TA-1143: Invocation of the ipmitool from the Remote System Requires Extra Parameters to Connect to Intel® Server Systems





What am I seeing?

Beginning with BMC firmware version 1.90, invocation of the ipmitool from a remote system requires the following extra parameter: -C 17. This parameter is required due to the BMC disabling Cipher Suite 3 by default, leaving only Cipher Suite 17 enabled by default.

Note Unrelated to this change, it has been observed in networks with high traffic loads that ipmitool commands may trigger a default timeout setting (1 second). Intel recommends that customers experiencing timeouts also add the -N 5 parameter (setting the timeout to 5 seconds) to the required -C 17.

With both required and recommended additions to the remote ipmitool invocation, the command-line syntax is as follows (type on a single command line):

# ipmitool –I lanplus –H ip.ad.dr.ess –U user –P password –C 17 –N 5 command <options>

Refer to the PDF for more details on root cause and workaround.

TA-1143 (PDF) PDF icon
Invocation of the ipmitool from the remote system requires extra parameters to connect to Intel® Server Systems that have BMC firmware v1.90 or later installed.

Size: 149 KB
Date: January 2019

Note: PDF files require Adobe Acrobat Reader*.