HPE iLOrest changelog

The latest iLOrest packages can be freely downloaded from GitHub.

A PyPI project is also available.

Fixes:

• Fixed an issue with the appaccount command where the create subcommand failed when the application account was cleared or absent in TPM, and the delete subcommand incorrectly reported success even though the account was still present in iLO.
• Fixed an issue with the multiconnect parameter of the computeopsmanagement command not displaying the proper message when the iLO version is below the minimum supported version.
• Fixed an issue with the flashfwpkg command where firmware update failed for drives connected behind MR932i-p Gen12 controllers during SPP deployment, and a TypeError caused firmware flashing to fail for Solidigm drives.
• Fixed an issue with the save command failing with return code 255.
• Fixed the iLOrest installer referencing the deprecated --latestschema option.
• Fixed an issue with the rawget command failing to respond to out-of-band calls in time.
• Fixed an issue with the rawget command where out-of-band execution returned an error "Failed to detect iLO version."
• Fixed an issue with the logconfig command where the ilorest.log file was not being updated on ESXi platforms.
• Fixed an issue where parallel concurrent in-band iLOrest sessions caused a Blob2OverrideError (a blobstore conflict error) after maximum retries were exceeded.
• Fixed an issue where hpblob errors were displayed during iLOrest login in an Intelligent Provisioning environment.

Enhancements:

• Enhanced the flashfwpkg command to support NVIDIA Hopper GPU firmware updates.
• Enhanced the rawget command with a new --sessionid option to allow session-based authentication.
• Enhanced iLOrest to honor boot-to-IP in HPE Composer 2+ environments.
• Enhanced blobstore support to allow access to additional namespaces and keys.

Fixes:

• Fixed an issue with details subcommand under appaccount command to display appropriate error message when application account is inactive.
• Fixed an issue with appaccount command for the subcommands details delete exists to work with the last four digits of Application Account IDs.
• Fixed an issue with rawgetcommand to accept X-Auth-Token.
• Fixed an issue which is preventing the logconfig command from configuring logging settings on ESXi platforms.
• Fixed an issue with load command where the operation of setting the ThermalConfiguration and FanPercentMinimum configurations where failing.

Enhancements:

• Enhanced rawgetcommand to reduce the time the command takes to execute from 13 seconds to 4 seconds.
• Enhanced rawgetcommand to make it work with HPE encoded credentials.
• Enhanced appaccount command to make it work with HPE encoded credentials.
• Enhanced appaccount command for handling of orphaned Application Accounts in create subcommand if TPM was cleared.
• Enhanced the delete subcommand of appaccount command to restrict deletion of other host applications from iLOrest , unless credentials are provided.
• Enhanced log file management by centralizing log files into the ilorest_logs directory within the current working directory.
• Enhanced logconfig command by adding an option to completely disable logging using disable-logs parameter.

Fixes:

• Fixed an issue with uploadcomp command where Broadcom firmware package upload to iLO repository failed.
• Fixed an issue with flashfwpkg command where Seagate firmware package flash failed with "Flash unsupported by iLO Error" on Gen10/Gen10+ servers.
• Fixed a critical issue with get command when using certificate-based authentication.
• Fixed an issue where CHIF login failed with blob2overrideerror after retry attempts were exhausted.

New Features:

• Added multiconnect parameter to computeopsmanagement command for onboarding multiple or range of iLO's to COM.
• Added new logconfig command to configure logging behavior including debug logging, log directory, and log rotation settings. This command provides persistent configuration across sessions.

Enhancements:

• Optimized login command to fetch iLO generation only once during the login process.
• Updated firmwareupdate command to support the new "Backingup" firmware update state.
• Added reactivate subcommand to appaccount command for reactivating expired application account.
• Enhanced logging capabilities with configurable log file rotation and retention settings.
• Improved logging configuration management with centralized control through the new logconfig command.

Fixes:

• Fixed an issue with IscsiConfigcommand where response showed duplicate entries.
• Fixed an issue with Serverlogscommand where --mpfile option did not load the configurations.
• Fixed an issue with Uploadcompcommand where uploading a component which is connected behind the controller of the server was failing.

Enhancements:

• Enhanced rawgetcommand to provide the response in stderr if the option --response is given.
• Enhanced appaccount command to give an exception if non-root user tries to perform appaccount functionalities.
• New global iLOrest optional argument to omit the creation of an info log file (iLORest.log).

Fixes:

• Fixed an issue with the save command, when selector is not given along with the save command the command response was NULL.
• Fixed an issue with appaccount command where the apptoken was getting deleted while product upgrade.
• Fixed an issue with signing project for RPM products, to reflect new GPG key which is signed by SHA-256.
• Fixed an issue with the get command & list command where NetworkAdapter property was returning missing data in response for Ids and displaying only settings data.
• Fixed an issue with flashfwpkg command where warning was being thrown while NVMe and SATA drive components flashing.
• Fixed an issue with the list command where Bios property was returning NULL in response for @odata.*

Enhancements:

• Enhanced flashfwpkg command to support NVMe DA drive components flashing.
• Enabled support for RHEL 9 minimal OS install.

Fixes:

• Fixed issues with ServerInfo command where prossesorID was not getting populated in the response and --fans was not giving correct result when --json is supplied, also corrected an issue where the option --software was returning generic error.
• Fixed an issue with firmwareupdate command where the URL with mix of uppercase and lowercase where not getting flashed.
• Fixed issues with the set command where the setting of WorkLoadProfile , ThermalCooling where not working.
• Fixed issues with the get command where NetworkAdapter property was returning wrong response, also fixed the issue where ComponentIntegrity was not including TPM info.
• Corrected an issue with logging mechanism where errors where getting printed twice on stdout.

Enhancements:

• Enabled support for accepting PIN as activationkey for the computeopsmanagement command
• Enhanced rawget command to not cache anything and not to construct monolith.

What's New:

• Enabled the iLO 7 support.
• appaccount command is introduced which lets the user to manage the application accounts in iLO. This command may only be used locally, in iLO 7 based servers.
• channelinterface command is introduced with option reset which would let the user to reset all CHIF channels. This command is valid only when logged in iLO 5 or 6 only.
• detectilo command is introduced which lets the user know the iLO generation of the currently logged in server.

Fixes:

• Fixed issues with createvolume command options quickdrive and customedrive related issues w.r.t iLO 5 and IOPerfModeEnabled related issue w.r.t iLO 6. Also fixed the issue of extra or incorrect drives getting filtered while creation.
• Fixed an issue with ServerInfocommand where prossesorID was not getting populated in the response.
• Fixed an issue with firmwareupdate command where the .lpk component was not getting flashed.
• Fixed an issue with the save command where the selector HpeBiosMapping did not return desired result.
• Fixed issues with the storagecontrollercommand where the options save and load did not save or load anything. Also fixed an issue where the options state did not return any response.

Enhancements:

• Enhanced the flashfwpkg command to support decoupled metadata structure for FWPKG components.
• Enhanced login command with new option no_app_account which would let the user to perform login operation without application account application account via VNIC.

Operating Systems:

This version of the iLOrest supports below operating systems

• Microsoft Windows Server 2025
• Microsoft Windows Server 2022
• Microsoft Windows Server 2019
• Red Hat Enterprise Linux 9 Server
• Red Hat Enterprise Linux 8 Server
• SUSE Linux Enterprise Server 15
• VMWare ESXi v8.0

Fixes:

• Fixed an issue with the bootorder command. New boot order was not set properly.
• Fixed an issue with the esxcli utility in ESXI 8.0.
• Fixed an issue with the certificate command. In some cases, the --getcsr option was throwing an exception.
• Fixed an issue with the ethernet command where --nameservers option was not accepting three name servers as it should.
• Fixed an issue with the select command. RDE controller information was not listing when executing list members --select StorageControllerCollection. --json.
• Fixed an issue with the flashfwpkg command. The command was not printing the returned iLO error message when the option --tpmover was supplied.
• Fixed an issue with the flashfwpkg command.The command was not working with some directly connected drives or connected behind a storage controller.
• Fixed an issue with the rawget command. The command was not displaying the returned iLO error code when a non-existent URL was supplied as input.
• Fixed an issue in the login() library function preventing the use of a OneView generated session key (SSO token). Refer to this paragraph for more information.

Enhancements:

• Enhanced the flashfwpkg command to support and flash type B components.
• Enhanced the flashfwpkg command to flash direct attached drive components correctly.

Fixes:

• Fixed an issue with the save command. The command was not working with the --multisave parameter.
• Fixed an issue with the set command. --logout was not logging the session out.
• Fixed an issue with the set command. Modification to the IP network configuration was not working as expected.
• Fixed issues with rawpost command , rawpatch command. These commands were returning an exception error when a .txt file was supplied as input.

Enhancements:

• Support for third party firmware images .pup, .fpb, .hpb enabled in both inband as well as out of band communication for flashfwpkg command

Fixes:

• Fixed an issue with the installset command. The output of this command was returning unwanted response in it prior to the fix.
• Fixed multiple issues with the Get command. EthernetNetworkInterface and Power types were wrongly displayed before the fix.

Enhancements:

• Support of 8 parallel inband operations or command executions.
• SLES 15 Sp6 support has been enabled.

Fixes:

• Fixed an issue with the get command. A get licensekey in the HpeiLOLicense schema was not displaying the license key appropriately.
• Fixed an issue with the get command. A get Oem/Hpe/thermalconfiguration in the Thermal schema was not displaying the thermal configuration information.
• Fixed an issue with the directory command. The kerberos sub-command output was empty even when configured.
• Fixed an issue with the flashfwpkg command and its forceupload option.
• Fixed an issue with the virtualmedia command. The output had misplaced data for CD and Floppy media types.
• Fixed an issue with the Backuprestore command in in-band/local mode. The output was different, depending on the iLO security state.
• Fixed an issue with the storagecontroller command where the output was empty for invalid controller and volume IDs.
• Fixed an issue with the serverlogs command where AHS download in Intelligent Provisioning environment was failing.

Enhancements:

• Enhanced the serverclone command to check the server power state before issuing a reboot.

• Availability of an iLOrest PyPI package. fully equivalent to other iLOrest packages.

Fixes:

• Fixed an issue with Serverclonecommand load where updating recovery privilege for iLO user accounts had an issue.
• Fixed an issue with ServerInfocommand power option,where power supply data was incomplete.
• Fixed an issue with MakeInstallsetcommand by correcting the input json format.
• Fixed an issue with IscsiConfigcommand where changing the iscsi boot network interface failed.
• Fixed an issue with Installset command where add and remove of recovery install set threw exception.
• Fixed an issue with MakeInstallsetcommand to correct the response to include firmware version.
• Fixed an issue with Ethernetcommand where setting iPv4 address failed.
• Fixed an issue with Uploadcompcommand where wrong error code was returned in high security mode.
• Fixed an issue with Directorycommand ldap --addrolemap where customer faced issue with adding customized privileges.
• Fixed an issue where in RHEL 9 and above error 8 was caught for logincommand
• Fixed an issue with Taskqueuecommand -r where removal of recovery task in FIPS mode threw error.
• Fixed an issue with iloresetcommand, listcommand, savecommand where commands were not able to locate the service.
• Fixed an issue with AHS log filename to have vendor name along.
• Fixed an issue w.r.t sha 256 signing in case of iLOrest Linux product.

Fixes:

• Fixed an issue with the flashfwpkg command where locked components were not flashing.
• Fixed an issue with list --json --selector HpeSecurityService. not displaying in JSON format. Same is fixed with get command as well.
• Device discovery checks in flashfwpkg command are removed as it is taken care by iLO.
• Fixed an issue with firmwareupdate command failing with error code 41 (FIRMWARE_UPDATE_ERROR) when server enabled with TPM.
• Fixed as issue where ilorest rpm not installing on FIPS enabled Linux OS.

Enhancements:

• Enhanced the ethernet command with new option --force_network_config to apply iLO network configuration.
• Enhanced flashfwpkg command with --targets option for targetted firmware update feature.
• Upgraded OpenSSL from version 1.0.2zf to 3.0.12.

Fixes:

• Fixed an AHS download issue in local in-band mode in the serverlog command.
• Fixed an issue where powercap is not able to be set.
• Fixed the installset command where it was not deleting or creating recovery install sets.
• Fixed an issue with createvolume command options quickdrive and customedrive w.r.t iLO 5.
• Fixed an issue with deletevolume command w.r.t iLO 5.
• Fixed an issue in the serverclone command where iLO account changes were not cloned.
• Fixed an issue where SecurityService instance was not found occasionally.
• Fixed an issue with storagecontroller command was not working when resources were not loaded in iLO.

Enhancements:

• Enhanced the load command with new option --force_network_config to apply iLO network configuration.
• Enhanced the installset command with mandatory --user and --password parameters while creating and deleting recovery install sets during a local in-band sessions.

Fixes:

• Fixed an issue in the directory command where option --addrolemap role delimiter was not working.
• Fixed an unhandled error when flashfwpkg command executed with --update_srs for a user without the Recovery Set privilege.
• Included a message in drivesanitize command for HPE iLO 5 for not supporting --drivereset and --status features.

Enhancements:

• Enhanced the flashfwpkg command to flash the firmware of type .HPB (HPE signed Public Binary) images.
• Added support for RHEL 9.2 ARM64 Operating System.

Fixes:

• Fixed an issue where serverinfo command did not return memory and CPU information in Gen9 servers. Note memory capacity is still not printed.
• Fixed an issue in directory ldap command where search domain delimiter was not working.
• Fixed issues with createvolume command not working with HPE iLO 5 with Storage URI.
• Included a message in drivesanitize command for HPE iLO 5 for not supporting --drivereset and --status features.
• Fixed an intermittent issue of instance not found error in storagecontroller command.

Enhancements:

• Enhanced flashfwpkg command and uploadcomponent command to handle both direct attached drives as well as controller connected drives.
• Added support for TFA (Two Factor Authentication) for remote out-of-band login.
• Added error code 85 when iLO is busy and sends back a resource not ready message.
• Added support for deletion of JBOD volumes before creating RAID volumes.
• Migrated HPE iLOrest documentation from slate to redocly.

Fixes:

• Fixed an issue where BIOS Settings not saved using iLOrest save and load commands
• Firmware Flashing via local CHIF timeout increased from 300 to 1800 seconds to facilitate multiple UBM3 backplane firmware flash.
• Fixed an issue with deletevolume command to ask for confirmation when deleting all volumes using --all option.
• Fixed an issue with virtualdrive command where the exception did not trigger the eject/unmount media.
• Fixed an issue where No error message displayed when Invalid/Non-existing drive or controller is passed while creating a logical drive using quickdrive.
• Fixed an issue where server does not reboot when virtual media is added along with reboot parameter.
• Fixed an issues with help options of some of the commands.
• Fixed metadata information for ESXi 8 ilorest component.

Enhancements:

• Added new code for iLO6 MR controller to get allowable values capabilities section during creation of volumes.
• Device Discovery check is added in flashfwpkg for PLDM component firmware flash.

Fixes:

• Fixed an issue with --nameservers option in ethernet command.
• Fixed an issue with ilolicense command where the exception did not trigger for invalid license.
• Fixed an issue with bootorder command not working for iLO6.
• Fixed an issue with serverinfo command not displaying MAC address in iLO5.

Enhancements:

• Added a new option --storageid to all storage commands, allowing for filtering by both storage id and controller id.
• Added a new option -sf to the serverclone command to save storage configurations in a custom file.
• Modified the --activationkey parameter in the computeopsmanagement command from mandatory to optional.
• All subcommands from the unifiedcertificate command have been merged into the certificate command. The unifiedcertificate command is now deprecated.

Fixes:

• Fixed an issue in save where NVMe drives are getting saved 2 times.
• Fixed an issue set command for Oem/Hpe/ThermalConfiguration.
• Fixed several issues with storagecontroller command which is an alias to smartarray command.
• Fixed an issue with logging in and logging out with sessionid option in login command.
• Fixed minor issues with createvolume and deletevolume command.
• Fixed an issue fetching storage controller details using location details.
• Fixed an issue in clearcontroller command by specifying the location details.
• Fixed an issue in login command by specifying the proxy details.
• Fixed a github reported issue by giving --nologout option for reboot command.

Enhancements:

• Added support for server cloning storage controller configurations in Gen11 (HPE iLO 6) servers.

Fixes:

• Fixed several customer issues reported in github.
• Upgraded OpenSSL to 1.0.2zf

Enhancements:

• Added support for new storage RDE URLs for iLO6 (Gen11)
• iLOLicense command is enhanced with install, uninstall and check license options.
• certificate command has new option to support SCEP (Simple Certificate Enrollment Protocol)

Fixes:

• Fixed several issues related to command and subcommand help.
• Fixed an issue in ipprofiles command to push HVT profile to Intelligent Provisioning page when server is off or in POST mode.
• Fixed issues with setpassword command when resetting password to blank in both Gen9 and Gen10 servers.
• Fixed several issues with serverclone command.
• Fixed several customer issues reported in github.
• Fixed issues in serverinfo command w.r.t. json formatting and filtering.
• Upgraded OpenSSL to 1.0.2zd

Enhancements:

• Added support for ESXi 8.0.
• Introduced smartnic command to manage Pensando and other Smart NICs

Fixes:

• Changed computeopsmanager command to computeopsmanagement
• Fixed an issue in ipprofiles command to push HVT profile to Intelligent Provisioning page. Added new option -t/--sleeptime to specify the wait time to enter Intelligent Provisioning page. Default is set to 320s(4 min).
• Fixed an InvalidFileInputError exception when deleting ipprofiles.
• Fixed an issue where login command did not prompt for password when just username is given.
• Fixed an issue where ethernet command did not display data completely.
• Fixed an issue where serverinfo --system command did not display NIC ports with iLO FW 2.70.

Enhancements:

• Added support for Red Hat Enterprise Linux(RHEL) version 9
• Added new option -t/--sleeptime to specify the wait time to enter Intelligent Provisioning page with default value to (4 min).

Fixes:

• Fixed issues serverclone command w.r.t automatic cloning of password.
• Fixed incorrect json outputs for installset and serverinfo commands to help in automation scripts.
• Fixed issues in ipprofiles command to aid in Intelligent Provisioning Job execution.
• Fixed issues in iscsiconfig --list command.
• Fixed an issue in directory show command to correctly show iLO Object Distinguished Name.
• Fixed an issue in securitystatus command with credentials security.

Feature Enhancements:

• Added support to manage ComputeOpsManagement which abstracts and orchestrates infrastructure and compute workflows.
• Added support to enable/disable enhanced download capability to ethernet command.

Fixes:

• Fixed issues in uniqueoverride option for SerialNumber and ProductId in set and load commands.
• Fixed issues related to Save and Load commands.
• Fixed incorrect json outputs for Smartarray commands to help in automation scripts.
• Fixed issues with uploadcomp w.r.t FWPKG files.
• Fixed issues with showabsent option in serverinfo command.
• Fixed issue with taskqueue command output as json format.
• Fixed issue of rawget command involving session id parameter.

Enhancements:

• Added Virtual NIC login option along with Chif for local login.
• Added Certificate login options using user-based certificates in iLO.
• Added enable_vnic and disable_vnic options in ethernet command.
• Added NVMe drive type for smartarray commands
• New error code RIS_ILO_CHIF_ACCESS_DENIED_ERROR(66) is returned if iLO denies Chif Access.
• New error codes RIS_CREATE_AND_PREPARE_CHANNEL_ERROR(67) or RIS_ILO_CHIF_PACKET_EXCHANGE_ERROR(71) is returned if there is any Chif Channel errors.
• New error code RIS_ILO_CHIF_NO_DRIVER_ERROR(69) is returned if Chif driver not found.

Fixes:

• Help command missing issue.
• Command outputs in Json format when used with -j or --json option.
• Key Error issue when saving Bios using save command.
• Multiple keys get/set related issues w.r.t. FcPorts.
• Console error issue when --logdir option used.
• Multiple help text related issues.

Enhancements:

• New Error code 84 (ILO_RIS_CORRUPTION_ERROR) is returned if RIS is found to corrupted.
• New Error code 46 (USERNAME_PASSWORD_REQUIRED_ERROR) is returned if username and password not passed when iLO is in High Security Mode
• Partition Mounting Error return text enhanced to reflect actual error.

What's New:

• Codebase migrated to Python3 from Python2.
• Upgraded OpenSSL version to 1.0.2r.
• setpassword able to set empty password.
• Introduced Ethernet command. The Ethernet command handles the Ethernet related set and get parameters like IP, DNS, and so on. This also has save and load features.
• serverclone options --silent and --quiet replaced with --auto.

Removed

• iloclone has been completely removed from iLOrest. It was deprecated since version 2.4.1 and the apparition of the serverclone command.

Fixes:

• Enhanced smartarray functionalities for creating, deleting and clearing logical drives.
• Addressed drivesanitize not formatting the drive.
• serverclone save and load related issues.
• bootorder and iscsiconfig related fixes
• Persistent memory related bug fixes.
• Miscellaneous bug fixes in rawpatch, get, set and flashfwpkg commands.

What's New:

• Provided an option to input session_key for the RedfishClient class.
• The iloaccounts command now provides the output in JSON format.
• The createlogicaldrive quickdrive command now successfully runs.
• BIOS and the poweron passwords can now be set without any password.

Fixes:

• AHS data failing to download sometimes.
• An issue with downloading AHS when iLOrest is running locally on a server.
• The privilege modification of an iLO user account that was incorrectly applied on another user.
• The body of the onebuttonerase command, so that it could POST successfully.

• Argument Parsing utilized for command line help functionality
• All commands utilize '-h' in interactive or scriptable modes. iLOrest -h can be utilized to query global help.
• Optional arguments can be supplied in any order as applicable to the relevant command or subcommand.
• iLO firmware component update command timeout increased from 420 seconds to 1200 seconds.
• serverclone command fixes:
  1. Optional argument change:
     • silentcopy (--auto) -> automatic copy (--autocopy)
  2. iLO Federation Groups
     • Privilege changes are now performed regardless of add or modify password operations. If something happens an exception is thrown and logged.
• FWPKG TypeC packages upload only .ZIP archive.
• Results command updated to utilize revised response handler from python ilorest library (response handler changes incorporated in 3.0.0).