Lik`s forum

http://fish2.com/ipmi/
https://community.rapid7.com/community/metasploit/blog/2013/07/02/a-penetration-testers-guide-to-ipmi
https://community.rapid7.com/community/metasploit/blog/2013/11/06/supermicro-ipmi-firmware-vulnerabilities

Several scan/pentest scripts:
https://github.com/zenfish/ipmi
https://github.com/alexoslabs/ipmitest

SMCIPMITool is a command line interface utility for the Supermicro SuperBlade and IPMI device.

The most useful feature which I have found handy for myself is to spawn KVM launcher directly from the CLI. Thus, no need to use web interface or launch additional applications (IPMIview, for example).
Download and unpack it to the destination directory:

Code: Select all

wget "https://www.supermicro.com/wdl/utility/SMCIPMITool/Linux/SMCIPMITool_2.27.0_build.220824_bundleJRE_Linux_x64.tar.gz"

Start KVM launcher:
# java -jar SMCIPMITool.jar 10.1.1.2 ADMIN ADMINPASS ukvm
Starting iKVM Process...Done
Please wait for ...

IPMI update instructions for Supermicro X9SCL/X9SCM:

1. Download firmware update on your local PC:

Code: Select all

wget -O SMT_X9_164.zip "http://www.supermicro.com/support/resources/getfile.aspx?ID=1743"

2. Print and backup current IPMI settings:

Code: Select all

ipmitool lan print 1

3. Disable IPMI driver (OpenIPMI or FreeIPMI) on the server and keep it so during the process of firmware update:

Code: Select all

service ipmi stop
service ipmievd stop

4. Log into IPMI web interface.
5. Go to the tab 'Maintenance' and click on 'Firmware Update'.
6. Click on ...

In case if IPMI interface isn't accessible after update you will have to do the following:

1. Upload IPMICFG tool to the server (you will find required binaries inside the archive):

Code: Select all

wget "ftp://ftp.supermicro.com/utility/IPMICFG/IPMICFG_1.25.0_build.160715.zip"

2. Unload(if any) IPMI driver (OpenIPMI or FreeIPMI) on the server:

Code: Select all

/etc/init.d/ipmi stop
/etc/init.d/ipmievd stop

3. Run the following commands:

Reset to the factory defaults:

Code: Select all

./ipmicfg-linux.x86_64 -fd

Disable the DHCP:

Code: Select all

./ipmicfg-linux.x86_64 -dhcp off

Set IP (format:###.###.###.###):
./ipmicfg-linux.x86_64 -m <IP which should be ...

It can be true that due to BIOS settings (namely enabled "Quite Boot" and "Quick Boot" features) one can not log into BIOS screen, because BMC initialization takes longer.
In such case request the system to boot from an alternate boot device on next reboot can be used.

# ipmitool chassis bootdev none options=help
Legal options are:
help: print this message
valid: Boot flags valid
persistent: Changes are persistent for all future boots
efiboot: Extensible ...

Question
I have an X8xxx series board with IPMI. Can I set the IPMI port (dedicated vs. shared with lan1) via BIOS or motherboard jumper setting?

Answer
IPMI can use either dedicated or shared. This has to be done either through Web GUI or through IPMI RAW command. It cannot be done through BIOS or jumper settings.

From Web:
Configuration -> LAN select -> Select LAN port

Using IPMI RAW command user can get ...

Good alternative to the native built-in GUI (if any) and CLI interfaces is SuperMicro IPMIview utility, which you can download from the official SuperMicro site:
Linux: IPMIView_V2.10.2_bundleJRE_Linux_x64_20150203
IPMIview user`s guide:
IPMIView20.pdf version 2.9

IPMI on linux-based server

Running IPMI on Linux
What is IPMI?

IPMI is standard which allows remote server management, primarily developed by Intel. IPMI cards, known as Baseboard Management Cards (BMCs) are primitive computers in their own right and are operational all the time, so long as the server has a power source. The server itself does not need to be powered on, or the operating system operational for the BMC to work, it just ...

How-to setup IPMI SOL for Linux based Dell (and some other) servers

For Fedora/Red Hat/CentOS:

Edit the file /boot/grub/grub.conf, as follows. See the sample file that follows, which shows the changes described in this procedure.
1. Add the following two new lines in the general settings section of the file:

Code: Select all

serial --unit=0 --speed=19200
terminal --timeout=10 serial

2. Append two options to the kernel line:

Code: Select all

kernel …………. console=ttyS#

where ttyS# is dependant on which COM port ...