Supermicro X10SRL F C612 BIOS and IPMI - aesser11/home-lab GitHub Wiki

IPMI Settings

after bmc reset change the following located in configuration tab (uncheck all 3 preserve options to update cleanly)

Date and Time
Network
Users (update pwd)
Fan Mode

BIOS Settings

PCIE Bifurcation

In the BIOS under Advanced -> Chipset Configuration -> North Bridge -> IIO Configuration -> IIO1 Configuration you can configure bifurcation on a per CPU PCIe Port (not PCIe Slot).

(uncheck all 3 preserve options to update cleanly)

main
- set date/time
advanced
- sata configuration
  - disable hot plug (could cause issues with OS defaulting to write_caching)
  - ssd ports as ssd
- pci bus settings
  - all modes to efi
  - disable network stack
security
- disable CSM (validate that this doesn't break anything, shouldn't bc unraid is set to boot in uefi mode)
boot
- boot mode select = uefi
- reorder boot menu to only include flash drive (1) and application (2) boot order

** FILL IN OTHER SETTINGS HERE

Using ipmitool with linux to adjust mobo settings remotely

Pre Requisites

sudo apt-get update

sudo apt-get upgrade -y

sudo apt-get install automake gcc git libreadline-dev libssl-dev libtool make wget musl-dev ipmitool -y

fix fan thresholds on bios/ipmi update remotely

ipmitool -I lan -U ADMIN -H 192.168.1.70 sensor list all | grep FAN

ipmitool -I lan -U ADMIN -H 192.168.1.70 sensor thresh FAN1 lower 100 200 300

YOU MUST PERFORM A COLD BOOT FOR IPMI TO RE-INITIALIZE!

Reset admin password

NOTE: The number 2 there is the user id. The ADMIN account defaults to user id 2. So I'm setting user id 2's password to ADMIN which is the default, but you could put any other password there.

NOTE: this requires that you have physical access to the server and boot to a live linux flash drive to install ipmitool

Method 1

sudo ipmitool -I open user set password 2 ADMIN

Method 2

sudo ipmitool -I open lan set 1 password NEWPASSWORD

If you don't know which channel is your ethernet interface, just page through them one at at time, like so:

ipmitool -I open channel info 1

Channel 0x1 info:
  Channel Medium Type   : 802.3 LAN
  Channel Protocol Type : IPMB-1.0
  Session Support       : multi-session
  Active Session Count  : 0
  Protocol Vendor ID    : 7154
  Volatile(active) Settings
    Alerting            : disabled
    Per-message Auth    : disabled
    User Level Auth     : enabled
    Access Mode         : always available
  Non-Volatile Settings
    Alerting            : disabled
    Per-message Auth    : disabled
    User Level Auth     : enabled
    Access Mode         : always available

Note that the medium type is "802.3 LAN". That's the one you want. Other channels may look like this:

ipmitool -I open channel info 2

Channel 0x2 info:
  Channel Medium Type   : Serial/Modem
  Channel Protocol Type : IPMB-1.0
  Session Support       : single-session
  Active Session Count  : 0
  Protocol Vendor ID    : 7154
# ipmitool -I open channel info 3
Channel 0x3 info:
  Channel Medium Type   : System Interface
  Channel Protocol Type : KCS
  Session Support       : session-less
  Active Session Count  : 0
  Protocol Vendor ID    : 7154

IPMI key reverse engineering

https://peterkleissner.com/2018/05/27/reverse-engineering-supermicro-ipmi/

can also use this script

#!/bin/bash
read -p "IPMI MAC: " macaddr
echo -n $macaddr | xxd -r -p | openssl dgst -sha1 -mac HMAC -macopt hexkey:8544E3B47ECA58F9583043F8 | awk '{print $2}' | cut -c 1-24 | sed 's/./&-/4;s/./&-/9;s/./&-/14;s/./&-/19;s/./&-/24;'

IPMI SSH commands

update fan thresholds (might be outdated)

FAN1: /system1/sensors1/sensor017
FAN2: /system1/sensors1/sensor018
FAN3: /system1/sensors1/sensor019
FAN4: /system1/sensors1/sensor020
FAN5: /system1/sensors1/sensor021
FANA: /system1/sensors1/sensor022

cd /system1/sensors1/ `show sensor017

cd sensor017 -- not sure about this one

set [-options] [target] <property name => <value> -- help for the show command but can't use set on fan sensors