How to access Advantech BMC web interface for new created BMC users through IPMItool utility?

Purpose:

This article targets to Advantech BMC Web Interface called Node explorer.  And show you how to create Web Accessible user through CLI

Advanced Platform Management allows you to access the system’s console while the host OS is absent, i.e. during BIOS execution and booting. In addition, it provides access to the OS console when no OS Ethernet interfaces are up or the OS does not provide remote login through SSH or Telnet.

Pre-requirement & reference:

How to approach BMC on Advantech CIoT platforms

How to set BMC IP address

How to setup BMC IP address via BIOS

How to create new BMC user on Advantech Server Products

* Advantech’s IANA Enterprise Number used for OEM commands is 002839h

* IANA = Internet Assigned Number Authority 

Target Audience:

All users who are using Advantech ESG platforms, including FWA, SKY-7K, SKY-8K, SKY-9K Series. 

Use Cases:

By default, the web access function is enabled for the first Administrator user. For other BMC users,  manual activation of the web access feature with "Administrator" privileges is required.

Prerequisites:

1.  Approach BMC from external (NS-SI) is required. 

2. Make sure you are able to access Node explorer with "administrator" privilege

Procedures:

1. Create New User and enable it accordingly, typically perform by Administrator user

#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> user set name <id> <name>
#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> user set password <id> <password>
#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> user enable <id>

e.g.
#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> user set name 10 testing
#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> user set password 10 12345
#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> user enable 10

2. Set channel access privilege for this new created user, from above example, we had a new added user on ID 10.

#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> channel access 0 
#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> channel getaccess 0 10
#ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> channel setaccess 0 10 [callin=on|off] [ipmi=on|off] [link=on|off] [privilege=level]

3. Set access permission of Web interface for this new created user

# ipmitool raw 0x2e 0x08 0x39 0x28 0x00 <user ID> 0x02 1

e.g. KCS # ipmitool raw 0x2e 0x08 0x39 0x28 0x00 10 0x02 1

e.g. IOL #ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> raw 0x2e 0x08 0x39 0x28 0x00 10 0x02 1

4. Check user list

# ipmitool -I lanplus -H <BMC IP> -U administrator -P <BMC Password> user list

ID Name Callin Link Auth IPMI Msg Channel Priv Limit
1 false false false NO ACCESS
2 callback false true true CALLBACK
3 user false true true USER
4 operator false true true OPERATOR
5 administrator false true true ADMINISTRATOR
6 true false false NO ACCESS
7 true false false NO ACCESS
8 true false false NO ACCESS
9 true false false NO ACCESS
10 testing true true true ADMINISTRATOR
11 true false false NO ACCESS
12 true false false NO ACCESS
13 true false false NO ACCESS
14 true false false NO ACCESS
15 true false false NO ACCESS

5. Click Save and the Web access setting for this new added BMC user is completed.

Node Explorer Application Portal:

• Explore all Node Explorer features.
• Create an new user for it.
• Mount an installation image via HTTPS.
• Mount an installation image via SMB.
• Tips for accelerating installation via virtual media.
• Mount an bootable image and copy to a disk.
• Enable/Disable specific system alert buzzer.
• Upgrade system firmware.

--- End ---