Post on 11-Mar-2020
1
Tom Slaight
Principal Server Management Architect
Intel Corporation
February 18, 2004
Advances in Intelligent Platform
Management: Introducing the
New IPMI v2.0 Specifications
2
Special Guests!
Phil Chidester
Manageability Architect
Server Management Firmware Group
Dell Computer
Steve Lyle
Manageability Architect
Hardware Systems Technology Division
Hewlett-Packard Company
Itanium and Xeon are trademarks or registered trademarks of Intel
Corporation or its subsidiaries in the United States or other countries.
3
Agenda
� IPMI Architecture and Initiative Update
� What’s New in IPMI v2.0?
� IPMI v2.0 Technology: How it meets platform management needs
� IPMI in Action
� IPMI Futures
4
IPMI
IntelligentPlatformManagementInterface
•• Defines a standardized, Defines a standardized,
abstracted, messageabstracted, message--based based
interface to intelligent platform interface to intelligent platform
management hardwaremanagement hardware
•• Defines standardized records for Defines standardized records for
describing platform management describing platform management
devices and their characteristicsdevices and their characteristics
IPMI Enables CrossIPMI Enables Cross--Platform Platform
Management SoftwareManagement Software
Promoters:
Adopters: 162 and growing
IPMI Architecture and Initiative Update
5
Initiative News
IPMI v2.0 Specifications
Updated v1.5 Errata, 32-and 64-bit Drivers,
& IPMI Conformance Test Suite
IPMI v2.0 Specifications
IPMI v2.0 Specifications
Updated v1.5 Errata, 32
Updated v1.5 Errata, 32--and 64
and 64--bit Drivers,
bit Drivers,
& IPMI Conformance Test Suite
& IPMI Conformance Test Suite
developer.intel.com/design/servers/ipmideveloper.intel.com/design/servers/ipmideveloper.intel.com/design/servers/ipmi
IPMI Architecture and Initiative Update
6
New Adopter’s Agreement
� IPMI v2.0 Second Generation Specification is under RAND
(Reasonable And Non-Discriminatory) licensing model
– Aligns with Industry standards licensing models (e.g. DMTF*,
PICMG*, Infiniband*, etc.)
� All companies (including existing IPMI 1.5 adopters) will need
to sign new IPMI v2.0 adopters agreement to implement IPMI
v2.0 spec
– Existing IPMI 1.5 adopters can continue to implement IPMI v1.5 under
old licensing terms, but to new IPMI v2.0 agreement required to
implement new IPMI v2.0 features
� New IPMI v2.0 Adopters license available on IPMI web site for
your review
Sign Up as IPMI 2.0 Adopter Today!Sign Up as IPMI 2.0 Adopter Today!
IPMI Architecture and Initiative Update
7
IPMI v2.0 Architecture
Baseboard System Bus
BridgeBridgeControllerController
ICMB
Aux. IPMB
RemoteMgmt. Card
SMBus/PCI Mgmt. BusBaseboardBaseboardMgmt.Mgmt.
ControllerController(BMC)(BMC)I2C/SMBus
SDR, SDR, SEL, SEL, FRUFRU
NV StoreMgmtMgmt
NetwkNetwk
CtrlrCtrlr
LAN
PCI
RS-232
MODEM
/ Serial
IPMB (I2C)
ChassisChassis
sensors& controlcircuitry
FRU SEEPROMFRU SEEPROM
SatelliteSatelliteMgmt.Mgmt.
ControllerController“side-
band”
System InterfaceSystem Interface
SENSORs
& control
circuitry
I2C / SMBus
IPMI Architecture and Initiative Update
IPMI Messages
8
LANLAN
chassischassis
IPMI in modular architecture
Typical Modular Application
computenode Acomputenode A
BMCBMC
computenode Bcomputenode B
i/o nodei/o node
SatelliteSatellite
ControllerController
mgmtmodulemgmtmodule
SatelliteSatelliteControllerController PS PSFAN
temp
FAN
Sys I/F Sys I/F
BP I/FBP I/F
Mgmt.Mgmt.ModuleModule
ProcessorProcessor
Backplane Mgmt Interconnect
BMCBMC
IPMI Messages
Remote MgmtConsoleSystem
BP I/FBP I/FBP I/FBP I/F
CIM
to
IPMI
9
Where it fits…
Service ProviderService Provider
Instrumentation ProviderInstrumentation Provider
Baseboard Mgmt. Controller Baseboard Mgmt. Controller
and monitoring h/wand monitoring h/w
Management ApplicationsManagement Applications
IPMI H/W I/FIPMI H/W I/F
IPMI
IPMI I/F CodeIPMI I/F Code
Management S/W
Standards, e.g. CIM
Service ProviderService Provider
ProxyProxy
InstrumentationInstrumentation
ProviderProvider
IPMI I/F CodeIPMI I/F CodeOOB I/F
OOB I/F Out-Of-Band
IPMI
Messages
Network, Serial, Modem,
Inter-Chassis Mgmt Bus
In-Band
IPMI Architecture and Initiative Update
IPMI helps reduce TTM and development costfor cross-platform management
IPMI helps reduce TTM and development costIPMI helps reduce TTM and development costfor crossfor cross--platform managementplatform management
10
Agenda
� IPMI Architecture and Initiative Update
� What’s New in IPMI v2.0?
� IPMI v2.0 Technology: How it meets platform management needs
� IPMI in Action
� IPMI Futures
11
Platform Directions for IPMI� Integrated ‘Serial over LAN’management
� Low Cost Systems– “Baseline” BMCs
� Group Managed Systems– ICMB and LAN-managed systems
� Modular Systems–General purpose andService Availability Forum“AdvancedTCA” blade systems
IPMI enables competitiveIPMI enables competitivefeatures across server classesfeatures across server classes
What’s New in IPMI v2.0
12
IPMI v2.0 Additions
� Serial Over LAN (SOL)– Redirects local serial interface over an IPMI Session
– Works with serial-based OS ‘command line’ interfaces
� LAN Session Enhancements– New user login and security configuration options enable tailoring security and performance to match the needs of the site
– “Payloads” capability enables multiple types of management traffic (e.g. IPMI and SOL) over a single LAN session
� Enhanced Authentication– Stronger key exchange uses two-way challenge/response
– Aligns with DMTF ASF 2.0* session establishment
� Packet Data Encryption– Enables remote operations such as user password configuration
� VLAN Support– Facilitates setting up ‘management-only’ networks
* Other names and brands may be claimed as the property of others
IPMI v2.0 Technology
13
IPMI v2.0 Additions
� Low-cost BMC Support
– SMBus System Interface (SSIF) provides low-pin count system interface for low-cost (low pin-count) BMCs
� Modular Extensions
– Node replacement, Redundant Management Bus monitoring, “Firmware Firewall” tailor IPMI to better support blade implementations
� Enhanced OEM value-added feature support
– Support for OEM Security Algorithms and Payload options (e.g. KVM) on IPMI infrastructure
IPMI v2.0 Technology
14
Agenda
� IPMI Architecture and Initiative Update
� What’s New in IPMI v2.0?
� IPMI v2.0 Technology: How IPMI v2.0 meets platform management needs
� IPMI in Action
� IPMI Futures
15
IPMI TechnologyNewNew
IPMI v1.5IPMI v1.5
ExtendedExtended
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
FRU, SEL,FRU, SEL,SDRsSDRs
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
LoggingLogging Users &Users &PrivilegesPrivileges
AuthenticationAuthentication IntegrityIntegrity
Users &Users &PrivilegesPrivileges
AuthenticationAuthentication IntegrityIntegrity
FirmwareFirmwareFirewallFirewall
SSIFSSIF
ConfidentialityConfidentiality
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
System InterfacesSystem Interfaces
VLANVLAN
16
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging
FRU, SEL,FRU, SEL,SDRsSDRs
Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,Terminal, PPPTerminal, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
IPMI Technology
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging
FRU, SEL,FRU, SEL,SDRsSDRs
Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
NewNew
IPMI v1.5IPMI v1.5
ExtendedExtended
SSIFSSIF
SSIFSSIF
VLANVLANVLANVLAN
17
SMBus System Interface (SSIF)
� Encapsulates IPMI messages in an SMBus compatible format
–Compatible with common SMBus Host controllers
– IPMI Requests delivered using ‘Block Write’ protocol
– IPMI Responses retrieved using ‘Block Read’protocol
– SMBAlert signal status change/message available
� SMBAlert line notifies host that incoming message / status data is available
– ‘Get Status’ command allows interface status to be polled
IPMI v2.0 Technology
18
SMBus System Interface (SSIF)
Local (System Interface) Discovery
� BIOS tables describe location and type of system interface
–New ACPI “SPMI” (service processor mgmt. interface) Table
–SMBIOS Type 38 Record
� SPMI and Type 38 Tables Applicable to all IPMI System Interfaces
– SMIC, KCS, BT, SSIF
IPMI v2.0 Technology
19
SSIF and Multi-level BMC Options
Acts as ‘Satellite Controller’ to ‘Full’ BMC
Low Cost Options enable IPMILow Cost Options enable IPMIfor all Server classesfor all Server classes
LANLAN8255182551
PCI
SMBus SMBus
LAN
SMBAlert
SystemSystemMonitorMonitor
sensorsensorconnectionsconnections
SouthSouthBridgeBridge
System Bus SMBus
SMBAlert
BaselineBaselineBMCBMC
power, resetpower, reset
FRUFRU
IPMI v2.0 Technology
LPC FullFullBMCBMC
chassischassissensorssensors
RS-232
20
SMBus System Interface (SSIF)
BMC Write / Request(via SMBus Block Write)
– BMC Slave Addr. | Wr– SMBus CMD = 0x02– Length� IPMI NetFn (even) | LUN� IPMI Command� <IPMI Command Data>
IPMI v2.0 Technology
BMC Read / Response(via SMBus Block Read)
– BMC Slave Addr. | Wr.
– SMBus CMD = 0x03
– BMC Slave Address | Rd.
– Length
� IPMI NetFn (odd) | LUN
� IPMI Command
� IPMI Completion Code
� <IPMI Command Data>
IPMI Message Content
Single Part Messages– Used for IPMI Message Content up to 32 bytes(SMBus protocols limited to 32-bytes of data)
WR
RD
WR
21
SMBus System Interface (SSIF)
Multi-part Messages– Used for IPMI Message Content >32 bytes– Block numbers enable retrieving lost or corrupted middle or ‘end’ read data
BMC Multi-part Write / Request(follows single part format for Start, but uses special SMBus CMDs for start and transferring remaining data)– Start: SMBus CMD = 0x06, remainder matches single part format– Middle: SMBus CMD = 0x07, followed by add’l request data– End: SMBus CMD = 0x08, followed by last part of data
BMC Multi-part Read / Response(Starts off with reserved pattern [0x01, 0x00] then uses special SMBus commands to retrieve remaining data)– Start: SMBus CMD = 0x03, followed by [0x01, 0x00] then regular response
data (NetFn | LUN, CMD, etc.)– Middle: SMBus CMD = 0x09, First byte = 00b followed by add’l response data– End: SMBus CMD = 0x09, First byte = 01b, followed by last part of data
IPMI v2.0 Technology
22
WatchdogWatchdog PEFPEFLAN & SerialLAN & Serial
AlertingAlertingFRU, SEL,FRU, SEL,SDRsSDRs
IPMI Functional BlocksNewNew
IPMI v1.5IPMI v1.5
ExtendedExtended
FirmwareFirmwareFirewallFirewall
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
SSIFSSIF
VLANVLAN
FirmwareFirmwareFirewallFirewallFirmwareFirmwareFirewallFirewall
FirmwareFirmwareFirewallFirewall
23
Firmware FirewallPartitioning for protection
� Problem:Bus topology enables local mgmt s/w to access other nodes
chassischassis
computenode Acomputenode A
computenode Bcomputenode B
mgmtmodulemgmtmodule
Sys I/F Sys I/F
BP I/F
Backplane Mgmt Bus
BMCBMC
� Solution:“firmware firewall” chassischassis
computenode Acomputenode A
computenode Bcomputenode B
mgmtmodulemgmtmodule
Sys I/F Sys I/F
BP I/F
Backplane Mgmt Bus
BMCBMC
BMCBMC
SatelliteSatellite
ControllerController
BMCBMC
SatelliteSatellite
ControllerController
IPMI v2.0 Technology
24
Firmware Firewall
BP I/FBP I/F
System InterfaceSystem Interface
“side-band” port
SatelliteSatelliteControllerController
BMCBMC
– F/W blocks messaging to
other nodes on shared bus
– Allows messages between
local software and
management module
– Local software may also
be blocked from SDR or
FRU updates that might be
used to generate false
events
– Firmware updates can only
occur from management
bus side
– Access rights can only be
configured from
management bus side
SensorsSensors
FRU, SEL, SDRFRU, SEL, SDR
FLASHFLASH
backplane mgmt. bus
IPMI v2.0 Technology
25
Firmware Firewall
� Configurable Command Discovery commands
–Support discovering which commands and sub-functions can be enabled/disabled
– Two commands: Get Configurable Commands,Get Configurable Command Sub-functions
� Command Configuration commands
–Provide mechanism for enabling/disabling those commands
– Four commands: Set/Get Command Enables,Set/Get Command Sub-function Enables
IPMI v2.0 Technology
26
Firmware Firewall
Command Discovery commands
–Enable software to discover what commands and subfunctions are available on given mgmt. controller
–Discovery commands can be implemented separate from Firmware Firewall enable/disable commands
–Centralize command and sub-function discovery
– Augments IPMI distributed parameter, and ‘try command’discovery
– Command and sub-function support can vary on a PER CHANNEL basis
– Three commands: Get NetFn Support, Get Command Support, Get Command Sub-function Support
IPMI v2.0 Technology
27
WatchdogWatchdog PEFPEFLAN & SerialLAN & Serial
AlertingAlertingFRU, SEL,FRU, SEL,SDRsSDRs
IPMI Functional BlocksNewNew
IPMI v1.5IPMI v1.5
ExtendedExtended
FirmwareFirmwareFirewallFirewall
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
KCSKCS BTBT SMICSMIC SSIFSSIFSSIFSSIF
System InterfacesSystem Interfaces
PayloadsPayloadsPayloadsPayloads
Users &Users &PrivilegesPrivilegesUsers &Users &
PrivilegesPrivileges
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)SOL SOL (Serial(Serial
Over LAN)Over LAN)SOL SOL (Serial(Serial
Over LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
PayloadsPayloads
SOL SOL (Serial(SerialOver LAN)Over LAN)
Users &Users &PrivilegesPrivileges
VLANVLAN
28
Users & Privileges
� Per Channel Multi-level, Multi-User Security– User, Operator, Admin and OEM Privilege levels for IPMI commands
– Per-user configurable enables for payload access (e.g. SOL)
� IPMI v2.0 Login Options– ‘Anonymous’ login: no username or password required
– Can be enabled for a given privilege level. E.g. “User Level”
– Role-based login: password only, no username, for a given privilege level
– E.g. “Admin” login
– Username login: user name and user password required
– ‘Two key’ login: user/role password plus ‘BMC Key’
– Can prevent multiple system access by ‘human engineering’ a single username/password pair.
IPMI v2.0 Technology
Flexible configuration enables security Flexible configuration enables security to be tailored to site needsto be tailored to site needs
29
Payloads
� Payloads enable multiple types of trafficto be carried over a single IPMI session
– payloads can also be launched to a separate session
� Standard and OEM Payload Types supported
– Standard payload types: Support Session Setup, IPMI Messages, “Serial Over LAN”
– OEM payload types: Enable value-added features on IPMI session infrastructure (e.g. KVM)
– Leverages IPMI User configuration and authentication
� Payload support is discoverable
� Payload access enabled on a per-user basis
Session Payloads EnableSession Payloads Enable““11--portport”” ManagementManagement
IPMI v2.0 Technology
30
Payloads
Payloads can be activated under common or separate ports
NetworkNetwork
ControllerController
BMCBMC
PayloadPayload
ProcessorProcessor
LAN
NetworkNetwork
ControllerController
BMCBMC
PayloadPayload
ProcessingProcessing
LAN Port 26Fh
IPMI & Payload Msgs
Port 26Fh
Port XYZ
IPMI Msgs
Payload Msgs
IPMI v2.0 Technology
31
Serial Over LAN
� Defines common format and protocol for seriaredirection under an IPMI Session
–Redirects baseboard “16550” serial controller interface over LAN
– Launched as a standard payload type under IPMI v2.0 Session
� Specification supports multiple serial connections
� Can be combined with IPMI Serial Port Sharing
–Enables single ‘back of the box’ serial connection to be shared for local serial/modem, BMC access, and LAN redirected management
IPMI v2.0 Technology
32
WatchdogWatchdog PEFPEFLAN & SerialLAN & Serial
AlertingAlertingFRU, SEL,FRU, SEL,SDRsSDRs
IPMI Functional BlocksNewNew
IPMI v1.5IPMI v1.5
ExtendedExtended
FirmwareFirmwareFirewallFirewall
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
KCSKCS BTBT SMICSMIC SSIFSSIFSSIFSSIF
System InterfacesSystem Interfaces
Users &Users &PrivilegesPrivileges
PayloadsPayloadsPayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)SOL SOL (Serial(Serial
Over LAN)Over LAN)SOL SOL (Serial(Serial
Over LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
VLANVLANVLANVLAN
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentialityIntegrityIntegrity
VLANVLAN
AuthenticationAuthentication ConfidentialityConfidentiality
ConfidentialityConfidentiality
VLANVLAN
IntegrityIntegrity
AuthenticationAuthentication
33
Authentication, Integrity, and Confidentiality
� Authentication Algorithm: Defines what steps are used for
authenticating a User and establishing a session
– E.g. IPMI v2.0 uses for RAKP (remote access key exchange protocol)
� Integrity Algorithm: Defines algorithm for signing packets after
session has been established.
– E.g. HMAC-SHA1-96
� Confidentiality (encryption) Algorithm: Defines algorithm for
encrypted payload data in a session.
– E.g. AES-128 (Advanced Encryption Standard)
� Combination of Authentication, Integrity, and Encryption
algorithms defines a CipherSuite
� Standard CipherSuites provide algorithm to trade-off between
strength and performance
� OEM CipherSuites also supported
IPMI v2.0 Technology
34
Encrypted and Authenticated Packets
� Authenticated / Unauthenticated and Encrypted / Unencrypted
packets can be mixed in single session
– Improves performance on small micros. Bits in payload type field indicate
whether the payload data is authenticated and /or encrypted
� Remote console can be given option to control when
payload data is encrypted
– Allows console to decide when an operation, e.g. remote password
configuration, requires encryption
– For IPMI messages, an encrypted request gets an encrypted response
– For other payloads, a Suspend/Resume Encryption command is used
� Can configure BMC to require that payload is encrypted.
– Prevents mis-behaved console from exposing sensitive data.
IPMI v2.0 Technology
IPMI v2.0 technology reduces overhead forIPMI v2.0 technology reduces overhead forsecure remote managementsecure remote management
35
VLANIPMI v2.0 Technology
� IPMI v2.0 LAN Packet format extended for “Virtual LAN” routing per IEEE 802.1q
� Works with side-band filtering in enhanced management network controllers
� VLAN support configurable on a per-channel basis
36
WatchdogWatchdog PEFPEFLAN & SerialLAN & Serial
AlertingAlertingFRU, SEL,FRU, SEL,SDRsSDRs
IPMI Functional BlocksNewNew
IPMI v1.5IPMI v1.5
ExtendedExtended
FirmwareFirmwareFirewallFirewall
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
KCSKCS BTBT SMICSMIC SSIFSSIFSSIFSSIF
System InterfacesSystem Interfaces
Users &Users &PrivilegesPrivileges
PayloadsPayloadsPayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)SOL SOL (Serial(Serial
Over LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
IPMI overIPMI overLAN v2.0LAN v2.0
““RMCP+RMCP+”” SessionSession
VLANVLAN
IPMI v2.0IPMI v2.0SessionsSessions
37
SessionsDiscovery and Connection
� Enhanced User Login Options
– New option for ‘Role-only’ logins
– Simplifies use in small installations
– no username to remember, can simply login in as User, Operator, or Admin
� New commands for managed system discovery
– Facilitates automated discovery and access by remote applications
– IPMI version (v1.5 or v2.0) discovery
– Cipher-Suite discovery
– Available Payloads
– Existence of Anonymous and One- or Two-key login
– enables remote console to present appropriate username and password entry options
IPMI v2.0 Technology
38
v2.0 Session Activation
�Discover IPMI support using Get Channel Authentication Capabilities command–Enables discovering IPMI version
–Tells console whether ‘anonymous’ and/or ‘1-key’logins are enabled
–Same command for v1.5 and v2.0
� Issue Get Cipher Suites command
–Pick cipher suite for the maximum privilege level you want to establish the session at
�Activate session for given user…– IPMI v2.0 Uses dual Challenge/Response vs. IPMI v1.5 single
challenge / response
IPMI v2.0 Technology
39
v2.0 Session Activation–Send Open Session RequestGet Open Session Response–Sets session IDs and negotiates a ciphersuite
–Send RAKP 1 MessageGet RAKP 2 Message as Response–Submits username and target privilege level to BMC
–Exchanges random numbers between console and BMC
–Roughly equivalent to the console submitting a challenge to the BMC and the BMC submitting a challenge to the console.
– Issue RAKP 3 Message, Get RAKP 4 Message as Response–BMC and Console exchanged ‘signed’ RAKP 3 and RAKP 4 packets
–Signature based on the random numbers and key data associated with the user
–Session is activated when both parties verify the signed packets.
IPMI v2.0 Technology
40
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
Serial ICMB LAN
IPMI Functional Blocks
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
Serial ICMB LANNewNew
IPMI v1.5IPMI v1.5
ExtendedExtended
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
FRU, SEL,FRU, SEL,SDRsSDRs
Serial PortSerial PortSharingSharing
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
VLANVLAN
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging Users &Users &PrivilegesPrivileges
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
FRU, SEL,FRU, SEL,SDRsSDRs
Serial PortSerial PortSharingSharing
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
VLANVLAN
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging Users &Users &PrivilegesPrivileges
BackwardBackwardCompatibilityCompatibility
41
Backward Compatibility
� Compatible command superset
–Extends but does not replace IPMI v1.5 commands
� Managed systems can be discovered and used
as an IPMI v1.5 system
– Implementation can support both IPMI v2.0 and IPMI
v1.5 connections simultaneously
–Supports connecting using IPMI v1.5 protocols
– IPMI v1.5 LAN packet support retained
� V2.0 packets/protocols required for new LAN
features
– e.g. enhanced auth., encryption, Serial Over LAN
IPMI v2.0 Technology
42
IPMI Session Activation
Get Session Challenge, Get Session Challenge, RsRsOpen Session, Open Session, RsRs
Activate Session, Activate Session, RsRsRAKP Message 2RAKP Message 2
Set Privilege Level, Set Privilege Level, RqRq
Activate Session, Activate Session, RqRqRAKP Message 1RAKP Message 1
Set Privilege Level, Set Privilege Level, RsRs
Close Session, Close Session, RqRq
Get Channel AuthenticationGet Channel AuthenticationCapabilities, Capabilities, RqRq Get Channel AuthenticationGet Channel Authentication
Capabilities, Capabilities, RsRs
RAKP Message 3RAKP Message 3
RAKP Message 4RAKP Message 4
Get Channel Cipher Suites, Get Channel Cipher Suites, RsRs
Get Channel CipherGet Channel CipherSuites, Suites, RqRqD
iscovery
Activation
Active
Activate Payload, Activate Payload, RqRq
Activate Payload, Activate Payload, RsRs
IPMI v1.5IPMI v2.0Common v1.5/2.0
CONSOLE BMC Rq=request, Rs=response
IPMI v2.0 Technology
Get Session Challenge, Get Session Challenge, RqRqOpen Session, Open Session, RqRq
43
Putting It All TogetherNewNew
IPMI v1.5IPMI v1.5
ExtendedExtendedIPMI v2.0 Technology
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging
FRU, SEL,FRU, SEL,SDRsSDRs
Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt BussesLocal Access
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEFLAN & SerialLAN & Serial
AlertingAlerting
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging
FRU, SEL,FRU, SEL,SDRsSDRs
Users &Users &PrivilegesPrivilegesIPMI
Core
SessionInfrastructure AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
VLANVLAN
Serial PortSerial PortSharingSharing
RemoteAccess
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
VLANVLAN
44
Putting It All TogetherNewNew
IPMI v1.5IPMI v1.5
ExtendedExtendedIPMI v2.0 Technology
IPMI v2.0 technology enables secure remote management
IPMI v2.0 technology enables secure IPMI v2.0 technology enables secure remote managementremote management
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging
FRU, SEL,FRU, SEL,SDRsSDRs
Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging
FRU, SEL,FRU, SEL,SDRsSDRs
Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
45
Agenda
� IPMI Architecture and Initiative Update
� What’s New in IPMI v2.0?
� IPMI v2.0 Technology: How IPMI v2.0 meets platform management needs
� IPMI in Action
� IPMI Futures
46
IPMI in HP’s Integrity Servers
� As one of IPMI’s founding companies - HP has a long history of building industry standards around manageability.
� HP’s entire line of Integrity IPF servers use IPMI, from the smallest 2-way server to the largest Superdome.
� HP uses IPMI, along with other manageability standards like WBEM, to build interfaces that promote interoperability between OS’s and platforms.
Integrity rx2600
Integrity rx4640Integrity rx7620
Integrity rx8620Integrity Superdome
IPMI in Action
IPMI is Highly ScalableIPMI is Highly Scalable
47
HP: Enabling customer features � IPMI fits well into the ecosystem of HP's value-added embedded management, covering some of the most basic functionality in a standard way– OS absent server health and server power control
– Storage and retrieval of system event logs
– A standard messaging mechanism for use with HP agents on Windows, HPUX, and Linux
� Upon this foundation, HP builds more features, to further enhance the manageability solution– Independent management LAN with secure (https) web interface or convenient Telnet UI to the management processor
– Embedded web console
– Enhanced event logging and diagnosis
– Unique collaboration and repair features
– Partition management, and more…
IPMI In Action
IPMI Supports Value Added FeaturesIPMI Supports Value Added Features
48
Dell Computer � Dell and IPMI
– Dell a founding IPMI Promoter
– IPMI a core management technology for today’s Dell PowerEdge servers
� IPMI benefits for Dell Customers
– Helps lower server acquisition, training and operations costs
– Enhances server availability
– Enables server management with common tools and processes
� IPMI 2.0 extends these benefits
– Enhances IPMI management security
– Extends administrators reach with serial-over-LAN operations
– Demonstrates industry focus on driving management standards
“Standards simplify the
computing environment and
establish a common hardware
and software platform, make it
easier for systems to work
together and to exchange
information. Standards also
simplify product development
and service, thereby reducing
our costs.”
Michael Dell
IPMI In Action
IPMI Delivers CommonIPMI Delivers CommonManagement InterfacesManagement Interfaces
49
Dell PowerEdge™ 3250:An IPMI Manageable Standards-Based Server
A cost effective, scalable solution for compute intensive applications
utilizing Itanium Processor Family and standards-based
manageability
IPMI In Action
� Standards-based manageability for high performance computing
– IPMI 1.5 server management
– SMART drive monitoring
– DMTF SMBIOS and ASF alerting
� Pro-active management for the scalable enterprise
– Centralized operations enabled with IPMI monitoring and alerting
– Remote control and recovery functions through IPMI server control, remote consoling
– Large-scale remote operations via IPMI command-line interface
IPMI Supports IPMI Supports ““Real ServerReal Server”” ManagementManagement
50
Intel Corporation
� One of the Founding Companies for IPMI
� Over 5 years of IPMI-based Management for Server Building Blocks
– In pedestal, rack, andmodular (blade) chassis
– In Entry through Enterprise
– With Itanium®, Xeon™,and IA-32 processors
– In General Purposeand Telco systems
– Small business to Data Center
IPMI In Action
IPMI Works Across System ClassesIPMI Works Across System Classes
51
Intel Corporation
� Over 7 product generations
� Over 5 different processors used for BMCs
– some large systems have had as many as four management controllers
� Use IPMI SDRs to tailor server building blocks to customer
� Implementations take advantage of Intel processor and chipset management features
– E.g. Memory and Bus Correctable and Uncorrectable error status, power state information, temperature and throttling status, etc.
IPMI In Action
IPMI Is Proven TechnologyIPMI Is Proven Technology
52
IPMI Technology is Widely SupportedIPMI Technology is Widely SupportedIPMI Technology is Widely Supported
� Exabyte Corporation� Extreme Engineering Solutions, Inc.� Fabric7 Systems, Inc.� First International
Computer, Inc.� FORCE Computers GmbH� Forward Technologies� Flextel SpA� Freedom Technologies Corp.� FreeIPMI Core Team� Fujitsu, Ltd.� Fujitsu Siemens Computers� GoAhead Software, Inc.� Gluon Networks, Inc� HADCO Corporation� HCL Infosystems Ltd.� Hewlett-Packard Company� Hewlett-Packard GmbH� Hitachi Ltd.� Hybricon Corporation� IBM� Ibus/Phoenix Corporation� InnoMediaLogic, Inc.� Integra Micro Sys. (P) Ltd.� Intel Corporation� Interphase Corporation� InterWorks Computer Products� Inventec Corporation� Ipex ITG� JMC Products� Kealia, Inc� Kaparel Corporation� L-3 Communications Corp.� LANDesk Software� LANTRONIX� Legend (Beijing) Limited� LeoStream Corp.� Linux NetworX, Inc.� Lynux Works, Inc.� Macrolink, Inc.� Magnetek, Inc.� MEGWARE Computer GmbH
�� ExabyteExabyte CorporationCorporation�� Extreme Engineering Solutions, Inc.Extreme Engineering Solutions, Inc.�� Fabric7 Systems, Inc.Fabric7 Systems, Inc.�� First InternationalFirst International
Computer, Inc.Computer, Inc.�� FORCE Computers GmbHFORCE Computers GmbH�� Forward TechnologiesForward Technologies�� FlextelFlextel SpASpA�� Freedom Technologies Corp.Freedom Technologies Corp.�� FreeIPMIFreeIPMI Core TeamCore Team�� Fujitsu, Ltd.Fujitsu, Ltd.�� Fujitsu Siemens ComputersFujitsu Siemens Computers�� GoAheadGoAhead Software, Inc.Software, Inc.�� Gluon Networks, IncGluon Networks, Inc�� HADCO CorporationHADCO Corporation�� HCL HCL InfosystemsInfosystems Ltd.Ltd.�� HewlettHewlett--Packard CompanyPackard Company�� HewlettHewlett--Packard GmbHPackard GmbH�� Hitachi Ltd.Hitachi Ltd.�� HybriconHybricon CorporationCorporation�� IBMIBM�� IbusIbus/Phoenix Corporation/Phoenix Corporation�� InnoMediaLogicInnoMediaLogic, Inc., Inc.�� Integra Micro Sys. (P) Ltd.Integra Micro Sys. (P) Ltd.�� Intel CorporationIntel Corporation�� InterphaseInterphase CorporationCorporation�� InterWorksInterWorks Computer ProductsComputer Products�� InventecInventec CorporationCorporation�� IpexIpex ITGITG�� JMC ProductsJMC Products�� KealiaKealia, Inc, Inc�� KaparelKaparel CorporationCorporation�� LL--3 Communications Corp.3 Communications Corp.�� LANDesk SoftwareLANDesk Software�� LANTRONIXLANTRONIX�� Legend (Beijing) LimitedLegend (Beijing) Limited�� LeoStreamLeoStream Corp.Corp.�� Linux Linux NetworXNetworX, Inc., Inc.�� LynuxLynux Works, Inc.Works, Inc.�� MacrolinkMacrolink, Inc., Inc.�� Magnetek, Inc.Magnetek, Inc.�� MEGWARE Computer GmbHMEGWARE Computer GmbH
� Abit Computer Corp.� Acer Inc.� Adtron� Amphus Inc.� Advanced Micro Devices, Inc� Agilent Technologies GmbH� Alberta Microelectronics� Allion Computer Inc.� American Megatrends Inc.� Arima Computer Corp.� Artesyn Communication Products,
Inc.� ASIS LTD.� ASUSTek Computer, Inc.� Aventail Corporation� Avian Communications� Avocent, Inc.� Axil Computer, Inc.� Blue Wave Systems� Bull S.A.� C&D Technologies, Inc.� California Digital Corp.� Celestica� C-MAC Engineering� ColoWATCH, Inc� Communication Automation
Corporation� Compellent Technologies, Inc. � Concurrent Technologies, PLC� CyberGuard Corporation� Cyclades Corporation� Data General Corporation� Decru, Inc.� Dell Computer Corporation� Demac Associates� Digi International� Egenera, Inc.� ElanVital Corporation� Ericsson UAB� ESO Technologies � Evans & Sutherland� Eversys Corporation
�� AbitAbit Computer Corp.Computer Corp.�� Acer Inc.Acer Inc.�� AdtronAdtron�� AmphusAmphus Inc.Inc.�� Advanced Micro Devices, IncAdvanced Micro Devices, Inc�� AgilentAgilent Technologies GmbHTechnologies GmbH�� Alberta MicroelectronicsAlberta Microelectronics�� AllionAllion Computer Inc.Computer Inc.�� American Megatrends Inc.American Megatrends Inc.�� ArimaArima Computer Corp.Computer Corp.�� ArtesynArtesyn Communication Products,Communication Products,
Inc.Inc.�� ASIS LTD.ASIS LTD.�� ASUSTekASUSTek Computer, Inc.Computer, Inc.�� AventailAventail CorporationCorporation�� Avian CommunicationsAvian Communications�� AvocentAvocent, Inc., Inc.�� AxilAxil Computer, Inc.Computer, Inc.�� Blue Wave SystemsBlue Wave Systems�� Bull S.A.Bull S.A.�� C&D Technologies, Inc.C&D Technologies, Inc.�� California Digital Corp.California Digital Corp.�� CelesticaCelestica�� CC--MAC EngineeringMAC Engineering�� ColoWATCHColoWATCH, Inc, Inc�� Communication Automation Communication Automation
CorporationCorporation�� CompellentCompellent Technologies, Inc. Technologies, Inc. �� Concurrent Technologies, PLCConcurrent Technologies, PLC�� CyberGuardCyberGuard CorporationCorporation�� CycladesCyclades CorporationCorporation�� Data General CorporationData General Corporation�� DecruDecru, Inc., Inc.�� Dell Computer CorporationDell Computer Corporation�� DemacDemac AssociatesAssociates�� DigiDigi InternationalInternational�� EgeneraEgenera, Inc., Inc.�� ElanVitalElanVital CorporationCorporation�� Ericsson UABEricsson UAB�� ESO Technologies ESO Technologies �� Evans & SutherlandEvans & Sutherland�� EversysEversys CorporationCorporation
� Mercury Computer Systems, Inc.� Micro-Star International� Mirapoint, Inc.� MiTAC International Corp.� Mitsubishi Electric Corp.
Info. Systems Engineering Ctr.� Motorola Computer Group� National Semiconductor Corp.� NEC Corporation� Nematron Corporation Network
Appliance, Inc.� Network Engines, Inc.� Network Storage Solutions, Inc.� NEWISYS, Inc.� NOCpulse, Inc.� OliData S.p.A.� Olivetti Computers Worldwide� OSA Technologies� Open Source Development Lab � PEP Modular Computers� Performance Technologies, Inc.� PetaStream Inc.� PFU Limited� Phoenix Technologies Ltd.� Pigeon Point Systems� Pinnacle Data Systems, Inc.� Praim, Inc.� Qlogic Corporation� Quanta Computer Inc.� Radisys Corporation� RADVISION� RAMIX Inc.� Raritan Computer, Inc.� Reliance Computer Corp.� Samsung Electronics Co., Inc.� Sanera Systems, Inc.� SANgate Systems, Inc.� Sanritz Automation Co., Ltd.� SBS Technologies
(Industrial Computers GmbH)� Scenix Semiconductor, Inc.� Siemens AG
�� Mercury Computer Systems, Inc.Mercury Computer Systems, Inc.�� MicroMicro--Star InternationalStar International�� MirapointMirapoint, Inc., Inc.�� MiTACMiTAC International Corp.International Corp.�� Mitsubishi Electric Corp.Mitsubishi Electric Corp.
Info. Systems Engineering Ctr.Info. Systems Engineering Ctr.�� Motorola Computer GroupMotorola Computer Group�� National Semiconductor Corp.National Semiconductor Corp.�� NEC CorporationNEC Corporation�� NematronNematron Corporation Network Corporation Network
Appliance, Inc.Appliance, Inc.�� Network Engines, Inc.Network Engines, Inc.�� Network Storage Solutions, Inc.Network Storage Solutions, Inc.�� NEWISYS, Inc.NEWISYS, Inc.�� NOCpulseNOCpulse, Inc., Inc.�� OliDataOliData S.p.A.S.p.A.�� Olivetti Computers WorldwideOlivetti Computers Worldwide�� OSA TechnologiesOSA Technologies�� Open Source Development Lab Open Source Development Lab �� PEP Modular ComputersPEP Modular Computers�� Performance Technologies, Inc.Performance Technologies, Inc.�� PetaStreamPetaStream Inc.Inc.�� PFU LimitedPFU Limited�� Phoenix Technologies Ltd.Phoenix Technologies Ltd.�� Pigeon Point SystemsPigeon Point Systems�� Pinnacle Data Systems, Inc.Pinnacle Data Systems, Inc.�� PraimPraim, Inc., Inc.�� QlogicQlogic CorporationCorporation�� Quanta Computer Inc.Quanta Computer Inc.�� RadisysRadisys CorporationCorporation�� RADVISIONRADVISION�� RAMIX Inc.RAMIX Inc.�� Raritan Computer, Inc.Raritan Computer, Inc.�� Reliance Computer Corp.Reliance Computer Corp.�� Samsung Electronics Co., Inc.Samsung Electronics Co., Inc.�� SaneraSanera Systems, Inc.Systems, Inc.�� SANgateSANgate Systems, Inc.Systems, Inc.�� SanritzSanritz Automation Co., Ltd.Automation Co., Ltd.�� SBS TechnologiesSBS Technologies
(Industrial Computers GmbH)(Industrial Computers GmbH)�� ScenixScenix Semiconductor, Inc.Semiconductor, Inc.�� Siemens AGSiemens AG
� Silicon Graphics, Inc.� SKY Computers, Inc.� SMIS R&D, Inc.� Snap Appliance� Stan Cox and Associates� Standard Microsystems Corp.� Stratalight Communications, Inc.� Stratus Computer Systems
Ireland Ltd.� Summit Microelectronics, Inc.� Sun Microsystems� Super Micro Computer, Inc.� SyAM Software � Symphony Group Intl. Co., Ltd.� Synergy Microsystems� Technobox, inc� Teknor Applicom, Inc.� T-Netix, Inc.� Tatung Co.� Tektronix� Texas Micro Corporation� Togabi Technologies, Inc.� Toshiba Corporation� Trilogic Systems, LLC� Trimm Technologies� Tyan Computer Corporation� Universal Scientific Industrial
Corp.� USAR Systems, Inc.� Vitesse Semiconductor Corp.� Watrin System Design� Wyselec� VIA Technologies, Inc.� Vividon, Inc.� Vooha, Inc.� Winbond Electronics Corp.� WIPRO Infotech� Xiotech Corporation� Ziatech Corporation� ZNYX Networks, Inc.
�� SiliconSilicon GraphicsGraphics, , IncInc..�� SKY Computers, SKY Computers, IncInc..�� SMIS R&D, SMIS R&D, IncInc..�� SnapSnap ApplianceAppliance�� Stan Cox and AssociatesStan Cox and Associates�� Standard Microsystems Corp.Standard Microsystems Corp.�� StratalightStratalight Communications, Inc.Communications, Inc.�� Stratus Computer SystemsStratus Computer Systems
Ireland Ltd.Ireland Ltd.�� Summit Microelectronics, Inc.Summit Microelectronics, Inc.�� Sun MicrosystemsSun Microsystems�� Super Micro Computer, Inc.Super Micro Computer, Inc.�� SyAMSyAM Software Software �� Symphony Group Intl. Co., Ltd.Symphony Group Intl. Co., Ltd.�� Synergy MicrosystemsSynergy Microsystems�� TechnoboxTechnobox, inc, inc�� TeknorTeknor ApplicomApplicom, Inc., Inc.�� TT--NetixNetix, Inc., Inc.�� TatungTatung Co.Co.�� TektronixTektronix�� Texas Micro CorporationTexas Micro Corporation�� TogabiTogabi Technologies, Inc.Technologies, Inc.�� Toshiba CorporationToshiba Corporation�� TrilogicTrilogic Systems, LLCSystems, LLC�� TrimmTrimm TechnologiesTechnologies�� TyanTyan Computer CorporationComputer Corporation�� Universal Scientific Industrial Universal Scientific Industrial
Corp.Corp.�� USAR Systems, Inc.USAR Systems, Inc.�� VitesseVitesse Semiconductor Corp.Semiconductor Corp.�� WatrinWatrin System DesignSystem Design�� WyselecWyselec�� VIA Technologies, Inc.VIA Technologies, Inc.�� VividonVividon, Inc., Inc.�� VoohaVooha, Inc., Inc.�� WinbondWinbond Electronics Corp.Electronics Corp.�� WIPRO WIPRO InfotechInfotech�� XiotechXiotech CorporationCorporation�� ZiatechZiatech CorporationCorporation�� ZNYX Networks, Inc.ZNYX Networks, Inc.
� Exabyte Corporation� Extreme Engineering Solutions, Inc.� Fabric7 Systems, Inc.� First International
Computer, Inc.� FORCE Computers GmbH� Forward Technologies� Flextel SpA� Freedom Technologies Corp.� FreeIPMI Core Team� Fujitsu, Ltd.� Fujitsu Siemens Computers� GoAhead Software, Inc.� Gluon Networks, Inc� HADCO Corporation� HCL Infosystems Ltd.� Hewlett-Packard Company� Hewlett-Packard GmbH� Hitachi Ltd.� Hybricon Corporation� IBM� Ibus/Phoenix Corporation� InnoMediaLogic, Inc.� Integra Micro Sys. (P) Ltd.� Intel Corporation� Interphase Corporation� InterWorks Computer Products� Inventec Corporation� Ipex ITG� JMC Products� Kealia, Inc� Kaparel Corporation� L-3 Communications Corp.� LANDesk Software� LANTRONIX� Legend (Beijing) Limited� LeoStream Corp.� Linux NetworX, Inc.� Lynux Works, Inc.� Macrolink, Inc.� Magnetek, Inc.� MEGWARE Computer GmbH
�� ExabyteExabyte CorporationCorporation�� Extreme Engineering Solutions, Inc.Extreme Engineering Solutions, Inc.�� Fabric7 Systems, Inc.Fabric7 Systems, Inc.�� First InternationalFirst International
Computer, Inc.Computer, Inc.�� FORCE Computers GmbHFORCE Computers GmbH�� Forward TechnologiesForward Technologies�� FlextelFlextel SpASpA�� Freedom Technologies Corp.Freedom Technologies Corp.�� FreeIPMIFreeIPMI Core TeamCore Team�� Fujitsu, Ltd.Fujitsu, Ltd.�� Fujitsu Siemens ComputersFujitsu Siemens Computers�� GoAheadGoAhead Software, Inc.Software, Inc.�� Gluon Networks, IncGluon Networks, Inc�� HADCO CorporationHADCO Corporation�� HCL HCL InfosystemsInfosystems Ltd.Ltd.�� HewlettHewlett--Packard CompanyPackard Company�� HewlettHewlett--Packard GmbHPackard GmbH�� Hitachi Ltd.Hitachi Ltd.�� HybriconHybricon CorporationCorporation�� IBMIBM�� IbusIbus/Phoenix Corporation/Phoenix Corporation�� InnoMediaLogicInnoMediaLogic, Inc., Inc.�� Integra Micro Sys. (P) Ltd.Integra Micro Sys. (P) Ltd.�� Intel CorporationIntel Corporation�� InterphaseInterphase CorporationCorporation�� InterWorksInterWorks Computer ProductsComputer Products�� InventecInventec CorporationCorporation�� IpexIpex ITGITG�� JMC ProductsJMC Products�� KealiaKealia, Inc, Inc�� KaparelKaparel CorporationCorporation�� LL--3 Communications Corp.3 Communications Corp.�� LANDesk SoftwareLANDesk Software�� LANTRONIXLANTRONIX�� Legend (Beijing) LimitedLegend (Beijing) Limited�� LeoStreamLeoStream Corp.Corp.�� Linux Linux NetworXNetworX, Inc., Inc.�� LynuxLynux Works, Inc.Works, Inc.�� MacrolinkMacrolink, Inc., Inc.�� Magnetek, Inc.Magnetek, Inc.�� MEGWARE Computer GmbHMEGWARE Computer GmbH
� Abit Computer Corp.� Acer Inc.� Adtron� Amphus Inc.� Advanced Micro Devices, Inc� Agilent Technologies GmbH� Alberta Microelectronics� Allion Computer Inc.� American Megatrends Inc.� Arima Computer Corp.� Artesyn Communication Products,
Inc.� ASIS LTD.� ASUSTek Computer, Inc.� Aventail Corporation� Avian Communications� Avocent, Inc.� Axil Computer, Inc.� Blue Wave Systems� Bull S.A.� C&D Technologies, Inc.� California Digital Corp.� Celestica� C-MAC Engineering� ColoWATCH, Inc� Communication Automation
Corporation� Compellent Technologies, Inc. � Concurrent Technologies, PLC� CyberGuard Corporation� Cyclades Corporation� Data General Corporation� Decru, Inc.� Dell Computer Corporation� Demac Associates� Digi International� Egenera, Inc.� ElanVital Corporation� Ericsson UAB� ESO Technologies � Evans & Sutherland� Eversys Corporation
�� AbitAbit Computer Corp.Computer Corp.�� Acer Inc.Acer Inc.�� AdtronAdtron�� AmphusAmphus Inc.Inc.�� Advanced Micro Devices, IncAdvanced Micro Devices, Inc�� AgilentAgilent Technologies GmbHTechnologies GmbH�� Alberta MicroelectronicsAlberta Microelectronics�� AllionAllion Computer Inc.Computer Inc.�� American Megatrends Inc.American Megatrends Inc.�� ArimaArima Computer Corp.Computer Corp.�� ArtesynArtesyn Communication Products,Communication Products,
Inc.Inc.�� ASIS LTD.ASIS LTD.�� ASUSTekASUSTek Computer, Inc.Computer, Inc.�� AventailAventail CorporationCorporation�� Avian CommunicationsAvian Communications�� AvocentAvocent, Inc., Inc.�� AxilAxil Computer, Inc.Computer, Inc.�� Blue Wave SystemsBlue Wave Systems�� Bull S.A.Bull S.A.�� C&D Technologies, Inc.C&D Technologies, Inc.�� California Digital Corp.California Digital Corp.�� CelesticaCelestica�� CC--MAC EngineeringMAC Engineering�� ColoWATCHColoWATCH, Inc, Inc�� Communication Automation Communication Automation
CorporationCorporation�� CompellentCompellent Technologies, Inc. Technologies, Inc. �� Concurrent Technologies, PLCConcurrent Technologies, PLC�� CyberGuardCyberGuard CorporationCorporation�� CycladesCyclades CorporationCorporation�� Data General CorporationData General Corporation�� DecruDecru, Inc., Inc.�� Dell Computer CorporationDell Computer Corporation�� DemacDemac AssociatesAssociates�� DigiDigi InternationalInternational�� EgeneraEgenera, Inc., Inc.�� ElanVitalElanVital CorporationCorporation�� Ericsson UABEricsson UAB�� ESO Technologies ESO Technologies �� Evans & SutherlandEvans & Sutherland�� EversysEversys CorporationCorporation
� Mercury Computer Systems, Inc.� Micro-Star International� Mirapoint, Inc.� MiTAC International Corp.� Mitsubishi Electric Corp.
Info. Systems Engineering Ctr.� Motorola Computer Group� National Semiconductor Corp.� NEC Corporation� Nematron Corporation Network
Appliance, Inc.� Network Engines, Inc.� Network Storage Solutions, Inc.� NEWISYS, Inc.� NOCpulse, Inc.� OliData S.p.A.� Olivetti Computers Worldwide� OSA Technologies� Open Source Development Lab � PEP Modular Computers� Performance Technologies, Inc.� PetaStream Inc.� PFU Limited� Phoenix Technologies Ltd.� Pigeon Point Systems� Pinnacle Data Systems, Inc.� Praim, Inc.� Qlogic Corporation� Quanta Computer Inc.� Radisys Corporation� RADVISION� RAMIX Inc.� Raritan Computer, Inc.� Reliance Computer Corp.� Samsung Electronics Co., Inc.� Sanera Systems, Inc.� SANgate Systems, Inc.� Sanritz Automation Co., Ltd.� SBS Technologies
(Industrial Computers GmbH)� Scenix Semiconductor, Inc.� Siemens AG
�� Mercury Computer Systems, Inc.Mercury Computer Systems, Inc.�� MicroMicro--Star InternationalStar International�� MirapointMirapoint, Inc., Inc.�� MiTACMiTAC International Corp.International Corp.�� Mitsubishi Electric Corp.Mitsubishi Electric Corp.
Info. Systems Engineering Ctr.Info. Systems Engineering Ctr.�� Motorola Computer GroupMotorola Computer Group�� National Semiconductor Corp.National Semiconductor Corp.�� NEC CorporationNEC Corporation�� NematronNematron Corporation Network Corporation Network
Appliance, Inc.Appliance, Inc.�� Network Engines, Inc.Network Engines, Inc.�� Network Storage Solutions, Inc.Network Storage Solutions, Inc.�� NEWISYS, Inc.NEWISYS, Inc.�� NOCpulseNOCpulse, Inc., Inc.�� OliDataOliData S.p.A.S.p.A.�� Olivetti Computers WorldwideOlivetti Computers Worldwide�� OSA TechnologiesOSA Technologies�� Open Source Development Lab Open Source Development Lab �� PEP Modular ComputersPEP Modular Computers�� Performance Technologies, Inc.Performance Technologies, Inc.�� PetaStreamPetaStream Inc.Inc.�� PFU LimitedPFU Limited�� Phoenix Technologies Ltd.Phoenix Technologies Ltd.�� Pigeon Point SystemsPigeon Point Systems�� Pinnacle Data Systems, Inc.Pinnacle Data Systems, Inc.�� PraimPraim, Inc., Inc.�� QlogicQlogic CorporationCorporation�� Quanta Computer Inc.Quanta Computer Inc.�� RadisysRadisys CorporationCorporation�� RADVISIONRADVISION�� RAMIX Inc.RAMIX Inc.�� Raritan Computer, Inc.Raritan Computer, Inc.�� Reliance Computer Corp.Reliance Computer Corp.�� Samsung Electronics Co., Inc.Samsung Electronics Co., Inc.�� SaneraSanera Systems, Inc.Systems, Inc.�� SANgateSANgate Systems, Inc.Systems, Inc.�� SanritzSanritz Automation Co., Ltd.Automation Co., Ltd.�� SBS TechnologiesSBS Technologies
(Industrial Computers GmbH)(Industrial Computers GmbH)�� ScenixScenix Semiconductor, Inc.Semiconductor, Inc.�� Siemens AGSiemens AG
� Silicon Graphics, Inc.� SKY Computers, Inc.� SMIS R&D, Inc.� Snap Appliance� Stan Cox and Associates� Standard Microsystems Corp.� Stratalight Communications, Inc.� Stratus Computer Systems
Ireland Ltd.� Summit Microelectronics, Inc.� Sun Microsystems� Super Micro Computer, Inc.� SyAM Software � Symphony Group Intl. Co., Ltd.� Synergy Microsystems� Technobox, inc� Teknor Applicom, Inc.� T-Netix, Inc.� Tatung Co.� Tektronix� Texas Micro Corporation� Togabi Technologies, Inc.� Toshiba Corporation� Trilogic Systems, LLC� Trimm Technologies� Tyan Computer Corporation� Universal Scientific Industrial
Corp.� USAR Systems, Inc.� Vitesse Semiconductor Corp.� Watrin System Design� Wyselec� VIA Technologies, Inc.� Vividon, Inc.� Vooha, Inc.� Winbond Electronics Corp.� WIPRO Infotech� Xiotech Corporation� Ziatech Corporation� ZNYX Networks, Inc.
�� SiliconSilicon GraphicsGraphics, , IncInc..�� SKY Computers, SKY Computers, IncInc..�� SMIS R&D, SMIS R&D, IncInc..�� SnapSnap ApplianceAppliance�� Stan Cox and AssociatesStan Cox and Associates�� Standard Microsystems Corp.Standard Microsystems Corp.�� StratalightStratalight Communications, Inc.Communications, Inc.�� Stratus Computer SystemsStratus Computer Systems
Ireland Ltd.Ireland Ltd.�� Summit Microelectronics, Inc.Summit Microelectronics, Inc.�� Sun MicrosystemsSun Microsystems�� Super Micro Computer, Inc.Super Micro Computer, Inc.�� SyAMSyAM Software Software �� Symphony Group Intl. Co., Ltd.Symphony Group Intl. Co., Ltd.�� Synergy MicrosystemsSynergy Microsystems�� TechnoboxTechnobox, inc, inc�� TeknorTeknor ApplicomApplicom, Inc., Inc.�� TT--NetixNetix, Inc., Inc.�� TatungTatung Co.Co.�� TektronixTektronix�� Texas Micro CorporationTexas Micro Corporation�� TogabiTogabi Technologies, Inc.Technologies, Inc.�� Toshiba CorporationToshiba Corporation�� TrilogicTrilogic Systems, LLCSystems, LLC�� TrimmTrimm TechnologiesTechnologies�� TyanTyan Computer CorporationComputer Corporation�� Universal Scientific Industrial Universal Scientific Industrial
Corp.Corp.�� USAR Systems, Inc.USAR Systems, Inc.�� VitesseVitesse Semiconductor Corp.Semiconductor Corp.�� WatrinWatrin System DesignSystem Design�� WyselecWyselec�� VIA Technologies, Inc.VIA Technologies, Inc.�� VividonVividon, Inc., Inc.�� VoohaVooha, Inc., Inc.�� WinbondWinbond Electronics Corp.Electronics Corp.�� WIPRO WIPRO InfotechInfotech�� XiotechXiotech CorporationCorporation�� ZiatechZiatech CorporationCorporation�� ZNYX Networks, Inc.ZNYX Networks, Inc.
� Exabyte Corporation� Extreme Engineering Solutions, Inc.� Fabric7 Systems, Inc.� First International
Computer, Inc.� FORCE Computers GmbH� Forward Technologies� Flextel SpA� Freedom Technologies Corp.� FreeIPMI Core Team� Fujitsu, Ltd.� Fujitsu Siemens Computers� GoAhead Software, Inc.� Gluon Networks, Inc� HADCO Corporation� HCL Infosystems Ltd.� Hewlett-Packard Company� Hewlett-Packard GmbH� Hitachi Ltd.� Hybricon Corporation� IBM� Ibus/Phoenix Corporation� InnoMediaLogic, Inc.� Integra Micro Sys. (P) Ltd.� Intel Corporation� Interphase Corporation� InterWorks Computer Products� Inventec Corporation� Ipex ITG� JMC Products� Kealia, Inc� Kaparel Corporation� L-3 Communications Corp.� LANDesk Software� LANTRONIX� Legend (Beijing) Limited� LeoStream Corp.� Linux NetworX, Inc.� Lynux Works, Inc.� Macrolink, Inc.� Magnetek, Inc.� MEGWARE Computer GmbH
�� ExabyteExabyte CorporationCorporation�� Extreme Engineering Solutions, Inc.Extreme Engineering Solutions, Inc.�� Fabric7 Systems, Inc.Fabric7 Systems, Inc.�� First InternationalFirst International
Computer, Inc.Computer, Inc.�� FORCE Computers GmbHFORCE Computers GmbH�� Forward TechnologiesForward Technologies�� FlextelFlextel SpASpA�� Freedom Technologies Corp.Freedom Technologies Corp.�� FreeIPMIFreeIPMI Core TeamCore Team�� Fujitsu, Ltd.Fujitsu, Ltd.�� Fujitsu Siemens ComputersFujitsu Siemens Computers�� GoAheadGoAhead Software, Inc.Software, Inc.�� Gluon Networks, IncGluon Networks, Inc�� HADCO CorporationHADCO Corporation�� HCL HCL InfosystemsInfosystems Ltd.Ltd.�� HewlettHewlett--Packard CompanyPackard Company�� HewlettHewlett--Packard GmbHPackard GmbH�� Hitachi Ltd.Hitachi Ltd.�� HybriconHybricon CorporationCorporation�� IBMIBM�� IbusIbus/Phoenix Corporation/Phoenix Corporation�� InnoMediaLogicInnoMediaLogic, Inc., Inc.�� Integra Micro Sys. (P) Ltd.Integra Micro Sys. (P) Ltd.�� Intel CorporationIntel Corporation�� InterphaseInterphase CorporationCorporation�� InterWorksInterWorks Computer ProductsComputer Products�� InventecInventec CorporationCorporation�� IpexIpex ITGITG�� JMC ProductsJMC Products�� KealiaKealia, Inc, Inc�� KaparelKaparel CorporationCorporation�� LL--3 Communications Corp.3 Communications Corp.�� LANDesk SoftwareLANDesk Software�� LANTRONIXLANTRONIX�� Legend (Beijing) LimitedLegend (Beijing) Limited�� LeoStreamLeoStream Corp.Corp.�� Linux Linux NetworXNetworX, Inc., Inc.�� LynuxLynux Works, Inc.Works, Inc.�� MacrolinkMacrolink, Inc., Inc.�� Magnetek, Inc.Magnetek, Inc.�� MEGWARE Computer GmbHMEGWARE Computer GmbH
� Abit Computer Corp.� Acer Inc.� Adtron� Amphus Inc.� Advanced Micro Devices, Inc� Agilent Technologies GmbH� Alberta Microelectronics� Allion Computer Inc.� American Megatrends Inc.� Arima Computer Corp.� Artesyn Communication Products,
Inc.� ASIS LTD.� ASUSTek Computer, Inc.� Aventail Corporation� Avian Communications� Avocent, Inc.� Axil Computer, Inc.� Blue Wave Systems� Bull S.A.� C&D Technologies, Inc.� California Digital Corp.� Celestica� C-MAC Engineering� ColoWATCH, Inc� Communication Automation
Corporation� Compellent Technologies, Inc. � Concurrent Technologies, PLC� CyberGuard Corporation� Cyclades Corporation� Data General Corporation� Decru, Inc.� Dell Computer Corporation� Demac Associates� Digi International� Egenera, Inc.� ElanVital Corporation� Ericsson UAB� ESO Technologies � Evans & Sutherland� Eversys Corporation
�� AbitAbit Computer Corp.Computer Corp.�� Acer Inc.Acer Inc.�� AdtronAdtron�� AmphusAmphus Inc.Inc.�� Advanced Micro Devices, IncAdvanced Micro Devices, Inc�� AgilentAgilent Technologies GmbHTechnologies GmbH�� Alberta MicroelectronicsAlberta Microelectronics�� AllionAllion Computer Inc.Computer Inc.�� American Megatrends Inc.American Megatrends Inc.�� ArimaArima Computer Corp.Computer Corp.�� ArtesynArtesyn Communication Products,Communication Products,
Inc.Inc.�� ASIS LTD.ASIS LTD.�� ASUSTekASUSTek Computer, Inc.Computer, Inc.�� AventailAventail CorporationCorporation�� Avian CommunicationsAvian Communications�� AvocentAvocent, Inc., Inc.�� AxilAxil Computer, Inc.Computer, Inc.�� Blue Wave SystemsBlue Wave Systems�� Bull S.A.Bull S.A.�� C&D Technologies, Inc.C&D Technologies, Inc.�� California Digital Corp.California Digital Corp.�� CelesticaCelestica�� CC--MAC EngineeringMAC Engineering�� ColoWATCHColoWATCH, Inc, Inc�� Communication Automation Communication Automation
CorporationCorporation�� CompellentCompellent Technologies, Inc. Technologies, Inc. �� Concurrent Technologies, PLCConcurrent Technologies, PLC�� CyberGuardCyberGuard CorporationCorporation�� CycladesCyclades CorporationCorporation�� Data General CorporationData General Corporation�� DecruDecru, Inc., Inc.�� Dell Computer CorporationDell Computer Corporation�� DemacDemac AssociatesAssociates�� DigiDigi InternationalInternational�� EgeneraEgenera, Inc., Inc.�� ElanVitalElanVital CorporationCorporation�� Ericsson UABEricsson UAB�� ESO Technologies ESO Technologies �� Evans & SutherlandEvans & Sutherland�� EversysEversys CorporationCorporation
� Mercury Computer Systems, Inc.� Micro-Star International� Mirapoint, Inc.� MiTAC International Corp.� Mitsubishi Electric Corp.
Info. Systems Engineering Ctr.� Motorola Computer Group� National Semiconductor Corp.� NEC Corporation� Nematron Corporation Network
Appliance, Inc.� Network Engines, Inc.� Network Storage Solutions, Inc.� NEWISYS, Inc.� NOCpulse, Inc.� OliData S.p.A.� Olivetti Computers Worldwide� OSA Technologies� Open Source Development Lab � PEP Modular Computers� Performance Technologies, Inc.� PetaStream Inc.� PFU Limited� Phoenix Technologies Ltd.� Pigeon Point Systems� Pinnacle Data Systems, Inc.� Praim, Inc.� Qlogic Corporation� Quanta Computer Inc.� Radisys Corporation� RADVISION� RAMIX Inc.� Raritan Computer, Inc.� Reliance Computer Corp.� Samsung Electronics Co., Inc.� Sanera Systems, Inc.� SANgate Systems, Inc.� Sanritz Automation Co., Ltd.� SBS Technologies
(Industrial Computers GmbH)� Scenix Semiconductor, Inc.� Siemens AG
�� Mercury Computer Systems, Inc.Mercury Computer Systems, Inc.�� MicroMicro--Star InternationalStar International�� MirapointMirapoint, Inc., Inc.�� MiTACMiTAC International Corp.International Corp.�� Mitsubishi Electric Corp.Mitsubishi Electric Corp.
Info. Systems Engineering Ctr.Info. Systems Engineering Ctr.�� Motorola Computer GroupMotorola Computer Group�� National Semiconductor Corp.National Semiconductor Corp.�� NEC CorporationNEC Corporation�� NematronNematron Corporation Network Corporation Network
Appliance, Inc.Appliance, Inc.�� Network Engines, Inc.Network Engines, Inc.�� Network Storage Solutions, Inc.Network Storage Solutions, Inc.�� NEWISYS, Inc.NEWISYS, Inc.�� NOCpulseNOCpulse, Inc., Inc.�� OliDataOliData S.p.A.S.p.A.�� Olivetti Computers WorldwideOlivetti Computers Worldwide�� OSA TechnologiesOSA Technologies�� Open Source Development Lab Open Source Development Lab �� PEP Modular ComputersPEP Modular Computers�� Performance Technologies, Inc.Performance Technologies, Inc.�� PetaStreamPetaStream Inc.Inc.�� PFU LimitedPFU Limited�� Phoenix Technologies Ltd.Phoenix Technologies Ltd.�� Pigeon Point SystemsPigeon Point Systems�� Pinnacle Data Systems, Inc.Pinnacle Data Systems, Inc.�� PraimPraim, Inc., Inc.�� QlogicQlogic CorporationCorporation�� Quanta Computer Inc.Quanta Computer Inc.�� RadisysRadisys CorporationCorporation�� RADVISIONRADVISION�� RAMIX Inc.RAMIX Inc.�� Raritan Computer, Inc.Raritan Computer, Inc.�� Reliance Computer Corp.Reliance Computer Corp.�� Samsung Electronics Co., Inc.Samsung Electronics Co., Inc.�� SaneraSanera Systems, Inc.Systems, Inc.�� SANgateSANgate Systems, Inc.Systems, Inc.�� SanritzSanritz Automation Co., Ltd.Automation Co., Ltd.�� SBS TechnologiesSBS Technologies
(Industrial Computers GmbH)(Industrial Computers GmbH)�� ScenixScenix Semiconductor, Inc.Semiconductor, Inc.�� Siemens AGSiemens AG
� Silicon Graphics, Inc.� SKY Computers, Inc.� SMIS R&D, Inc.� Snap Appliance� Stan Cox and Associates� Standard Microsystems Corp.� Stratalight Communications, Inc.� Stratus Computer Systems
Ireland Ltd.� Summit Microelectronics, Inc.� Sun Microsystems� Super Micro Computer, Inc.� SyAM Software � Symphony Group Intl. Co., Ltd.� Synergy Microsystems� Technobox, inc� Teknor Applicom, Inc.� T-Netix, Inc.� Tatung Co.� Tektronix� Texas Micro Corporation� Togabi Technologies, Inc.� Toshiba Corporation� Trilogic Systems, LLC� Trimm Technologies� Tyan Computer Corporation� Universal Scientific Industrial
Corp.� USAR Systems, Inc.� Vitesse Semiconductor Corp.� Watrin System Design� Wyselec� VIA Technologies, Inc.� Vividon, Inc.� Vooha, Inc.� Winbond Electronics Corp.� WIPRO Infotech� Xiotech Corporation� Ziatech Corporation� ZNYX Networks, Inc.
�� SiliconSilicon GraphicsGraphics, , IncInc..�� SKY Computers, SKY Computers, IncInc..�� SMIS R&D, SMIS R&D, IncInc..�� SnapSnap ApplianceAppliance�� Stan Cox and AssociatesStan Cox and Associates�� Standard Microsystems Corp.Standard Microsystems Corp.�� StratalightStratalight Communications, Inc.Communications, Inc.�� Stratus Computer SystemsStratus Computer Systems
Ireland Ltd.Ireland Ltd.�� Summit Microelectronics, Inc.Summit Microelectronics, Inc.�� Sun MicrosystemsSun Microsystems�� Super Micro Computer, Inc.Super Micro Computer, Inc.�� SyAMSyAM Software Software �� Symphony Group Intl. Co., Ltd.Symphony Group Intl. Co., Ltd.�� Synergy MicrosystemsSynergy Microsystems�� TechnoboxTechnobox, inc, inc�� TeknorTeknor ApplicomApplicom, Inc., Inc.�� TT--NetixNetix, Inc., Inc.�� TatungTatung Co.Co.�� TektronixTektronix�� Texas Micro CorporationTexas Micro Corporation�� TogabiTogabi Technologies, Inc.Technologies, Inc.�� Toshiba CorporationToshiba Corporation�� TrilogicTrilogic Systems, LLCSystems, LLC�� TrimmTrimm TechnologiesTechnologies�� TyanTyan Computer CorporationComputer Corporation�� Universal Scientific Industrial Universal Scientific Industrial
Corp.Corp.�� USAR Systems, Inc.USAR Systems, Inc.�� VitesseVitesse Semiconductor Corp.Semiconductor Corp.�� WatrinWatrin System DesignSystem Design�� WyselecWyselec�� VIA Technologies, Inc.VIA Technologies, Inc.�� VividonVividon, Inc., Inc.�� VoohaVooha, Inc., Inc.�� WinbondWinbond Electronics Corp.Electronics Corp.�� WIPRO WIPRO InfotechInfotech�� XiotechXiotech CorporationCorporation�� ZiatechZiatech CorporationCorporation�� ZNYX Networks, Inc.ZNYX Networks, Inc.
53
Agenda
� IPMI Architecture and Initiative Update
� What’s New in IPMI v2.0?
� IPMI v2.0 Technology: How IPMI v2.0 meets platform management needs
� IPMI in Action
� IPMI Futures
54
Advancing Platform ManagementIPMI Futures
�� Session and Security Session and Security
EnhancementsEnhancements
�� Serial Over LANSerial Over LAN
�� SSIFSSIF
�� Alignment with ASF Alignment with ASF
AuthenticationAuthentication
�� Encryption supportEncryption support
�� Firmware FirewallFirmware Firewall
�� Command DiscoveryCommand Discovery
�� Modular (blade) support Modular (blade) support
v2.0 Additionsv2.0 Additions
Feb 04
r1.0
Feb 05??
r1.1?
v2.0+ v2.0+ ……
�� New Payload TypesNew Payload Types
�� Enhanced Configuration Enhanced Configuration
InterfacesInterfaces
�� Links to DirectoryLinks to Directory--
based Authenticationbased Authentication
�� Improved Group ControlImproved Group Control
�� Auxiliary Log AccessAuxiliary Log Access
�� Integration with Web Integration with Web
InterfacesInterfaces
�� Web servicesWeb services--based based
access access
�� MonitoringMonitoring(temp, volt, fan, etc.)(temp, volt, fan, etc.)
�� ControlControl(power on/off/cycle,(power on/off/cycle,reset, reset, diagdiag. interrupt). interrupt)
�� System Event LoggingSystem Event Logging
�� FRU & SDR FRU & SDR InformationInformation
�� Watchdog TimerWatchdog Timer
�� Serial and LAN accessSerial and LAN access
�� Serial and LAN alertsSerial and LAN alerts
�� Platform Event Platform Event FilteringFiltering
�� Serial Port sharingSerial Port sharing
�� Management bussesManagement busses
IPMI v1.5 IPMI v1.5
r1.0
Feb 01 Feb 02
r1.1
Proven Foundation for New Platform Management FeaturesProven Foundation for New Platform Management Features
55
New Capabilities Under Consideration
� Additional redirection payloads:
– e.g. KVM, USB-media
� Improved configuration interfaces
–Simplified save/restore of configuration settings
–Secure migration of user configuration
– Integration with configuration of ‘Alternative Access’features, e.g. Web Server, Telnet
� Interfaces to Directory-based authentication
� More efficient options for ‘group control’–E.g. option for ‘persistent’ connections
IPMI Futures
56
New Capabilities Under Consideration
� Auxiliary Log access
� OOB configuration integration with web-based interfaces
– enabling/disabling web server, CLI, Telnet
–Configuring user privileges associated with secured interfaces
– Integration with directory-based authentication
� Web-services –based interfaces
–Alignment with “CIM+” / DMTF SMWG
– “IPMI over XML/SOAP”
IPMI Futures
IPMI will continue to evolve with valuable new capabilities
IPMI will continue to evolve with IPMI will continue to evolve with valuable new capabilitiesvaluable new capabilities
57
Where to get More Info
IPMI Web Site
– Latest IPMI Specifications & Errata
–Presentations
– IPMI Conformance Test Suite
–Example Drivers
– Tools
– FAQ and Integration Guides
–Mailing List
– List of IPMI Adopter Companies
–Adopter Agreements
IPMI Web Site
– Latest IPMI Specifications & Errata
–Presentations
– IPMI Conformance Test Suite
–Example Drivers
– Tools
– FAQ and Integration Guides
–Mailing List
– List of IPMI Adopter Companies
–Adopter Agreements
IPMI In Action
developer.intel.com/design/servers/ipmideveloper.intel.com/design/servers/ipmi
58
Summary
� IPMI reduces TTM and development cost for platform management
� IPMI v2.0 enables cross-platform manageability across server classes
� IPMI v2.0 technology enables secure remote management
� IPMI v2.0 technology is widely supported
� IPMI will continue to evolve with valuable new capabilities
59
Advances in Intelligent Platform Management
Tom Slaight, Intel CorporationSteve Lyle, HP
Phil Chidester, Dell
Please remember to turn in your session survey form
Questions?More on IPMI and IPMI v2.0 at IDF:• “Birds Of A Feather” - Get Together at lunchtime today
Join us for an informal dialog and Q&A on IPMI and related technologies
• Session: OSA S010 - Design Considerations for the Open Standards
Manageability Stack - IPMI, HPI and CIM
1st session after lunch
• Technology Showcase - See demos of IPMI-based systems and SOL capabilities
in the Intel Pavilion
60
Birds-of-a-Feather Lunch Discussions
� What: – Informal lunch discussions with Intel and industry technical experts on next-generation technologies, latest industry standards and specifications
� When: Wednesday 12PM – 1:30PM
802.11* Extensible Firmware Interface (EFI )
802.16*/ WiMax* Latin America Mobile/Data Environment
Server Manageability Advanced TCA*
Client Manageability Advanced Switching based on PCI Express* Architecture
Mobile Wireless Manageability Convergence in the digital home
IPMI (Intelligent Platform Management Interface)
Thursday 12PM – 1:30PM
Enthusiast PC Ethernet in the Datacenter
Trusted Computing Group for More Secure Computing
Advanced Switching based on PCI Express* Architecture
Extended Battery Life
Where: Level 3 Foyer Where: Level 3 Foyer (Not in the main lunch area)(Not in the main lunch area)
Arrive early Arrive early –– seating is limitedseating is limited
61
Please fill out the Session Evaluation Form.
Thank You!
62
Backup Slides
63
SSIF - SMBus System InterfaceIPMI v2.0 Technology
Write Block0x07- Middle part(s) if any
Read Block, first data byte after length = 0x01
0x09- End – last part
Read Block, first data byte after length = 0x00
0x09- Middle part(s) if any
Read Block, first two data bytes after length = [0x01,0x00]
0x03BMC Multi-Part Read- Start – first part
Read Block0x03BMC Single Part Read
Write Block0x08- End – last part
Write Block0x06BMC Multi-Part Write- Start – first part
Write Block0x02BMC Single Part Write
SMBus ProtocolSMBusCMDOperation
64
IPMI Functional BlocksNewNew
IPMI v1.5IPMI v1.5
ExtendedExtended
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging
FRU, SEL,FRU, SEL,SDRsSDRs
Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
FirmwareFirmwareFirewallFirewall
WatchdogWatchdog PEFPEF
KCSKCS BTBT SMICSMIC SSIFSSIF
System InterfacesSystem Interfaces
LAN & SerialLAN & SerialAlertingAlerting
IPMBIPMB PCIPCI--SMBusSMBus
Mgmt BussesMgmt Busses
SensorSensorAccessAccess
ControlControl(on/off/reset/(on/off/reset/intrintr))
LoggingLogging
FRU, SEL,FRU, SEL,SDRsSDRs
Users &Users &PrivilegesPrivileges
Serial PortSerial PortSharingSharing
SessionInfrastructure
RemoteAccess
IPMICore
Local Access
AuthenticationAuthentication IntegrityIntegrity ConfidentialityConfidentiality
IPMI overIPMI overSerialSerial
Basic,Basic,TerminalTerminal, PPP, PPP
ICMBICMBIPMI overIPMI overLAN v1.5LAN v1.5
RMCPRMCP
Serial ICMB LAN
PayloadsPayloads
IPMI overIPMI overLAN v2.0LAN v2.0
SOL SOL (Serial(SerialOver LAN)Over LAN)
““RMCP+RMCP+”” SessionSession
VLANVLAN