Firewall issue

Hi Cameron,

Since you have moved the OME server, the first thing to note would be check if the port 1278 is open.

If yes and you are still facing this problme then there are some steps which you can try, that is what OME also does:

This command checks for iDRAC and server accessibility, by running this sequence below we can determine if the iDRAC cannot access the server.

Here are the steps to be executed on the target:

• Pick one of the targets you are trying to update through OME where the task fails and the package which you are trying to deploy.
• Make sure the package is present in the following location which is (OME installed location) viz Dell\SysMgt\Essentials\SystemUpdate\Packages
• Run the following commad against the iDRAC to obtain the instanceID of the component you are trying to update.

The INSTANCE IDs have been highlighted

C:\Users\Administrator>winrm e http://schemas.dmtf.org/wbem/wscim/1/cim-schema/2/root/dcim/DCIM_SoftwareIdentity -u:"username" -p:"password" -r:https:// /wsman -SkipCNcheck -SkipCAcheck -encoding:utf-8 -a:basic

The output will look something like this:

DCIM_SoftwareIdentity

    BuildNumber = 10

    Classifications = 10

    ComponentID = 25227

    ComponentType = FRMW

    DeviceID = null

    ElementName = Integrated Dell Remote Access Controller

    FQDD = iDRAC.Embedded.1-1

    IdentityInfoType = OrgID:ComponentType:ComponentID

    IdentityInfoValue = DCIM:firmware:25227

    InstallationDate = NA

    InstanceID = DCIM:PREVIOUS#iDRAC.Embedded.1-1#IDRACinfo

    IsEntity = true

    MajorVersion = 1

    MinorVersion = 50

    RevisionNumber = 50

    RevisionString = null

    Status = Available

    SubDeviceID = null

    SubVendorID = null

    Updateable = true

    VendorID = null

    VersionString = 1.50.10.50

    impactsTPMmeasurements = false

 

DCIM_SoftwareIdentity

    BuildNumber = 50

    Classifications = 10

    ComponentID = 25227

    ComponentType = FRMW

    DeviceID = null

    ElementName = Integrated Dell Remote Access Controller

    FQDD = iDRAC.Embedded.1-1

    IdentityInfoType = OrgID:ComponentType:ComponentID

    IdentityInfoValue = DCIM:firmware:25227

    InstallationDate = 2013-06-10T13:53:19Z

    InstanceID = DCIM:INSTALLED#iDRAC.Embedded.1-1#IDRACinfo

    IsEntity = true

    MajorVersion = 1

    MinorVersion = 50

    RevisionNumber = 0

    RevisionString = null

    Status = Installed

    SubDeviceID = null

    SubVendorID = null

    Updateable = true

    VendorID = null

    VersionString = 1.50.50

    impactsTPMmeasurements = false

 

DCIM_SoftwareIdentity

    BuildNumber = 3

    Classifications = 11

    ComponentID = 159

    ComponentType = BIOS

    DeviceID = null

    ElementName = BIOS

    FQDD = BIOS.Setup.1-1

    IdentityInfoType = OrgID:ComponentType:ComponentID

    IdentityInfoValue = DCIM:BIOS:159

    InstallationDate = 2013-07-28T03:05:17Z

    InstanceID = DCIM:INSTALLED#741__BIOS.Setup.1-1

    IsEntity = true

    MajorVersion = 99

    MinorVersion = 2

    RevisionNumber = 0

    RevisionString = null

    Status = Installed

    SubDeviceID = null

    SubVendorID = null

    Updateable = true

    VendorID = null

    VersionString = 99.2.3

    impactsTPMmeasurements = true

 

DCIM_SoftwareIdentity

    BuildNumber = 0

    Classifications = 10

    ComponentID = 28897

    ComponentType = APAC

    DeviceID = null

    ElementName = Lifecycle Controller, 1.3.0.712, X29

    FQDD = USC.Embedded.1:LC.Embedded.1

    IdentityInfoType = OrgID:ComponentType:ComponentID

    IdentityInfoValue = DCIM:firmware:28897

    InstallationDate = 2013-07-25T07:17:55Z

    InstanceID = DCIM:INSTALLED#802__USC.Embedded.1:LC.Embedded.1

    IsEntity = true

    MajorVersion = 1

    MinorVersion = 3

    RevisionNumber = 712

    RevisionString = null

    Status = Installed

    SubDeviceID = null

    SubVendorID = null

    Updateable = true

    VendorID = null

    VersionString = 1.3.0.712

    impactsTPMmeasurements = false

 

DCIM_SoftwareIdentity

    BuildNumber = null

    Classifications = 10

    ComponentID = 25806

    ComponentType = APAC

    DeviceID = null

    ElementName = Diagnostics

    FQDD = Diagnostics.Embedded.1:LC.Embedded.1

    IdentityInfoType = OrgID:ComponentType:ComponentID

    IdentityInfoValue = DCIM:firmware:25806

    InstallationDate = 2013-06-10T13:53:24Z

    InstanceID = DCIM:INSTALLED#802__Diagnostics.Embedded.1:LC.Embedded.1

    IsEntity = true

    MajorVersion = null

    MinorVersion = null

    RevisionNumber = null

    RevisionString = null

    Status = Installed

    SubDeviceID = null

    SubVendorID = null

    Updateable = true

    VendorID = null

    VersionString = 0

    impactsTPMmeasurements = false

 

DCIM_SoftwareIdentity

    BuildNumber = null

    Classifications = 10

    ComponentID = 18981

    ComponentType = APAC

    DeviceID = null

    ElementName = OS Drivers Pack

    FQDD = DriverPack.Embedded.1:LC.Embedded.1

    IdentityInfoType = OrgID:ComponentType:ComponentID

    IdentityInfoValue = DCIM:firmware:18981

    InstallationDate = 2013-06-10T13:53:24Z

    InstanceID = DCIM:INSTALLED#802__DriverPack.Embedded.1:LC.Embedded.1

    IsEntity = true

    MajorVersion = null

    MinorVersion = null

    RevisionNumber = null

    RevisionString = null

    Status = Installed

    SubDeviceID = null

    SubVendorID = null

    Updateable = true

    VendorID = null

    VersionString = 0

    impactsTPMmeasurements = false

 

DCIM_SoftwareIdentity

    BuildNumber = 5

    Classifications = 10

    ComponentID = 28125

    ComponentType = FRMW

    DeviceID = null

    ElementName = System CPLD

    FQDD = CPLD.Embedded.1

    IdentityInfoType = OrgID:ComponentType:ComponentID

    IdentityInfoValue = DCIM:firmware:28125

    InstallationDate = 2013-07-25T06:37:41Z

    InstanceID = DCIM:INSTALLED#803__CPLD.Embedded.1

    IsEntity = true

    MajorVersion = 0

    MinorVersion = 1

    RevisionNumber = 0

    RevisionString = null

    Status = Installed

    SubDeviceID = null

    SubVendorID = null

    Updateable = true

    VendorID = null

    VersionString = 0.1.5

    impactsTPMmeasurements = false

Then you need to create a file called UpdateInputBios.xml and paste the content. Copy the XML file in the OME-SERVER-IP-ADDRESS and the PACKAGE NAME. Also replace the instanceID with the instanceID you obtained from running the above command. Put this content into text file and save it as UpdateInputBios.xml

Run this command from the location where you saved the XML file. Make sure to change the parameter TARGET-IP-ADDRESS with the IP-ADDRESS of your target.

winrm invoke InstallFromURI cimv2/root/dcim/DCIM_SoftwareInstallationService?CreationClassName=DCIM_SoftwareInstallationService+SystemCreationClassName=DCIM_ComputerSystem+SystemName=IDRAC:ID+Name=SoftwareUpdate -file:UpdateInputBios.xml -u:username -p:password -r:https://TARGET-IP-ADDRESS/wsman:443 -SkipCNCheck -SkipCACheck -auth:basic -encoding:utf-8

Let us know if this helps.

Hi Pupul,

�

Thanks for your instructions.

�

From further troubleshooting I have found that updates run if I disable the windows firewall :(

Shouldn't the OME installer have configured the firewall?

Discovery and inventory are working so what should I check or modify in the firewall to allow firmware updates to be performed by OME?

Hi Cameron,

The OME installer does not update the windows firewall. There are certain ports requirement which need to be made open for OME to interact with other devices for various functions which is mentioned in the User guide.