Prerequisites to update firmware on the localhost

About this task

Before starting a firmware update on the localhost, ensure that the following requirements are met:

Procedure

  1. Verify that you have infrastructure administrator or server administrator privileges.
  2. Verify that you have installed and running Smart Update Manager (SUM) on the server.
  3. Ensure a supported Service pack for HPE ProLiant (SPP) is uploaded to SUM.
  4. Install the CHIF driver on HPE ProLiant Gen10, Gen10 Plus, and Gen11 servers to enable in-band communication with HPE iLO.
  5. Verify that a supported local iLO is detected and that the localhost server is available on the Servers page.

    Localhost discovery behavior

    When the SUM service starts, it automatically checks for an iLO on the localhost and does the following:

    • If no local iLO is detected, no localhost entry is created.
    • If a supported local iLO is detected and the security state is Production (Standard), a localhost server entry is automatically added to the Servers page.
    • If a supported local iLO is detected and the security state is High Security, FIPS, or CNSA mode. The localhost entry is created, but onboarding remains pending until valid iLO credentials are provided.
    • If the localhost server is managed by Compute Ops Management or HPE OneView, SUM does not create a localhost entry.
    1. Optional. To onboard servers that are configured in High Security, FIPS, or CNSA mode, do the following:
      1. For HPE ProLiant Gen12 servers with iLO 7, firmware updates are not supported when CNSA security mode is enabled. Switch the security mode to FIPS or Production (Standard).
      2. In SUM, ppen the Activity page and locate the message requesting iLO credentials for the localhost server.
      3. Submit valid SUM login credentials using the REST API:
        POST: 
      /compute-ops-mgmt/v1beta1/auth/login
 
Authorization:
Headers: username/password

        The response returns the access token.

      4. Submit valid iLO administrator credentials using the REST API:
        POST /compute-ops-mgmt/v1/discovered-servers/actions/onboard
Authorization: Bearer <access_token>
{
  "ilo": [
    {
      "host": "localhost",
      "username": "<ilo_username>",
      "password": "<ilo_password>"
    }
  ]
}
      5. Verify that the request is accepted.
        • The service returns HTTP 202 Accepted.
        • The response includes a Job ID that can be used to monitor the onboarding progress.
        TIP
        A certificate fingerprint is not required when onboarding the localhost server.

    After the onboarding job completes successfully, the localhost server is available on the Servers page and is ready for firmware updates.

  6. If you plan to enable HPE Drivers and Software, ensure Agentless Management Service (AMS) and Integrated Smart Update Tools (iSUT) are installed and running.