prompt will display “Please
enter a valid shortcut.”132

Chapter 2: Configuring the BMC Settings

If you complete choosing the third key to save, a successful prompt will display as below
text in green.

133Super BMC User's Manual

2.7.1h Console Redirection – Virtual MediaThis feature allows you to upload and share images via the BMC (Baseboard Management
Controller). These images will be emulated to the host server as USB applications. You needto first activate a Super Micro Software License to enable this feature.

134

Chapter 2: Configuring the BMC Settings

2.7.1i Console Redirection – PreferenceThis feature allows you to control Display, Input, Video Stream Control, and Record properties.

Console Redirection – Display
You can reduce the display's size and image quality. There are five size choices to choose
from: 60%, 70%, 80%, 90%, or 100% (the original size). For image quality, you can selectlow, medium, or high quality depending on the bandwidth of your network.

Console Redirection – Input
This allows you to select one of the following mouse modes to improve mouse performance:
Absolute Mouse when using in Windows, Ubuntu, RHEL 6.x and later, Relative Mouse while
using in other Linux distributions, and Single Mouse when using for other usages.

135Super BMC User's Manual

Console Redirection – Video Stream Control
You can select one of the three options depending on the speed of your network. The 256K
Cable/DSL is preselected while T1 (1.5 Mbps) and T2 (6.3 Mbps) are options for if you havehigher network bandwidth.

Console Redirection – Record
This feature is used to record Video during BIOS booting. You can turn on/off recording timein this tab. A preset two minutes recording time is enabled by default, but you can modify
recording time from 1 minute to a maximum of 30 minutes.
Note: Video Recording only works with the Chrome browser.

136

Chapter 2: Configuring the BMC Settings

2.7.1j Console Redirection – Help
You can click on Help to get more information for most of the icons. The below images show
the Help content and the Help icon.

Help Icon

137

Super BMC User's Manual

2.7.1k Console Redirection – Record
Use this feature to record Video during BIOS booting. After you press the Record button thenthe Stop button, the recording will be available to be saved as shown below.
Note: Video recording only works with the Chrome browser.

Record Icon

Stop (Recording) Icon

138

Chapter 2: Configuring the BMC Settings

2.7.1l Console Redirection – Capture
Capture allows you to save an image of the current screen. After you press the Capture
button, a JPEG image will be available to be saved as shown below.

Capture Icon

2.7.1m Console Redirection – Full-Screen
This feature allows you to expand the HTML5-iKVM screen to the maximum display of themonitor screen.

139

Super BMC User's Manual

2.7.2 iKVM/HTML5
This feature allows you to launch iKVM/HTML5 via IKVM (keyboard, video/monitor, mouse)
support. Refer to page 75 on how to first launch the Remote Console. Click [Help] for further
assistance if needed.

140

Chapter 2: Configuring the BMC Settings

2.7.2a iKVM/HTML5 – Virtual Keyboard
The virtual keyboard provides an alternative input mechanism if you are unable to use aconventional keyboard. The two ways to access the keyboard are as follows.

• Click on "Virtual Keyboard" on the sub-menu.
• Click on the "Virtual Keyboard" icon located at the bottom left of the display.

141

Super BMC User's Manual

2.7.2b iKVM/HTML5 – Virtual MediaThis feature allows you to upload and share images via the BMC (Baseboard Management
Controller). These images will be emulated to the host server as USB applications. You needto first activate a Super Micro Software License to enable this feature.

2.7.2c iKVM/HTML5 – Record
This feature allows for video recording of the display and includes the following options.

• Start: You can use this submenu to start the recording function. By default, the recording
duration is two minutes. This can be adjusted in Preferences (found under the Options tab).

• Stop: You can use this submenu to manually stop the recording process. Recorded videos
will be automatically saved onto your drive.
Note: This new HTML5 implementation is currently only supported by the Chromebrowser.

142

Chapter 2: Configuring the BMC Settings

2.7.2d iKVM/HTML5 – Macro
This feature allows you quick access to combo keys.

• Hold Right Alt Key: This item performs the same function as holding down the right <Alt>
key. Deselect to release action.

• Hold Left Alt Key: This item performs the same function as holding down the left <Alt> key.
Deselect to release action.

• Right Windows Key: This item performs the same function as pressing the right <Windows>
key. Select [Hold Down] or [Press and Release].

• Left Windows Key: This item performs the same function as pressing the left <Windows>
key. Select [Hold Down] or [Press and Release].

• Macro: You can click this item to view the pull-down submenu which includes the following
series of access keys.

• Ctrl+Alt+Del• Alt+Tab• Alt+Esc• Ctrl+Tab• Alt+Space• Alt+Enter• Alt+Hyphen• Alt+F4• Alt+PrntScrn• PrntScrn• F1• Alt+F1• Pause143

Super BMC User's Manual144

Chapter 2: Configuring the BMC Settings

2.7.2e iKVM/HTML5 – Options
This feature provides hotkeys for the following functions.

• Adjust Mouse• Exit Remote Location• Refresh Screen• Send Ctrl+Alt+Del• Toggle Mouse Display

145

Super BMC User's Manual

These hotkeys can be adjusted according to your preference. However, the adjustable key
after Ctrl+Shift is limited to function keys F2 to F12 and numbers 0 to 9. Preference allows
you to adjust Display, Input, Language Setting, and Video Stream Control properties.

146

Chapter 2: Configuring the BMC Settings

Preference – Display
This feature enables auto-stop after n (default: 2) minutes. Adjust the maximum duration ofvideo recordings.

• Display Scale: You can adjust the display scale.
• Image Quality: You can adjust the image quality.

147

Super BMC User's Manual

Preference – Input
This feature allows you to select one of the following mouse modes.

• Absolute Mouse• Relative Mouse• Single Mouse
Note: Single Mouse mode is not supported by Internet Explorer.

148

Chapter 2: Configuring the BMC Settings

Preference – Language SettingThis feature allows you to select one of the following languages to be used by the iKVM/
HTML5 interface.

• English• Japanese• German• French• Spanish• Italian149

Super BMC User's Manual

Preference – Video Stream Control
This feature allows you to enable video flow control for LAN Quality of Service (QoS) byselecting one of the following options.

• 256K Cable/DSL
• T1
• T2

150

Chapter 2: Configuring the BMC Settings

2.7.2f iKVM/HTML5 – User List
This feature displays the user list, which shows the Session ID, User Name, and IP Addressof active users that are currently accessing the HTML5-iKVM.

151

Super BMC User's Manual

2.7.2g iKVM/HTML5 – Capture
Capture allows you to save an image of the current screen.

152

Chapter 2: Configuring the BMC Settings

2.7.2h iKVM/HTML5 – Power Control
This feature allows you to perform Power On, Power Off, Software Shutdown, and Power
Reset operations.

153

Super BMC User's Manual

2.8 MaintenanceThis page allows you to perform maintenance activities such as firmware management,
maintenance events, troubleshooting, BMC reset operations, and many more.
Note: Currently, the number of Maintenance Event Log entries is limited to 4096.

2.8.1. Firmware Management
Firmware management page allows administrators to update firmware for BMC, BIOS,
Motherboard CPLD, BackPlane CPLD, network AOC, and storage AOC as well as manage
Platform Firmware Resiliency (PFR) options.
Note: Systems are required to power down all HOSTs from single-node or multi-node
systems prior to Motherboard CPLD, Backplane CPLD, LCMC PDB CPLD, and BIOS
firmware updates. After firmware updates for network AOC and/or storage AOC, they
will need to reboot. Lastly, BMC may be required to reset after the motherboard CPLD
firmware update, especially in multi-node systems like GrandTwin.

154

Chapter 2: Configuring the BMC Settings

UpdateThis page allows users with administrator privileges to update component firmware. You canview the current and new firmware versions through the Web UI during the update process(BMC, BIOS, etc.). The update typically completes within 5 to 10 minutes.
To update firmware, please refer to the following steps:
1. Select a component to update firmware.
2. If applicable, select preserve configuration options.
3. Select a firmware file to upload. If you click “Upload” button without a firmware image, amessage will inform you to “Please select an image file. Click here to return.”
4. Update the firmware by clicking the “Update” button. You can check firmware update
progress in the Task List page. Once the firmware is in the update mode, the device
will be reset and the server will reboot even if you cancels the firmware updating. If you
cancel the firmware updating process, there will be an alert message that pops up to
ask you “Do you want to abort the upgrading process? The device will have to be resetin order to go back to normal operating mode.” Upon confirmation, BMC is then resetwith a message “BMC is restarting to continue the BMC firmware update process. To
prevent data loss, please Do Not Remove power source until BMC is back online!”
Note: Web Browser / BMC UI of secondary UI (viewing web browser) needs to refreshto renew BMC connection since viewing web browser has stopped sending request
after FW update was initiated. A message for users to wait for BMC will be “BMC isrestarting to continue the BMC firmware update process. To prevent data loss, please
Do Not Remove power source until BMC is back online!”.
To update BMC firmware, go to Update tab from Firmware Management to select radio button
for BMC. You can select available options to preserve.
BMC update supports the following preserve configuration options.

• Preserve configuration• Preserve SDR• Preserve SSL certificate• Backup existing BMC image

155

Super BMC User's Manual

To update the BIOS firmware, navigate to the "Update" tab within the Firmware Management
section. Here, you can choose the appropriate radio button for the BIOS option. You have theflexibility to select either the "Next-boot Update" or "Immediate Update" mode, which would
allow you to schedule when the BIOS firmware will undergo an update.
Following this, you can proceed to select the desired BIOS options that you wish to preserve.
Opting for the "Next-boot Update" mode will ensure that the BIOS firmware update is scheduled
for execution after the system undergoes a reboot. Additionally, if you've uploaded the BIOS
firmware and need to halt the process, you have the option to abort the pending update.
For your convenience, you can monitor the update status of the BIOS firmware. If necessary,
you can cancel the "Next-boot Update" procedure by utilizing the delete icon located on the
Task List page.
BIOS update supports the following preserve configuration options for all X12 platforms except
Tatlow platforms (i.e., X12STH-LN4F, X12STL-F, etc.).

• Preserve SMBIOS• Preserve BIOS Boot Options Configuration• Backup existing BIOS image
Note: If the Rollback ID of current firmware is higher than that of the previous firmware, a prompt will appear, asking, " Flashing the new firmware will make the system
incompatible with any firmware versions lower than the uploaded firmware. As a result,the Backup and Golden images will be updated to the new firmware version. Are you
sure you want to proceed? " This confirmation is designed to ensure your consent
before proceeding with the BIOS firmware update. After the firmware update process
is complete, both the backup and golden image will be updated as well.

156

Chapter 2: Configuring the BMC Settings

The following preserve configuration options for Tatlow platforms (i.e., X12STH-LN4F,
X12STL-F, etc.).

• Preserve SMBIOS• Preserve OA• Preserve SMBIOS• Preserve BIOS Setup Configuration• Preserve BIOS Setup Password• Preserve BIOS Setup Secure Boot Keys
• Preserve BIOS Setup Options Configuration
Note 1: Select “Backup existing image” option to backup exiting BMC or BIOS image.
Backup image will be used for auto recovery in case of failed integrity at any time. Users can also manually recover BMC or BIOS from backup image. Go to Inventory tab
to manually recover BMC or BIOS. Non-ROT platforms will not display “Backup existing image” option.
Note 2: Due to limitation of current BMC implementation, when updating firmware,users might experience a long time to refresh the web browser after update is completed. You might also see the rebooting message for a minute or two when logging
back in before updating is completed.

157

Super BMC User's Manual

How BMC Firmware is Updated

If you click “Upload” button without BMC image, a message will inform you to “Please selectan image file. Click here to return.”

158

Chapter 2: Configuring the BMC Settings

If you continue on with BMC update, BMC will provide timely percentage of completion. See
images below for details.

159

Super BMC User's Manual

Note: You can view current firmware version and new firmware version through Web
UI when they update the firmwares

160

Chapter 2: Configuring the BMC Settings161

Super BMC User's Manual162

Chapter 2: Configuring the BMC Settings

Note: If you cancel the BMC updating process, there will be an alert message pops
up to ask you “Do you want to abort the upgrading process? The device will have tobe reset in order to go back to normal operating mode.” BMC is then reset with themessage “BMC is restarting. To prevent data loss, upon confirmation, please do NOT
remove power source until BMC is back online!” See images below for details.

163

Super BMC User's Manual164Chapter 2: Configuring the BMC Settings

How BIOS Firmware is Updated

165

Super BMC User's Manual

166Chapter 2: Configuring the BMC Settings167

Super BMC User's Manual

168

Chapter 2: Configuring the BMC Settings

If you click “Upload” without a BIOS image included, a message will inform you to “Please
select an image file. Click here to return.”

If you continue on with the BIOS update, BMC will provide a timely percentage of completion.
See images below for details.

169

Super BMC User's Manual

170

Chapter 2: Configuring the BMC Settings

171

Super BMC User's Manual172

Chapter 2: Configuring the BMC Settings173

Super BMC User's Manual

Note: If you cancel the BIOS updating process, there will be an alert message thatpops up to ask you “Do you want to abort the upgrading process? The device will haveto be reset in order to go back to normal operating mode.” BMC is then reset with amessage “BMC Reset Initiated..please wait for 60 seconds and reconnect” upon confirmation. See images below for details.

174

Chapter 2: Configuring the BMC Settings

175

Super BMC User's Manual

BIOS Update Page for Tatlow Platforms

One CPLD MB

2 CPLD MB
Since some motherboards have two CPLDs, currently BMC Web UI will display as follows.
Motherboard and CPLD will start at one as index. Until further announcement, future changes
will be modified to reflect changes from Redfish API. Some of the supported motherboards
with two CPLDs are: X13DGU, X13DEG-OAD, H13DSG-O-CPU, and H13DSG-O-CPU-D.

176

Chapter 2: Configuring the BMC Settings

For Backplane, currently BMC Web UI will display as follows. Backplane and CPLD will startat 1 as index. Until further announcement, future changes will be modified to reflect changes
from Redfish API.

177

Super BMC User's Manual

Inventory
Use this page to view the component firmware inventory and manage the Platform Firmware
Resiliency (PFR) options for Root of Trusted (RoT) supported devices.

You can see the following component firmware inventory based on supported components
in the system.
Note: The backup fields only show when there are valid images.

• BMC• BMC Backup• BMC Golden• BMC Staging• BIOS• BIOS Backup• BIOS Golden• BIOS Staging• BIOS ME• Broadcom

178

Chapter 2: Configuring the BMC Settings• 88NR2241• PMem• NIC AOC
• Capsule BIOS (X13/H13 and later motherboard)• Capsule MCU (X13/H13 and later motherboard)• Capsule ME (X13/H13 and later motherboard)• CPLD Backplane (A number will be appended at the end of ‘CPLD Backplane’ if there are
multiple backplane CPLDs)• CPLD Motherboard (A number will be appended at the end of ‘CPLD Motherboard’ if there
are multiple motherboard CPLDs.)• CPLD Motherboard Golden (X13/H13 and later MB)• Motherboard EC• Multi-node EC• NIC AOC
• Power Supply (A number will be appended at the end of ‘Power Supply if there are multiple
Power Supplies)• CPLD1 Backplane1• PMem
• Storage AOC (Broadcom, Marvell)
Note: Staging Firmware – RoT stores firmware in a temporary staging area for backup, recovery, or evidence. To be consistent, the word “Ver” is used after the firmware
date for BIOS. The list on the next page is a sample of possible firmware in Inventory.

179

Super BMC User's Manual
Name

Version===========

88NR2241 Device 0

1.0.0.9447

BIOS

BIOS Date: 09/13/2022 Ver 1.4

BIOS Backup

BIOS Date: 02/15/2022 Ver 1.2

BIOS Golden

BIOS Date: 06/09/2021 Ver 1.1

BIOS ME

4.4.4.202

BIOS Staging

BIOS Date: 09/13/2022 Ver 1.4

BMC

01.01.35

BMC Backup

Not Present

BMC Golden

09.01.99

BMC Staging

01.01.35

Capsule BIOS

1.00

Capsule MCU

1.00

Capsule ME

1.0.0.0

CPLD Motherboard

F1.00.D5

CPLD Motherboard Golden

F1.00.D5

Motherboard EC

01.C2.02

NIC1 System Slot5
NIC2 System Slot0 AOC-2UR68G4-i4XTS

8.50 0x8000BE22

PowerSupply

1.4

PowerSupply2

1.4

SAS3808 Device 0

16.00.08.00

SAS3808IR Device 15.220.01-3691

SAS3916 Device 2

16.00.02.00

SAS3816IR Device 35.220.01-3691

SAS3916 Device 45.130.02-3170

Samples of Inventory Page
180

Chapter 2: Configuring the BMC Settings

Sample of Inventory Page

181

Super BMC User's Manual

Platform Resiliency Actions
This page allows you with administrator privileges to manage Platform Firmware Resiliency
options. Only BMC and BIOS images are available in the Platform Resiliency Actions page.
Click on the Editor button ( ) next to Platform Resiliency Actions to perform following the
Platform Firmware Resiliency actions.

• Recover: If the administrator suspects that there are any issues with the current image orif the current image is compromised, then the administrator can manually recover BMC or
BIOS from the backup image. You can select the current BMC/BIOS image and click on[Recover].
Note: This action is supported under SFT-DCMS-SINGLE license.

• Update: You can update the current active image as a golden template. If recommended
by Supermicro or if the administrator prefers that the current image be used as a golden
template, then use this option to update the golden image with the active image. You canselect golden firmware options such as Golden BMC, Golden BIOS, or Golden CPLD
Motherboard options and click on [Update].
Note: When users upload the wrong firmware, a prompt will display to notify users
with explanation of failure. In addition, a Maintenance Event Log will be sent to MEL
page for records.

• Generate Evidence: When BMC or BIOS is recovered manually or automatically from thelast known good image or golden image, the active image will be stored in the evidence
region where you can download evidence. If evidence is available, the Generate Evidence
button will be enabled. Generate Evidence options creates a compressed file for the evidence image. You can track the progress in the task list.
Note 1: If one of the BMC or BIOS evidence is in the process of being generated, you
cannot generate other evidence or update other firmware.
Note 2: A BMC or BIOS firmware update will delete the evidence from the evidence
region. Please make sure to download evidence before initiating firmware update.

• Download Evidence: Once a compressed evidence file is generated, the Download Evidence button will be enabled. Click to download the evidence.
Note 1: Compressed evidence fill will be deleted during the BMC reset operation. You
can regenerate the compressed evidence file if needed.
Note 2: Non-RoT platforms will not support Platform Firmware Resiliency actions.

182

Chapter 2: Configuring the BMC Settings

Below images are snapshots of Inventory page. When one of the action buttons is selected,
unavailable or non-applicable action buttons (e.g., Generate Evidence, Download Evidence,
Recover, and Update buttons) are to be greyed out.

Note: Starting from X13, staging areas will be cleaned out after firmware updates.
Hence the Staging areas will be “Not Present” after BMC, BIOS, or other firmware
update processes are completed. If you enter wrong file type or bad image for new
firmware, a prompt message “Please upload a valid file!” will show to ask users toreenter a valid file.

183

Super BMC User's Manual

2.8.2. Troubleshooting
System Crash Dump
This feature allows you to dump and download CPU register information for debug purposes.

You can adjust the following options.

• Auto reset system after CPU CATERR/IERR interrupt happens: The check box allows you
to select reset option after CPU CATERR/IERR interruption happens. If checked (ON), thesystem will restart automatically. If not, the system will remain in a failed state.

• Generate: You can generate a new crash dump.
Note: Upon clicking [Generate], the system will remove previous error logs or dump
available files and regenerate a new dump file.

• Download: You can download the current crash dump file.

184

Chapter 2: Configuring the BMC Settings

Console CaptureThis page displays Crash Capture for Screenshot and Video for Console with the running
Operating System.

Console CaptureThis page displays Crash Capture for Screenshot and Video for Console with running
Operating System.

Console Capture Video
The Console Capture Video function allows you to record video of the console while thesystem is running OS. You can use the following options to configure the function settings:• Disable/Enable: You can enable or disable option. By default, it will be disabled.
• Record until buffer is full: You can record video of the console until the buffer is full. Video
will be saved as AVI format and the maximum buffer size is 7-8 MB (approximately 4 mins.
time calculated based on video size).

• Record until POST ends: You can record video till POST ends or record till timeout value(approximately 4 minutes). BMC will receive POST completion information from BIOS andrecord video until that time or if any delay is introduced then BMC will record video until
timeout period of approximately 4 minutes.

• Apply: You can record all videos with the title and time stamp. It will also allow you todelete a specific video.

185

Super BMC User's Manual• Download: You can play and download video from here.
• AC Cycle/Factory Reset: Upon reset, all videos will be deleted.

186

Chapter 2: Configuring the BMC Settings

Crash Screen Capture
The Crash Screen Capture feature allows you to capture the crash screen. You have to enable
TAS (Thin Agent Service) from the OS. Once TAS is enabled and running in OS, BMC willcapture the last crash screen. Screenshot will be displayed on BMC UI with date and timestamp. Then you can delete or save the crash image.
Note: Table below shows the supported and unsupported server platforms (nonworkstations) for System Crash Dump, Console Capture Video, and Crash Screen
Capture features. We will enable the functions when they are supported. Due to time
constraint, Console Capture Video and Crash Screen Capture on Intel Platforms with
AST2500 are not supported at this time. All workstations and Atom-based motherboards platforms are not supported.
Supported and Unsupported Server Platforms (Non-Workstation)
System Crash
Dump

Console Capture
Video

Crash Screen
CaptureWhitley
Non-Workstation Platforms(Intel ICE Lake)
Purley Platforms
Non-Workstation(Intel Sky Lake)

Supported

Supported

Supported

MicroCloud
Non-Workstation(Intel Rocket Lake)

Unsupported

Unsupported

Unsupported

IoT Solutions (Intel Atombased MB)

Unsupported

Unsupported

Unsupported

AMD H13_AST2600 NonWorkstation Platforms(RoT and non-RoT)

Supported(download only)

Supported

Supported

AMD H12_AST2600 NonWorkstation Platforms(RoT and non-RoT)

Supported(download only)

Supported

Supported

AMD H12_AST2500 NonWorkstation Platforms(RoT and non-RoT)

Supported(download only)

Unsupported

Unsupported

AMD H11_AST2500 (NonWorkstation)

Supported(download only)

Unsupported

Unsupported

Supported

187

Not Yet Supported Not Yet Supported

Super BMC User's Manual

POST Snooping
This page displays the current BIOS POST codes. Refresh the page to query the POST
snooping code for BIOS LPC port 80.

2.8.3. BMC Reset

Factory Default
You can select following options to restore BMC to the factory default settings. This featureincludes the folliowing options:• Remove current settings but preserve user configurations: You can restore all configurations to factory default and preserve all user configurations.

• Remove current settings and restore to factory default: You can restore all the configuration to factory default. This option will remove all users and reset ADMIN user password
to factory default password.

• Remove current settings and set user defaults to ADMIN/ADMIN: You can restore all theconfiguration to factory default. This option will remove all users and reset ADMIN user
password to ADMIN.

• If BMC is reset, only LAN link related should be reported to SEL. (For example: [LAN-0005]
Dedicated LAN link Up.)
Note: Factory default password is the unique password for X12 and next generation
platforms. There will be a prompt saying “BMC is resetting to default. To prevent data
loss, please do NOT remove power source until BMC is back online!”

188

Chapter 2: Configuring the BMC Settings

Unit ResetThis feature allows you to reset an IPMI device.
Note: You will get a prompt that “BMC is restarting. To prevent data loss, please do
NOT remove power source until BMC is back online!”

189

Super BMC User's Manual

2.8.4. Maintenance Event Log
This page displays the record of maintenance events, such as administrative events.
Note: By default, all event categories are selected so you can view all events. You canapply event category filters to view respective events (e.g., Storage, Account, Network,
Service, or others).

The Maintenance Event Log table displays following details about each log entry.

• Severity: You can view the severity of the events with one of the following states.
Info event
Warning event which needs attention
Critical event which needs immediate actions to prevent possible failure• Date/Time: You can view the time stamp of the event occurrence.
• Interface: You can view the interface that triggered the event (e.g., RMCP, Redfish, Web).
• User: You can view the name of the user that triggered the event (e.g., ADMIN, N/A, BIOS).
• Source: You can view the source that triggered the event (e.g., N/A, IPv4 Address, IPv6
Address, etc.).

• Description: You can view the basic description of the event (e.g., Web login was successful, etc.).

190

Chapter 2: Configuring the BMC Settings• Category: You can view the event category based on type of the event (e.g., Storage, Account, Network, Service, or others).

• Keyword Search: You can search keyword related events.
Administrators can perform one of the following operations for the event logs.

• Enable/Disable Maintenance Event Log: You can enable or disable maintenance event
logs. This option is available under Advanced settings.

• Clear: You can select the respective event and click [Clear] to remove the maintenanceevent log entry. To clear “All the Event Logs”, you must enable Maintenance Event Log in
Advance Settings.

• Export to Excel: You can export the current maintenance event log to an Excel file.

191

Super BMC User's Manual

2.8.5. License Management
Use this page to view and configure software license activation for BMC through the 'License
Activation' tab. The licenses currently supported for BMC include SFT-OOB-LIC or SFTDCMS-SINGLE. Additionally, under the 'CPU' tab, users can access information about IntelCapability Activation Payload (CAP) for Intel CPUs.
Intel SDSi licenses (such as SGX, QAT, DLB, DSA, IAX, and VROC) are also available forreview. The Capability Activation Payload (CAP) contains specific Intel SDSi-enabled CPU
features that are being enabled, with a maximum provision of 40 CAPs per CPU. You canthen activate CAPs on one or more CPUs based on the license paid for activation.

192

Chapter 2: Configuring the BMC Settings

193

Super BMC User's Manual

You can adjust the following settings to configure this feature.

• Node Product Key Status: You can view currently activated license type.
• Activate License: You can upload a new license file and activate it toto enable comprehensive end-to-end systems management functions.
You can easily determine whether the SFT-OOB-LIC or SFT-DCMS-SINGLE license has been
activated for BMC features. If a specific software license, such as SFT-OOB-LIC, is required,relevant notifications will appear in pop-up messages. For instance, "This function requires
an SFT-OOB-LIC license. Would you like to activate it now?"
In the event of users uploading an invalid product key format, a prompt message will appear
stating, "Please upload the correct product key format. Click here to return." Importantly, no
MEL log will be generated in this instance.
If you upload a product key with a valid format but an invalid license, a prompt message
will appear stating, "Product key is invalid. Click here to return." Additionally, a log will be
generated.

2.8.6. Task List
The Task List provides the task status for different management operations running on thisdevice.
Note: Currently, it supports BMC and BIOS FW updates along with storage controller
disks, which can erase task progress.

194Chapter 2: Configuring the BMC Settings

You can search state (Running/Completed/Failed) of the following tasks.

• Health Status: You can view the status of current tasks.
• Job: You can view the lists of current job type.
• State: You can view current state values (Running, Completed, or Failed).
• Create Time: You can view the timestamp for task beginning.
• Progress: You can view the progress of current running task(s).
• Total Duration: You can view the total time taken to finish current task(s).
• Completed Time: You can view the task completion time stamp.
You can used the filter to show interested tasks based upon three criteria: Running, Completed
and Failed. The following table shows corresponding Redfish state to filter criteria.
Note: Only Administrative users can cancel pending tasks. The trash can icon will bedisabled under Operator and User privileges.
UI Task Filter

Task List State

Running

New
Starting
Running
Suspended
Interrupted
Pending

Stopping
Service

Cancelling
Completed

Completed
KilledCancelled

FailedException

195

Super BMC User's Manual

Chapter 3
Frequently Asked Questions
Question: How do I flash the BMC firmware?
Answer:1. Click the <Maintenance> button. Browse the files available and select the correct file toflash the firmware.
2. Click the <Update Firmware> button to proceed with firmware flashing.
Question: If I am using a firewall for my network connections, which ports should I open sothat I can access my BMC connection?
Answer: In order to access your BMC connection behind a firewall, please open the following
ports:
HTTP: 80 (TCP)HTTPS: 443 (TCP)
BMC: 623 (UDP)
Remote console: 5900 (TCP)
Virtual media: 623 (TCP)
SMASH: 22 (TCP)
WS-MAN: 8889 (TCP)196

Chapter 3: Frequently Asked Questions

Question: When I update the BMC firmware through the web, why do I get a file download
pop-up even though the firmware was not updated?
Answer: This may be caused by your anti-virus software. Disable your antivirus software
temporarily and update your firmware.
Question: My system seems to function properly. Why does the BMC event log indicate thatmy voltage and temperatures are beyond the limits?
Answer: It is not a normal condition. Make sure that there is no other device accessing the
I2C bus. If another device accesses the I2C bus frequently, it might cause a collision with
the BMC when this device accesses the I2C bus. When you see this error, please uninstall
lm_sensors in Linux.

197

Super BMC User's Manual

Appendix A
Firmware Update via WEB GUI and SUM
A.1 Overview
This user's guide provides detailed information on how to update Supermicro BMC firmware
on X13 and H13 series motherboards using BMC WEB GUI or SUM (Supermicro® Update
Manager).
Note: For documents concerning utility support such as Redfish, SMCIPMITool, SUM,
SSM, IPMICFG, SPM, SuperDoctor, UEFI UEFI BIOS, RSD/SCC, TAS, and IPMIView,
please refer to our website at https://www.supermicro.com/en/solutions/managementsoftware/bmc-resources for details.

198

Appendix A: Flash Tools

A.2 Updating Firmware Using BMC WEB GUI
In order to keep the system working properly, please follow the steps below to update BMC
firmware through BMC WEB GUI:
1. Log into the account by entering the IP address on a web browser and follow the
prompts on the screen.

Figure 1: BMC Firmware Web User Login

Note: Please contact Supermicro sales or FAE if you do not know your username or
password.

199

Super BMC User's Manual

2. Click on the Firmware Update tab on the BMC dashboard.

Figure 2: BMC Firmware Update Dashboard

200

Appendix A: Flash Tools

3. When the following screen appears, select the [BMC] option and click [Next].

Figure 3: BMC Firmware Update Default Setting201

Super BMC User's Manual

4. Press [Select File] to select the new BMC firmware file and press [Upload] as shown
below.

Configurations are reserved for
BMC firmware update and theselections are grayed out.

Figure 4: Select and Upload New BMC Firmware File

Note 1: By default, the firmware update process preserves the existing configuration,
SDR, and SSL certificates for the new BMC firmware. You can unselect any of thepreservation options if applicable.
Note 2: Select "Backup existing image" option to backup existing BMC or BIOS image.
The backup image will be used for auto-recovery in case of a firmware integrity check
fails at any time. You can also manually recover BMC or BIOS from the backup image.
Go to the inventory page to manually recover BMC or BIOS. Non-ROT platforms will
not display the "Backup existing image" option.

202

Appendix A: Flash Tools

5. Wait for the upload process to complete, which might take a few minutes.

Figure 5: New BMC Firmware Uploading203

Super BMC User's Manual

6. Verify the new firmware version and press [Update] to perform the firmware update.

Figure 6: Verify the New BMC Firmware Version

204

Appendix A: Flash Tools

7. Wait for the update process to be completed. It might take a few minutes. Any system
configuration change is not recommended during the update process.

Figure 7: BMC Firmware Updating in Progress

8. BMC will reboot after the firmware is completely updated. Please wait for BMC tocomplete the system reboot.

205

Super BMC User's Manual

9. Once the reboot process is complete, WEB GUI will return to the login screen, and you
will need to log in to the system again.

Figure 8: BMC Firmware Web User Login206

Appendix A: Flash Tools

A.3 Updating Firmware Using SUM
Please follow the procedure below to update BMC firmware in SUM (Supermicro® Update
Manager).

Step 1: Installing SUM
To install SUM in Linux/FreeBSD OS, follow the steps below. Windows installation is similar.
1. Extract the sum_x.x.x_Linux_x86_64_YYYYMMDD.tar.gz archive file.
2. Go to the extracted sum_x.x.x_Linux_x86_64 directory. Rename this directory to“SUM_HOME”.
3. Run SUM in the SUM_HOME directory.
Linux Example:[shell]# tar xzf sum_x.x.x_Linux_x64_YYYYMMDD.tar.gz[shell]# cd sum_x.x.x_Linux_x86_64[SUM_HOME]# ./sum

Step 2: Updating BMC Firmware
Complete the steps below to update BMC firmware:

207

Super BMC User's Manual

1. Use the command “UpdateBmc” to run SUM to update BMC firmware.
Syntax:sum [[-i <IP or host name> | -I Redfish_HI] -u <username> -p <password>]-c UpdateBmc --file <filename> [--overwrite_cfg] [--overwrite_sdr][--backup] [--forward]
2. The progress of the firmware updating will be displayed as shown below. DO NOT interrupt
the process until it is complete. BMC will reboot after the firmware is completely updated.
Please wait for BMC to complete the system reboot. (Figure 9)
Notes:•BMC SOC will be updated after the firmware update process is completed.

•

BMC configuration settings will be preserved by default for the new BMC firmware unlessthe --overwrite_cfg option is used.

•

DO NOT flash BIOS and BMC firmware images at the same time.

•

The --overwrite_cfg option overwrites the current BMC configuration using the factory
default values in the given BMC image file.

•

The --overwrite_sdr option overwrites the current BMC SDR data.

•

SUM command is recommended for BMC firmware updates: sum [[-i <IP or host name>| -I Redfish_HI] -u <username> -p <password>] -c UpdateBmc --file <filename>208

Appendix A: Flash Tools

Example:Remote Update

You can use SUM to update BMC firmware via IPMI port.
[SUM_HOME]# ./sum -i 192.168.34.56 -u ADMIN -p XXXXXX -c UpdateBmc--file SMCI_BMC.rom
Local Update

You can use SUM to update BMC firmware under Linux, Windows, or FreeBSD.

Figure 9: Output of BMC Remote Update in SUM

209

Super BMC User's Manual

SUM_HOME]# ./sum -I Redfish_HI -u ADMIN -p XXXXXX -c UpdateBmc --file
SMCI_BMC.rom

Figure 10: Output of BMC Local Update in SUM

210

Appendix B: Introduction to SMASH

Appendix B
Introduction to SMASH
B.1 Overview
The SMASH (System Management Architecture for Server Hardware) platform, developed byDistributed Management Task Force, Inc. (DMTF), delivers a host of architecture-based andindustry-standard protocols that will allow IT professionals to simplify the task of managing
multiple network systems in a data center. This platform offers a simple, intuitive solution to
manage heterogeneous servers in a web environment regardless of differences in hardware,
software, OS, or network configuration. It also provides the end-users and the ISV community
with interoperable management technology for multi-vendor server platforms.

How SMASH works
SMASH simplifies typical SMASH scripts by reducing commands to simple verbs. Althoughdesigned to manage multi-servers as a whole, SMASH can address individual components ina specific machine by using the SSH command-line protocol. Even when multiple processors,
add-on cards, logical devices, and cooling systems are installed in a server, SMASH canbe directed at a particular component in the server. A manager can use a text console toaccess, monitor, and manage all servers that are connected to the same SSL connection.
This platform can be programmed to periodically check all sensors in all machines or monitor
a particular component in a specific server at any time. By adjusting the scope of tasks andthe schedules of monitoring, SMASH allows the IT professionals to effectively manage multisystem clusters, minimize power consumption, and achieve system management efficiency.

1.

2. Transport

Command:Protocol-> show
4.

User

Command Output:
cpu0
disk1
sensor1

3.
Transport
Protocol->SMASH-CLP User Interface

211

ServerSuper BMC User's Manual

SMASH Compliance Information
The SMASH platform documented in this user's guide is developed in reference to and incompliance with the SMASH Initiative Standards based on the following DMTF documents.

• System Management Architecture for Server Hardware (SMASH) Command Line Protocol (CLP) Architecture White Paper (DSP 2001)• SM CLP Specification (DSP 0214)• SM ME Addressing Specifications (DSP 0215)• SM SLP to CIM Common Mapping Specification (DSP 0216)• Common Information Model (CIM) Infrastructure Specification (DSP0004)• The Secure Shell (SSH) Protocol Architecture (RFC4251)• The Secure Shell (SSH) Connection Protocol (RFC4254)

B.2 An Important Note to the User
The information included in this user's guide provides a general guideline on how to use the
SMASH protocol for the system management. Instructions given in this document may or
may not be applicable to the system depending on the configuration of the system or theenvironment it operates in.
For documents concerning utility support such as Redfish, SMCIPMITool, SUM, SSM,
IPMICFG, SPM, SuperDoctor, UEFI BIOS, RSD/SCC, TAS, and IPMIView, please refer toour website at https://www.supermicro.com/en/solutions/management-software for details.

B.3 Using SMASH
This section provides a general guideline on how to use SMASH for the system management
in a web-based environment. Refer to the SMASH script provided below to curtail a server
management protocol for the systems.
Note: The instructions listed below are applicable to both Windows and Linux systems.
We use the Windows platform as our default setting.

212

Appendix B: Introduction to SMASH

B.4 Initiating the SMASH Protocol
There are two ways of initiating the SMASH protocol.

To Initiate SMASH Automatically
You can initiate SMASH automatically by connecting the BMC (Baseboard Management
Controller) via the Secure Shell protocol (SSH) from a client machine.

To connect from a Linux machine
1. Use 'ssh<BMC ip address>'.
2. Enter the password.

To connect from other machines
1. Use a terminal emulator application such as Putty.
2. Enter the BMC ip address in the terminal emulator application.
3. Choose ssh as the connection type
4. Enter the password at the prompt.
5. If successfully logged in, the SMASH prompt will be displayed.

213

Super BMC User's Manual

B.5 SMASH-CLP Main Screen
After successfully logged in the SSL network, the SMASH Command Line Protocol Main
screen will display as shown below.

SMASH-CLP Main Screen

214Appendix B: Introduction to SMASH

B.6 Using SMASH for System Management
After you have familiarized yourself with the SMASH commands, you will be able to use
these commands to manage the system. To properly manage the network system, be sure
to follow the instructions below.
Note: Make sure that the format of all commands are compliant with the DMTF specification, which is "<Verb> [<option>] [<target>] [<properties>]", where:• A Verb means a command.
• An Option works according to the definition of a command given in Section B-7: Definitions of Command Verbs.

• A Target is a managed device.
• Properties are the specific attributes that you want to assign to a target machine or to getfrom a target machine.

Using SMASH for System Management215

Super BMC User's Manual

B.7 Definitions of Commands Verbs
Based on the DSP Specification, each target supports its own set of verbs. These verbs
allow you to issue commands to a target system to perform certain tasks. For example, theverbs supported by the admin target group include: cd, help, load, dump, create, delete, exit,
version, show, etc.

• cd
The command verb cd is used to navigate to a specific target address using the SSL
protocol. For example, issuing the command cd/admin1 will direct you to the target admin(AdminDomain).

• show
The command verb show is used to display the properties and the contents of a target, agroup of targets, a sub-groups of the target(s). Properties, contents, supported operations
related to the target, the group of targets or their sub-targets will be displayed.

• exit
The command verb exit is used when you want to exit from a SMASH session or close asession.

• help
The command verb help is used when you want to get helpful hints or information on acontext-specific item. This command has the same function as the help option listed for thetarget group.

• Version
Use the command verb version to display the CLP version used in a specific machine.

• set
Use the command verb set to assign a set of values to the properties of a target machine.

• startThe command verb start is used to turn on the power control, to start a process, or to change
an operation state from a lower level to a higher level in a system.

• stop
The command verb stop is used to turn off the power, to stop a process, or to change an
operation state from a higher level to a lower level.

• resetThe command verb reset is used to enable or to disable the power control of or the processesof the machine.

216

Appendix B: Introduction to SMASH• delete
The command verb delete is used to delete or to destroy an entry or a value previously
entered. It can only be used in a specific target as defined according to the SAMSHCLP
Standards.

• loadThe command verb load is used to move a binary image file from a URI source to the MAP.
This command will achieve different results depending on the setting of a target system, andhow the verb load is defined in the DSP specification used in the system.

• dump
The command verb dump is used to move a binary image file from the MAP to a URI source.
This command will achieve different results depending on the setting of a target system, andhow the verb dump is defined in the DSP specification implemented in the system.

• create
The command verb create is used to create a new address entry or a new item in the MAP. It
can only be used in a specific target as defined in the SMASH profile or in MAP specifications.

217

Super BMC User's Manual

B.8 SMASH Commands
The following table provides the definitions and descriptions of SMASH commands. The
most useful commands are show and help, which will provide you with information on how
to navigate through the SSL network connection.
Option
Name

Short
Form

Definition

Notes

-all

-a

Instructs a command verb to perform None
all tasks possible-destination
<URI>

None

Indicates the final location of an image or selected data

URI or SM instance address-display-dSelects data that you wish to display

This can generate multiple query
results-examine-x

Instructs the Command Processor
None
to examine a command for syntax orsemantic errors without executing it-force-f

Instructs the verb to ignore any
warnings triggered by default but
go ahead executing the command
instead

None

-help

-h

Displays all information and documentation regarding the command
verb

None

-keep
<m[.s]-k

Sets a time period to hold and keep
the Job ID and the status of a command

The amount of time set to hold acommand Job ID or its status candiffer.

-level <n>-l

Instructs the Command Processor to Levels should be expressed in a
execute the command for the current natural number or "all".
target and for all target machines
within the level specified by you-Output<args>-oControls the format and the content of a command output. This
only supports "format=clpxml" and"format=keyword"

Many variables or factors can affectthe outcome of format, language,level of details of the output.

-Source
<URI>

None

Indicates the location of a source
image or a target

URI or SM Instance Address-Version-v

Displays the version of the command verb

None

-Wait

-w

Instructs the Command Processor
to hold the command response or
query result until all spawned jobs
are completed.

None

SMASH Commands

218

Appendix B: Introduction to SMASH

B.9 Standard Command Options
The following table lists the standard command options.

start

Stop

version

x

x

x

x

x

x

x

x

x

x

x

x

x

x

x

x

x

all

x

destinationx

display
examine

x
x

x

force
help

show

x

set

x

reset

x

load

help

exit

dump

deleteCreate

CLP Verbs
CD

CLP
Option

x

x

x

x

x

x

x

x

x
x

x
x

keep
level
Output

x
x

x

x

x

x

x

SourceVersion

x

x

x

x

x

x

x

x

x

x

x

x

x

x
x

x

x

x

x

x

x

Wait

Standard Command Options

219

Super BMC User's Manual

B.10 Target Addressing
To simplify the process of SMASH command execution, a file system called Target Addressing
was created as shown in the diagram below.
/
system1

pwrmgtsvc1

logs1

sensors1

log1
record001

sensor001

record002

sensor002

.
.
.
.
.

.
.
.
.
.

recordxxx

sensorxxx

Target Addressing Diagram

Terms Used in the Target Addressing Diagram
This section provides the descriptions of the terms used in the Target Addressing Diagram
above.

• "/" indicates the root of the system.
• "/system1" includes all major Targets.
• "/system1/logs1/log1" includes all sensor event logs.
• "/system1/sensors1" contains the readings and information of all sensors.
• "/system1/pwrmgtsvc1" is used for chassis control.
• "show../logs1" allows you to issue SMASH commands for the system to perform the tasksof your choice. For example:• Issuing the command "show/system1/logs1" while you are in "show../logs1" will allow
you to set the Absolute or the Relative target path.
220

Appendix C: Unique Password for BMC

Appendix C
Unique Password for BMC
C.1 Overview
Due to California Senate Bill No. 327, a common default password is required to be available
in a connected device that is capable of connecting to an IP network. Supermicro will nolonger use the default password “ADMIN” for new devices or systems. Instead, we will assign
a unique password that is specific to each new motherboard.
Effective as of January 1, 2020, each new Supermicro motherboard will come with two labelsthat contain a unique password assigned to that motherboard. One unique password label
will be placed near the BMC (Baseboard Management Controller) chip and/or close to the
MB serial number label. This label is not to be removed. The other unique password label
will be placed on the CPU1 socket cover. This label is removable and can be placed in any
location, such as on the side of the chassis or a service tag.
When logging in to the BMC for the first time, please use the unique password provided
by Supermicro to log in. Afterward, the unique password can be changed to the customer's
chosen username and password for subsequent logins.
For more information regarding BMC passwords, please visit our website at http://www.
supermicro.com/bmcpassword.

221

Super BMC User's Manual

C.2 Notice and Shipping Label Identifier
Every server that has a BMC unique password will include a notice in the plastic wrap on the
top side of the plastic wrap as well as an identifier on its shipping label.

BMC Unique Password Notice for servers

222

Appendix C: Unique Password for BMC

Shipping Label Identifier

223

Super BMC User's Manual

C.3 Label Specifications
The unique password will consist of at least 10 alphabetic uppercase characters. To avoid
confusion, provided passwords will not include any lower case alphabetic characters or
numbers.
One password label will be located near the BMC (Baseboard Management Controller) chipand/or close to the motherboard serial number label. Do not remove this label. The other label
will be placed on the CPU1 socket cover. This label may be removed and placed in anotherlocation, such as on the side of the chassis or a service tag.
Most systems have a pull-out tag to display the BMC MAC address and the preprogrammed
unique password. The rest of the systems will have the sticker on top/front of the chassis.

Default password label

Label location on BMC chip224

Appendix C: Unique Password for BMC

Label locations on motherboard PCB and the cover of CPU1

225

Super BMC User's Manual

Label locations on motherboard PCB and the cover of CPU1

226

Appendix C: Unique Password for BMC

Label on the opposite side of the service tag

Label on the opposite side of the service tag

227

Super BMC User's Manual

Label on the opposite side of the service tag

Label on the opposite side of the service tag

228

Appendix C: Unique Password for BMC

Label on the opposite side of the service tag

Label location on chassis229

Super BMC User's Manual

C.4 Restore Factory Default
You can select the following options to restore BMC to the factory default settings.

• Remove current settings but preserve user configurations: This option will restore all configurations to factory default and preserve all user configurations• Remove current settings and restore to factory default: This option will restore all theconfiguration to factory default. It will remove all users and reset ADMIN user password
to factory default password.

• Remove current settings and set user defaults to ADMIN/ADMIN: This option will restore
all the configuration to factory default. It will remove all users and reset ADMIN user password to ADMIN.

C.5 Change All Unique Passwords Using Script
Due to possible different operating environments, you are given the option to modify theprovisioning script and unique passwords.

230

Appendix C: Unique Password for BMC

C.6 Frequently Asked Questions
Question: What if a password sticker is lost? How do I get my unique password?
Answer: There is a minimum of two stickers on each product. One sticker will be placed on
the motherboard and a second sticker will be on the server chassis. At this time, Supermicro
has not encountered any instances of lost or misplaced stickers. In the rare case of such
incidence, please contact the direct sales support to receive the soft copy of the password.
Question: What if the password stickers on the chassis and the motherboard are different?
Answer: If there is a discrepancy, use the motherboard sticker. The motherboard sticker isalways correct.
Question: I purchased my products from a distributor. Can Supermicro provide me soft copiesof the unique preprogrammed passwords?
Answer: At this time, we only have the ability to provide soft copies to our direct customers.
You will need to register your products to obtain soft copies of your passwords. For direct
customers, please use the Supermicro Customer Registration portal.
Question: Do you have a script that can change all unique passwords to my password?
Answer: We will provide a sample script with documentation. Of course, the operating
environment may change from customer to customer. It is the end user's responsibility tomodify the provisioning script.
Question: Will this law affect customers in Europe and Asia where shipments are from theNetherlands or Taiwan manufacturing facilities?
Answer: Since our standard SKUs will be rendered from California, we keep the same design
across our portfolio, so it gives a unified experience across all platforms.
Question: Will customers purchasing Supermicro products from an OEM vendor be subject
to the preprogrammed password initiative?
Answer: Yes, customers will still receive products with a unique preprogrammed password.
You will be able to change the preprogrammed password yourselves or you can work withyour OEM vendor to make the necessary password updates.

231

Super BMC User's Manual

Question: I am purchasing multiple systems for my datacenter. How do I change all of theunique preprogrammed passwords for these systems in an efficient manner to support myoperations?
Answer: Please contact the systems integrator (SI) or value-added reseller (VAR) to assist
you in this process.
Question: Can Supermicro apply a single unique customer-specified password for all mysystems? Will this comply with SB327?
Answer: All systems from Supermicro will ship with a unique preprogrammed password.
Customers will be able to change the password on each system. In order for Supermicro tocomply with SB327, we are not able to use customer-specified passwords. All passwords will
be unique and assigned at the time of manufacturing.
Question: When will my motherboard have this change rolled out?
Answer: Supermicro plans to have new stickers rolled out starting mid-December 2019.

232

Appendix C: Unique Password for BMC

Appendix D
Remote Attestation
D.1 Overview
Supermicro trusted supply chain assurance offers to verify the identity of Supermicro serverthat is received by the customer matches with what Supermicro has manufactured. IT
administrator and security teams can confidently deploy servers in data centers after validating
the servers manufactured by Supermicro and unexpected modificationd have not occurred
during the journey from Supermicro to datacenters.
To ensure smooth Day One operation, it is highly recommended that your systems areverified using Supermicro’s system attestation process. Attestation will detect any changes
in the composition of your hardware and firmware through cryptographic signing, thereby
guaranteeing the state of your server, while identifying and reporting any unauthorizedchanges.

D.2 License Requirements
An Enterprise SFT-SDDC-SINGLE license is required to perform attestation. You may inquire
about this license through your Supermicro sales representative.

D.3 Attest Your System Using the Supermicro Website
Please follow these steps to attest your system:
1. Run Supermicro Update Manager (SUM) to create a measurement file containing yourcurrent system configuration. Use command below to get the measurement dump fromyour system.
sum -i <BMC IP> -u <BMC_USER> -p <BMC_USER_PASSWORD> -c Attestation--dump --file <MEASUREMENT_FILE>

233

Super BMC User's Manual

2. Log in to the Attestation Portal at https://www.supermicro.com/attestation.

3. Upload the measurement file obtained in step 1 to the Measurement Validation Server,which will compare the configuration to Supermicro’s reference manifest file.

234Appendix C: Unique Password for BMC

4. Download the verification report that compares the uploaded measurements with
Supermicro’s reference manifest. The verification report includes:• System components• Firmware• FRU
See sample report below.

In addition to an interactive web interface, you may also use the Attestation RESTful API toautomate the process using your own script.

235

Super BMC User's Manual

D.4 Attest Your System Using RESTful APIs
Bearer Authetication
Token Generation
Users need to generate bearer token from https://www.supermicro.com/attestion using a web
browser. Tokens expire after 60 minutes.

User of Token
There should be generated token included to the API request header. Authorization Bearer<token>

API Calls
Refresh Tokens
To refresh the token data, please take utilize the following.
Method: GETEnd Point: https://rots.supermicro.com/api/v1/attestation/refreshtoken
Request Params: None
Sample query: https://rots.supermicro.com/api/v1/attestation/refreshtoken

List of Attestation Data
To query all attestation data by pagination, , please take utilize the following.
Method: GETEnd Point: https://rots.supermicro.com/api/v1/attestation
Request Json: (Optional)

236

Appendix C: Unique Password for BMC

Response Json: Users need to generate bearer token from https://www.supermicro.com/
attestion using a web browser before using these RESTful APIs.

Query Attestation Data
To query individual Attestation Data by UUID or serial number, please utilize the following
data. You may attest an entire system and/or motherboard by using the appropriate serial
number. The report is base64 encoded and must be decoded before use.
Method: GETEnd Point:
https://rots.supermicro.com/api/v1/uuid/{uuid}
https://rots.supermicro.com/api/v1/sn/{sn}Request Json: None
Response Json:

237

Super BMC User's Manual

Upload Attestation Data
To upload base64-encoded measurement file to query and validate against RoTS, , pleasetake utilize the following.
Method: POST
End Point:
https://rots.supermicro.com/api/v1/upload
Request Json:

238

Appendix C: Unique Password for BMC

Response Json:

239

(Disclaimer Continued)
The products sold by Supermicro are not intended for and will not be used in life support systems,
medical equipment, nuclear facilities or systems, aircraft, aircraft devices, aircraft/emergency communication devices or other critical systems whose failure to perform be reasonably expected to resultin significant injury or loss of life or catastrophic property damage. Accordingly, Supermicro disclaims
any and all liability, and should buyer use or sell such products for use in such ultra-hazardous applications, it does so entirely at its own risk. Furthermore, buyer agrees to fully indemnify, defend
and hold Supermicro harmless for and against any and all claims, demands, actions, litigation, andproceedings of any kind arising out of or related to such ultra-hazardous use or sale.