Logging In to the KVM Using an Unencrypted URL
更新时间: 2026/08/06
在Gitcode上查看源码

Logging In to the KVM Using an Unencrypted URL

Procedure

  1. Set the KVM to the non-encrypted state.

    Only the administrator can set the encryption status of the KVM. You can disable the encryption function on the iBMCBMC WebUI or using IPMITool. To disable the encryption function, run the following command:

    ipmitool -I lanplus  -U  root -P <Password> -H 192.168.2.100 raw 0x30 0x94 0xdb 0x07 0x00 0x21 0x02 0x00 0x00 0x01 0x00

    -I lan: indicates network access. -I lanplus indicates encryption, and lan indicates no encryption.

    -H 192.168.2.100: BMC IP address. Set it based on the site requirements.

    -U root: BMC local user name. Set it based on the site requirements.

    -P <Password>: indicates the BMC user password. Set this parameter based on the site requirements.

    The information that is not in red is the header information (generally does not need to be modified). The information in red is the encryption status of the KVM.

    0x00: non-encrypted state

    0x01: encrypted

  2. Set the ID using the IPMItool.

    To prevent unauthorized users from connecting to the BMC through the local KVM console and using the KVM function, the BMC needs to verify the user identity based on the user ID. You can use the IPMITool to set the ID. You can run either of the following commands to set the ID:

    Command 1:

    ipmitool -I lanplus -H 192.168.2.100 -U root -P <Password> raw 0x30 0x93 0xdb 0x07 0x00 0x04 0x00 0x0 0x0 0x0 0x3 0x72 0x6f 0x6f 0x74 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0

    Parameter description:

    -I lan: indicates network access. -I lanplus indicates encryption, and lan indicates no encryption.

    -H 192.168.2.100: BMC IP address. Set it based on the site requirements.

    -U root: BMC local user name. Set it based on the site requirements.

    -P <Password>: indicates the BMC user password. Set this parameter based on the site requirements.

    raw 0x30 0x93 0xdb 0x07 0x00 0x04 0x00 0x0 0x0 0x0 0x3 0x72 0x6f 0x6f 0x74 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0: The text in red is divided into three parts.

    Part 1: 0x0 0x0 0x0 0x3 before the red part indicates the identification ID in little-endian format. The ID is used for communication between the KVM and console. The validity period of the identification ID is 2 minutes. The ID becomes invalid immediately after being verified.

    Part 2: The last 16 bytes 0x72 0x6f 0x6f 0x74 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 indicate the user name.

    Part 3: The last byte indicates whether to open the KVM in shared mode or exclusive mode.

    0x00: shared mode

    0x01: exclusive mode

    Command 2:

    ipmitool -I lanplus -H 192.168.2.100 -U root -P <Password> raw 0x30 0x94 0xdb 0x07 0x00 0x21 0x06 0x00 0x00 0x37 0x00 0x24 0x00 0x00 0x00 0x03 0x06 0xBD 0x43 0x29 0x77 0x3F 0xC3 0x34 0x36 0x75 0x96 0x4B 0x67 0xEE 0x72 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x72 0x6f 0x6f 0x74 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

    -I lan: indicates network access. -I lanplus indicates encryption, and lan indicates no encryption.

    -H 192.168.2.100: BMC IP address. Set it based on the site requirements.

    -U root: BMC local user name. Set it based on the site requirements.

    -P root: BMC user password. Set this parameter based on the site requirements.

    raw 0x30 0x94 0xdb 0x07 0x00 0x21 0x06 0x00 0x00 0x37 0x00 0x24 0x00 0x00 0x00 0x03 0x06 0xBD 0x43 0x29 0x77 0x3F 0xC3 0x34 0x36 0x75 0x96 0x4B 0x67 0xEE 0x72 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x72 0x6f 0x6f 0x74 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

    The part that is not in red is the header information (generally, the header information does not need to be modified). The part in red is divided into four parts.

    Part 1: The 0x0 0x0 0x0 0x3 before the red part is the identification ID in little-endian format. The validity period of the identification ID is 2 minutes. The identification ID becomes invalid after one login.

    Part 2: 32 bytes after 0x0 0x0 0x0 0x3

    0x06 0xBD 0x43 0x29 0x77 0x3F 0xC3 0x34 0x36 0x75 0x96 0x4B 0x67 0xEE 0x72 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83 0x83

    This field is used when the encryption mode is enabled. This field is invalid in non-encryption mode and can be set to any value in non-encryption mode.

    Part 3: The last 16 bytes of the encryption field indicate the user name.

    0x72 0x6f 0x6f 0x74 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00

    The last byte indicates whether to open the KVM in shared or exclusive mode.

    0x00: shared mode

    0x01: exclusive mode

  3. Invoke the corresponding Uniform Resource Locator (URL). The URL format is as follows:

    https:// 192.168.2.100/remote_access.asp?authParam=3&lp=en&openWay=html5

    In the URL, the parameters in red can be modified based on the site requirements.

    Parameter description:

    192.168.2.100: indicates the IP address of the BMC to be accessed. Set this parameter based on the site requirements.

    authParam: indicates the ID set by using IPMITool. authParam=3 is obtained by converting 0x00 0x00 0x00 0x03 into a decimal number.

    Note: The ID must be represented in decimal notation.

    lp: indicates the current language, which can be Chinese or English.

    Note: lp=cn indicates Chinese, and lp=en indicates English.

    openWay: (optional) indicates that the KVM is opened in html5 or java mode. The default value is java.