Logging In to the KVM Using an Encrypted URL ​

Procedure ​

1. Set the KVM to the encrypted state.

   You must have the administrator rights to set KVM encryption. You can enable the encryption function on the iBMCBMC WebUI or using IPMITool. To enable the encryption function, run the following command:

   ipmitool -I lanplus  -U  root -P <Password> -H 192.168.2.100 raw 0x30 0x94 0xdb 0x07 0x00 0x21 0x02 0x00 0x00 0x01 0x01

   -I lan: indicates network access. -I lanplus indicates encryption, and lan indicates no encryption.

   -H 192.168.2.100: BMC IP address. Set it based on the site requirements.

   -U root: BMC local user name. Set it based on the site requirements.

   -P <Password>: indicates the BMC user password. Set this parameter based on the site requirements.

   The information that is not in red is the header information (generally does not need to be modified). The information in red is the encryption status of the KVM.

   0x00: non-encrypted state

   0x01: encrypted

2. To prevent unauthorized users from connecting to the BMC through the local KVM console and using the KVM function, the BMC needs to identify users based on user IDs. You can use the IPMITool to set user IDs.

   ipmitool -I lanplus -H 192.168.2.100 -U root -P <Password> raw 0x30 0x94 0xdb 0x07 0x00 0x21 0x06 0x00 0x00 0x37 0x00 0x24 0x00 0x00 0x00 0x03 0x06 0xBD 0x43 0x29 0x77 0x3F 0xC3 0x34 0x36 0x75 0x96 0x4B 0x67 0xEE 0x72 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x72 0x6f 0x6f 0x74 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

   -I lan: indicates network access. -I lanplus indicates encryption, and lan indicates no encryption.

   -H 192.168.2.100: BMC IP address. Set it based on the site requirements.

   -U root: BMC local user name. Set it based on the site requirements.

   -P root: indicates the password of user root for logging in to the BMC. Set it based on the actual situation.

   raw 0x30 0x94 0xdb 0x07 0x00 0x21 0x06 0x00 0x00 0x37 0x00 0x24 0x00 0x00 0x00 0x03 0x06 0xBD 0x43 0x29 0x77 0x3F 0xC3 0x34 0x36 0x75 0x96 0x4B 0x67 0xEE 0x72 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x72 0x6f 0x6f 0x74 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

   The part that is not in red is the header information (generally, the header information does not need to be modified). The part in red is divided into three parts.

   Part 1: The 0x00 0x00 0x00 0x03 0x06 0xBD 0x43 0x29 0x77 0x3F 0xC3 0x34 0x36 0x75 0x96 0x4B 0x67 0xEE 0x72 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 in the front part of the red part is the identifier ID. The validity period of the identification ID is 2 minutes. The identification ID becomes invalid after one login.

   Part 2: The 16 bytes following the ID indicate the user name.

   0x72 0x6f 0x6f 0x74 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

   Part 3: The last byte indicates whether to open the KVM in shared mode or exclusive mode.

   0x00: shared mode

   0x01: exclusive mode

   Used for communication between the KVM and the console. The validity period of the ID is 2 minutes. The ID becomes invalid after one login.

3. Invoke the corresponding Uniform Resource Locator (URL). The URL format is as follows:

   https://192.168.2.100/remote_access.asp?authParam=0000000306BD4329773FC3343675964B67EE728383838383838383838383838383838383&lp=**en**&openWay=html5

   In the URL, the parameters in red can be modified based on the site requirements. The parameters are described as follows:

   192.168.2.100: indicates the IP address of the BMC to be accessed. Set this parameter based on the site requirements.

   authParam: indicates the ID set by using IPMITool. The parameters following authParam=0000000306BD4329773FC3343675964B67EE728383838383838383838383838383838383 are directly converted from ID 0x00 0x00 0x00 0x03 0x06 0xBD 0x43 0x29 0x77 0x3F 0xC3 0x34 0x36 0x75 0x96 0x4B 0x67 0xEE 0x72 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83.

   Note: The ID supports only hexadecimal input.

   lp: indicates the current language, which can be Chinese or English.

   Note: lp=cn indicates Chinese, and lp=en indicates English.

   openWay: (optional) indicates that the KVM is opened in html5 or java mode. The default value is java.