Trending Articles
Trending Topics
Trending
Along with its latest HPE ProLiant Gen12 servers, HPE announced an update from ILO 6 to ILO 7 in early 2025. Here, we explain the key differences.
Edge-to-cloud, built to transform your business. Learn more about it here.
When it began in 2002, HPE Integrated Lights-Out (iLO) was a simple tool to help IT teams manage HPE servers remotely. Rather than physically visit a server in a data center, they could log into the console as if they were there. HPE kept improving the tool over the next decade, with more security features, faster performance and power-management tools, but the most notable change came in 2012 with iLO 4 and the Silicon Root of Trust – a firmware defense that we cover in more depth below.
iLO moved into the AI era with iLO 6 in 2021, with AI-enhanced analytics and automation, but the latest version, iLO 7, brings a modern look that not only makes it easier to use but brings the latest AI-driven insights for predictive – rather than reactive – maintenance.
It also provides unprecedented levels of security, to the point that HPE believes it is leading the way. “We safeguard every phase of the server life cycle, from manufacturing to end of life,” said Krista Satterthwaite, Senior Vice President and General Manager, Mainstream Compute at HPE, during the launch briefing for the ProLiant Gen 12 series. “With our HPE Gen 12 servers, we’re delivering the latest ILO features with additional security.”
In particular, they will include an independent security processor that “provides unparalleled tamper resistant protection for keys, passwords and security configuration”.
Before we move onto what makes Gen 12 servers unique, we should introduce one of the key concepts behind HP iLO since version 4. Called the “silicon root of trust”, this embeds a unique digital fingerprint into the server chip at the factory. This can’t be changed by you or anyone.
Only this chip can sign off on the firmware that’s running, which makes it virtually impossible for an attacker to plant malicious code into your servers. It also means that if something goes wrong – perhaps the latest firmware is unstable within your setup – that it will revert back to the latest working firmware to minimize downtime.
Its power extends beyond firmware and into components such as drivers and OS boot loaders, which again means you have an extra level of protection against attacks. It will also monitor firmware and components, to ensure that you’re always up to date, and automate tasks (such as power management) that you might previously have delegated to third-party software.
And, when it comes time to decommission or repurpose the server, HPE’s Silicon Root of Trust means you can permanently erase data and security settings with no way for anybody to retrieve them (again, unlike software).
With ProLiant Gen 12 servers, HPE has added a new layer of hardware protection called Secure Enclave. This independent security processor provides tamper-resistant protection so that you know no-one can access, or alter, your keys and passwords. Think of it as enhanced protection against both physical and digital intrusion.
One final thing on security: the latest Gen 12 servers are the first servers to meet quantum resistant standards thanks to iLO firmware that meet the tough NIST SP800-208 standards. So not only is your data protected against this generation’s threats, but the quantum generation to follow.
As hybrid IT environments and edge computing continues to grow, so does the need to centralize management of distributed compute resources. Modern compute management offers a range of capabilities, from improving flexibility to hardening security. Compute environments are not on a path to becoming less complex, so it pays to simplify the way you manage them.
Just as HPE has refreshed its GreenLake interface, it has also updated the look of iLO 7. It’s a modern user interface built around workflows, with cards that let you view key details at a glance.
For example, the iLO 7 interface has been streamlined into six frequently used areas: the Dashboard, Firmware, Host, Security, HPE Apps and iLO Settings. Shortcuts to all six sit on the left-hand side so you can instantly jump between them. There’s also a new search function that works across iLO 7.
You can configure the Dashboard as you wish, but the default includes an instant view of all the most important details – for example, host health and levels of security risk. You can then click through to find more details.
However, one of the big advantages of the new design is that key information is now presented on the cards, so you won’t necessarily need to click through to find what you’re looking for. Colour-coded designs also make it easy to see areas that need attention.
Let’s say you see a red diamond signifying there’s a risk next to “iLO Security”. Clicking through this link may reveal that there have been critical events in the Security log. You can then check through the list of flagged events to determine which need you to take action.
“And it’s faster,” said Satterthwaite “with up to 30% decrease in OS boot time and up to three times faster operations, which is just pure admin productivity gain.”
There are three other new features you’ll find in HPE iLO 7. One is a sign of the times: liquid cooling leakage detection. If there’s a leak in the liquid cooling modules, the server will power off and you’ll find logs for leakage detection in the iLO 7 interface.
It also offers secure in-band access through iLO Virtual NIC. To quote HPE’s support page: “The iLO connects to the host system through a USB interface where the iLO is physically connected to host system’s USB-Enhanced Host Controller Interface (EHCI). The host OS uses the Network Control Model (NCM) driver to emulate a virtual Ethernet interface.”
It also gives you access to the iLO Service Port, a dedicated USB-C port built into the latest ProLiant Gen 12 servers. You can use this to connect a host PC – running Windows, macOS or Linux – and then view the iLO web interface on the connected computer. The service port can also be used to download the Active Health System Log.
