Dell server, How to customize iDRAC 9

How to customize and tame iDRAC 9

What if a server in a data center, server room, or remote branch office is not responding? Not at all. For example, there is a critical system failure. Yes, the situation is common: reboot the server (hard reset) via a button and you're done.

But if the system administrator works remotely, there is no one to do it, and ordinary employees do not and should not have access to the equipment. You have to call a specialist to the point of placement. And this is long, expensive and inefficient.

In this article we will tell you about IPMI 2.0 (Intelligent Platform Management Interface) technology in Dell's implementation of iDRAC 9, which allows you to reboot the server remotely, even if the operating system does not respond to the administrator's commands.

What's more, iDRAC 9 can remotely cold-start the server, shut it down, control the fans, check logs, and monitor the server's performance as if it were right in front of you. All through a graphical user interface (GUI).

And to get started using iDRAC 9, you only need 3 things:

  • A modern Dell server;
  • 5 minutes of initial setup time;
  • Step-by-step instructions at the end of the article.

But let's take it one step at a time.

What is iDRAC?

iDRAC (integrated Dell Remote Access Controller) is a proprietary remote server management technology developed by Dell based on the IPMI standard and SoC.

From a technical point of view iDRAC is a BMC (Baseboard Management Controller) integrated into the motherboard, which provides remote access to the server without the need for physical presence on site. By the way, in older generations of Dell PowerEdge servers you can find the name BMC, not iDRAC or DRAC.

IPMI 2.0 Architecture, scheme

IPMI 2.0 Architecture.

Why iDRAC?

IMPORTANT! The BMC controller on which iDRAC 9 runs receives standby power (+5V Standby), so it can operate even when the server is powered off but connected to power. iDRAC is available out of the box in almost all Dell server models, except for some entry-level models like T20, T30, T40, etc.

With iDRAC, you can monitor server status, receive notifications of problems, make settings, and manage the server remotely over the network. The iDRAC also provides the ability to remotely turn the server on or off, reboot it, boot the operating system, and manage BIOS/UEFI.

In general terms, an iDRAC is a mini-computer built into the server that links the server administrator to the device over the network. Since iDRAC is an on-chip system, you don't need to buy anything additional for its operation (except for advanced licenses, but more on that later). The iDRAC technology is self-sufficient (although it is meaningless in isolation from the server) and ready to work right out of the box, the main thing is to connect the server power supply and RJ-45 network cable to a special (or combined) iDRAC port.

Key features of iDRAC

  1. Hardware system-on-chip
Hardware system-on-chip, photo

The iDRAC technology is based on hardware solutions that are tightly integrated into the server. The BMC chip is soldered on the motherboard and has access to power, sensors and other server components. All this distinguishes iDRAC from software-based management and monitoring methods.

2. Integrated

idrac network port, Dell server, photo

An iDRAC controller with a basic free license (Basic or Express) is available out of the box. Older models have a dedicated RJ-45 port (all models from Gen 14 onwards) to keep the main network card unburdened and the port free for workloads.

3. User-friendly graphical web interface

Dashboard iDRAC9 virtual console, photo

All the basic functionality of iDRAC is accessible over the network through a normal browser. If a server with iDRAC is connected to the WAN and configured, an administrator anywhere in the world can control the server. From a PC, smart TV or smart phone. Only authorization data is needed.

4. From basic functionality to complex data center systems

There is no need to purchase entry-level licenses, iDRAC Basic and Express (depending on the model). Their functionality is sufficient for all the needs of small and medium-sized businesses. But especially large and complex IT infrastructures have tasks to manage dozens and hundreds of servers. To cover the needs of large businesses, Dell sells iDRAC 9 licenses with extended functionality.

iDRAC 9 license levels: what's out of the box

In total, iDRAC 9 has 4 license levels, but only two are free: Basic and Express. The latter is included only with servers of the upper price segment - 600 series and higher. To get Enterprise and Datacenter, you need to pay extra in any models.

You can also get a trial version (up to 30 or 90 days). Explore here.

iDRAC 9 license levelsFor server series 100-500For server series 600 and above
iDRAC 9 Basic: Built-in tool with a full web interface and basic functionality for remote server management. Included with Dell PowerEdge servers in various 100-500 series form factors.Available out of the boxNo
iDRAC 9 Express: Inherits the full functionality of iDRAC 9 Basic and extends the functionality of remote server management and Dell Lifecycle Controller. Included in the base Dell PowerEdge servers of various form factors in the 600 series and above.Paid upgradeAvailable out of the box
iDRAC 9 Enterprise: Inherits the full functionality of iDRAC 9 Express and extends remote management and presence technologies. Introduces enterprise-class features for managing servers and IT infrastructures.Paid upgradePaid upgrade
iDRAC 9 Datacenter: All iDRAC 9 Enterprise features + advanced management (power, cooling) and hardware monitoring. Suitable for large IT infrastructures, data centers and enterprise-class companies.Paid upgradePaid upgrade

The iDRAC distribution model is a perpetual license for 1 server. The purchase is one-time, the license can be bought at Dell Digital Locker (a single place to buy and manage software) or through partners.

Features and capabilities of all iDRAC 9 licenses

It should be recalled that advanced licenses include all the functionality of the simpler versions. All features and capabilities of iDRAC 9 licenses will be in the table below, with new functionality (relative to version 8) in bold.

iDRAC 9 BasicUser Interfaces: HTML5 Web GUI, Redfish, WS-Man, IPMI 2.0, DCMI 1.5, RACADM, SMASH-CLP, Telnet, SSH, Serial Forwarding.Connectivity: Shared LOM, Dedicated NIC, VLAN, IPv4/6, DHCP, Static IP address, Dynamic DNS, iDRAC Direct (USB port), Connection Presentation, NFS v4, NTLMv1/2.Security: Silicon root of trust in iDRAC and boot, signed firmware updates, RBAC, local users, SSL/TLS encryption, FIPS, UEFI certificates, default security password (random), customizable security banner for login.Remote Presence: Power management, boot management, Serial over Local Area Network (SOL).Power and Temperature: Real-time power meter, temperature monitoring, customizable air outlet temperature.Status Monitoring: Full agentless monitoring, failure prediction (including triggering Smart alerts), SNMPv1/2/3, fans, power supplies, memory, CPU, RAID, NIC, direct-attached storage shelves, SSD wear levels.Firmware Upgrade: Remote agentless upgrade, built-in upgrade tools (F10/iDRAC GUI).Deployment: Local configuration via F10 LC GUI, remote OS deployment, BIOS and RAID configuration pages, remote server configuration, server configuration profile (SCP) import/export, OS driver package, system inventory, system data deletion for server repurposing or decommissioning.Diagnostics, Maintenance and Logging: SEL and Lifecycle Controller logs, diagnostic tools, server configuration recovery, simple recovery from motherboard replacement, uptime status indicators, front panel LCD (optional), iDRAC Direct service port, remote and local iDRAC reset, virtual NMI, OS watchdog, SupportAssist collection report, SupportAssist direct registration, work notes, license management.GUI enhancements: New search field for easier navigation, job queue overview, collapsed accordion style for faster page loading, SupportAssist collection view in GUI.
iDRAC 9 ExpressNTPAutomatic SKU number detectionPKI authenticationIP address range filtering (up to 5)Password length (up to 40 characters)Energy consumption thresholds and alertsReal-time energy consumption graphingHistorical energy consumption metersTemperature graphingEmail alertsParts ReplacementRemote OS DeploymentEmergency Shutdown Screen Image
iDRAC 9 EnterpriseZero Touch/automatic customizationAutomatic update/synchronization with repositoryMAC Address Reporting Service (MARS)Connectivity Presentation: With 13th generation servers, added LLDP transfer feature for automatic discovery using L2 switchesDirectory Services (AD/LDAP)Two-Factor Authentication (2FA)Single Sign-On (SSO)System Lockdown ModeSimple multi-factor authenticationVirtual media and foldersRemote file shareVirtual console with HTML5 or VNCQuality/Bandwidth ControlCollaboration (up to 6 users)Virtual Console ChatGroup Manager Supports 250 nodesPerformance monitoring via optional channelRemote system log for alertsPower limitation and OMPC integrationCrash screen video (agentless for Windows Server OS)Boot image
iDRAC 9 DatacenterDetailed analysis and monitoringTelemetry streaming - streaming over Redfish SSE, Redfish subscription or RsyslogSequential Forwarding Log in ConsoleSMART logs for storage disksGUI inventory and monitoringSFP+ optical cable I/O inventory and monitoringIdle Server DetectionEnhanced securityAutomatic SSL certificate renewal (SCEP)Temperature control featuresPCIe airflow customization (LFM)Customizable air outlet controlCustomizable Delta-T controlSystem airflow rateCustomizable PCIe inlet temperatureVirtual clipboard for cut and paste operations in HTML5 remote console

Versions of iDRAC technology by year

Originally, iDRAC was not a default integrated card or chip. Therefore, the first versions did not have an "i" in the name. The first version of iDRAC was iDRAC 5, which appeared in Gen 9 servers in 2006.

And DRAC looked like this:

Dell DRAC 4 P, photo

Dell DRAC 4/P.

Since DRAC technology was based on the IPMI 1.0 standard (1998), there was no first version. DRAC 2 (but de facto the first version of DRAC) came out immediately in 1999.

Год19992002200520062008201220142017
iDRAC versionDRAC 2 DRAC 3DRAC 4DRAC 5iDRAC 6iDRAC 7iDRAC 8 iDRAC 9
Server GenerationGen 6 (e.g., Dell PowerEdge 4400)Gen 7 (e.g., Dell PowerEdge 1650)Gen 8   Gen 9, Gen 10Gen 11   Gen 12Gen 13Gen 14, 15, 16

How to set up iDRAC 9: step-by-step instructions

iDRAC 9, DellEmc initializing firmware interfaces, photo

Configuring iDRAC is the first step you should take after deploying a server to your infrastructure. Even if you have the server on hand and do not intend to use remote management.

Why?

For example, to identify and (or) fix the problem remotely - without the technician traveling to the location.

And let us remind you, customization takes about 5-10 minutes.

There are several ways to customize:

  1. iDRAC Parameter Utility;
  2. Lifecycle Controller;
  3. Dell Deployment Toolkit;
  4. Server LCD panel (optional);
  5. C Using the CMC (Chassis Management Controller) web interface - for blades only. IMPORTANT! On blades, the iDRAC IP address can be configured via the chassis display, but only when initially configuring the CMC.

To keep things simple, we suggest following Dell's recommendation to use the easiest and most versatile method - configuring through the iDRAC parameter utility. Let's get started.

Configuring iDRAC 9

1. Plug the Ethernet cable into the dedicated or co-located iDRAC RJ-45 port. Turn on the server via the button. As soon as POST (Power-On Self-Test) starts, press F2.

iDRAC 9, POST (Power-On Self-Test), screen loader

2. You will be taken to System Setup Main Menu, where you need to go to iDRAC Settings.

System Setup Main Menu, idrac settings enter, screenshot

3. Next on Network.

idrac settings, screenshot

4. Start configuring the network settings:

iDRAC NIC selection, configuration the network settings, screenshot
  • In the Enable NIC item set the Enabled parameter;
  • Next, in the NIC Selection item you need to select a port for iDRAC:

Dedicated — dedicated port. The interface will be used only for iDRAC needs and will not be available to the host. IMPORTANT! If you have a blade server, the item will be called "Chassis (Dedicated)";

LOM1;

LOM2;

LOM3 or 4 (if any, depends on the server model and NIC).

  • Go to Failover Network and select the backup LOM port. If the primary port or network fails, control will be transferred to the failover channel. Note that Failover Network is not available with Dedicated port.
  • Auto Negotiation* is optional. If you put "On", iDRAC will be able to automatically set optimal network connection parameters: enter duplex mode and adjust speed. Works with Dedicated port. *Automatic negotiation works by sending a series of messages between the two devices to determine the highest level of capability they share.
  • Next, you set the desired connection speed. In Network Speed, you can select 10 Mbps or 100 Mbps. Keep in mind that 1 Gbps is only available with Auto Negotiation enabled.
  • If you have enabled Auto Negotiation, you need to select "Half Duplex" or "Full Duplex". Full Duplex is preferred for most modern networks, especially for networks with large data volumes and high speed and reliability requirements. But the choice between "Half Duplex" and "Full Duplex" should be based on the specific needs and capabilities of the network and devices to be used.

5. In the COMMON SETTINGS item you can register iDRAC in DNS (if there is a DNS server) to get advanced functionality: Active Directory or LDAP, Single Sign On and smart card.

  • To do this, set "Enable" in the Register DRAC on DNS item;
  • Next, enter a name in the DNS DRAC Name line;
  • Or select Auto Config Domain Name to automatically configure the domain name from DHCP.

6. Configuring IPv4 for iDRAC:

iDRAC network settings, IPV4 Settings, screenshot
  • Set "Enable" in the Enable IPv4 item;
  • To automatically configure IP address, gateway and subnet mask, set "Enabled" in Enable DHCP;
  • If manual configuration is required, set "Disabled" in Enable DHCP and fill in all fields.

7. Configure IPv6 for iDRAC as an alternative:

  • Set "Enable" in Enable IPv6 item;
  • To have the DHCPv6 server automatically assign IP address, gateway and subnet mask, set "Enabled" under Enable Auto-configuration;

NOTE! Static IP address and DHCP IP address can be configured at the same time.

In the Static IP Address 1 field, enter the static IPv6 address;

In the Static Prefix Length field, enter a value from 0 to 128;

In the Static Gateway field, enter the gateway address;

!NOTE: If you have configured a static IP, the current IP Address 1 displays a static IP and IP Address 2 displays a dynamic IP. If you remove the static IP settings, the current IP address 1 displays a dynamic IP.

  • If you are using DHCP, enable DHCPv6 to obtain DNS server addresses to obtain primary and secondary DNS server addresses from the DHCPv6 server. If necessary, configure the following:

Under Static Preferred DNS Server, enter the IPv6 address of the static DNS server.

Under Static Alternate DNS Server, enter the static alternate DNS server address.

8. Press Backspace or Esc;

9. Press Finish and confirm saving the changes in the pop-up window.

iDRAC save changes, pop-up window

10. If everything is done correctly, the initial setup of iDRAC is now complete.

iDRAC save changes, the initial setup of iDRAC is completed, screenshot

11. you can now connect to the server via iDRAC from any supported browser.

!IMPORTANT: All new Dell servers come with a secure password. You can find it out by pulling the Service Tag label from the front of the server. Look for the "iDRAC Default Password" box.

Dell server, the Service Tag, iDRAC Default Password, photo

!NOTE: older server models had a default login and password of "root" and "calvin" respectively (and a secure password was an option). If you do not have a password on your Service Tag, the default ones should be changed after the first login to iDRAC.

First login to iDRAC 9, standard login and password

To log in to iDRAC, you need to enter the IP address of your iDRAC in a browser or use a command line (SSH, RACADM). Of course, if the server is configured for a local network, the device must be on it.

After entering the IP address you will get to the authorization page. Enter login "root" and secure password with Service Tag or "root" and standard password "calvin" (for older models).

iDRAC9 login page, Integrated Dell Remote Access Controller 9, screenshot

If you have a secure password, you will get this error when you enter your default password.

Dashboard iDRAC 9, default password error, screenshot

Dashboard iDRAC 9.

To summarize iDRAC in a nutshell

iDRAC 9 is a remote management solution for Dell PowerEdge servers that allows administrators to monitor, manage and troubleshoot servers from anywhere in the world. It is found in almost all servers by default with basic functionality.

iDRAC 9 provides a web-based user interface as well as a command line interface for server management.

With iDRAC 9, administrators can view system information, monitor hardware status, update firmware, and configure network settings remotely.

iDRAC 9 includes advanced security features such as SSL encryption, two-factor authentication and a secure boot process to protect servers from unauthorized access.

iDRAC 9 also supports virtual media, allowing administrators to mount media such as ISO images and install operating systems remotely.

iDRAC 9 supports IPv4 and IPv6 networking protocols, providing flexibility and future-proofing for modernizing network infrastructure.

Overall, iDRAC 9 is a powerful and flexible remote management solution that simplifies server administration and reduces downtime, making it a valuable tool for IT administrators in enterprise-level environments.

Subscribe to our newsletter to get articles and news