Highlighted
hstone4
1 Nickel

Using Dell OME to check for firmware updates

I was looking for a way to check for any available firmware updates for my servers without rebooting into the lifecycle controller and came across OME.  I have a lab setup so I can make sure I have everything working and know how to properly use it before I deploy it in production.  The lab setup is as follows:

 

PowerEdge 1950 with iDRAC5

PowerEdge R515 with iDRAC6

The 1950 and R515 have ESXi 6.5 installed.  The 1950 is running a Server 2012 VM acting as a domain controller and DNS server.  The R515 has no guests.  Both iDRACs and ESXi hosts have their DNS set to the Server 2012 DNS server and have hostnames assigned, as well as static DNS records.  I have OME installed on the Server 2012 guest.  Both ESXi hosts have the OMSA VIB for ESXi 6.x.

 

After configuring the discovery ranges, it can see the ESXi hosts but it won't see the iDRACs and, as a result, won't show the list of current firmware versions and available firmware versions.  For the ESXi hosts, I have it setup to use WS-MAN and SNMP, and for the iDRACs I have it setup to use WS-MAN for out-of-band.  Am I doing something wrong or missing a step?  Is there maybe an easier way to get this information?

0 Kudos
11 Replies
Moderator
Moderator

Re: Using Dell OME to check for firmware updates

Hi,

Is the iDRAC firmware up to date and are you using TLS1.1 or 1.2? Did you follow the instructions on page 62 http://topics-cdn.dell.com/pdf/openmanage-essentials-v24_users-guide_en-us.pdf

Thanks,
Josh Craig
Dell EMC Enterprise Support Services
Get support on Twitter @DellCaresPRO
hstone4
1 Nickel

Re: Using Dell OME to check for firmware updates

Thanks, I will check this.  I'm not sure if it's 1.1 or 1.2 but I will check that as well.

0 Kudos
hstone4
1 Nickel

Re: Using Dell OME to check for firmware updates

Firmware is currently 1.70, I'm updating to 1.98 now.  I was also missing support for TLS 1.1 and 1.2, I'm fixing that now.  I will try discovery again after this and let you know how it goes.

0 Kudos
hstone4
1 Nickel

Re: Using Dell OME to check for firmware updates

Is a self-signed cert required for WS-MAN discovery?

0 Kudos

Re: Using Dell OME to check for firmware updates

It is not required. By default OME will ignore certificate checks.

Thanks,
Shivendra

0 Kudos
hstone4
1 Nickel

Re: Using Dell OME to check for firmware updates

Discovery still not working after updating iDRAC and installing the TLS1.1/1.2 update.  It sees an unknown object at the IP address I have set for the iDRAC but does not recognize it as an iDRAC and cannot see firmware versions or attempt a firmware update.

0 Kudos

Re: Using Dell OME to check for firmware updates

Possible to run Troubleshooting tool WSMAN test on this IP and share back the results (mask sensitive data)?

Thanks,
Shivendra

0 Kudos
hstone4
1 Nickel

Re: Using Dell OME to check for firmware updates

I ran the WSMAN test on my iDRAC and got these results:

 

Time: 11-05-2018 10:13:30 AM Device: 192.168.100.14

Protocols Selected are:
WSMAN
WSMAN
Error Using TLS 1.0 for SSL/TLS handshake.
UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

TLS 1.0 Handshake successful.

Identify Failed. Could not connect

0 Kudos
hstone4
1 Nickel

Re: Using Dell OME to check for firmware updates

I ran the test again while checking the "Skip CA Check" and got these results:

Time: 11-05-2018 10:15:07 AM Device: 192.168.100.14

Protocols Selected are:
WSMAN
WSMAN
WSMAN Using TLS 1.0 for SSL/TLS handshake.
TLS 1.0 Handshake successful.
Connected. Could not collect WSMAN profile data.
Top

0 Kudos