...
Document Version Release Date Details 2 February 8, 2023 Updated Resolution, issue is fixed with iLO version 2.55. 1 August 17, 2021 Original Document Release. On HPE ProLiant Gen10/Gen10 Plus servers or HPE StoreEasy Gen10 servers configured with Integrated Lights-Out 5 (iLO 5) firmware version 2.41 (or earlier) and using HPE Scripting Tools for Windows Powershell to execute iLO cmdlets script on hosts with IPV4, IPV6 or local connection to iLO 5, when running "Add-HPEiLODirectoryGroup" cmdlet with "SystemRecoveryConfigPrivilege" and "GroupSID" parameters set to "Yes", it is not possible to configure Active Directory Groups with permissions enabled in iLO 5 Directory Group settings. Note: When this issue occurs, permissions are not enabled in iLO 5 Web interface under Administration -> Directory Groups and "Status = PARTIAL" is returned when executing the "Add-HPEiLODirectoryGroup" ILOCmdlet with "SystemRecoveryConfigPrivilege" and other permissions parameters set to "Yes" on the command line as shown in the following example: PS C:\Program Files (x86)\Hewlett Packard Enterprise\PowerShell\Modules> Add-HPEiLODirectoryGroup -Connection $con -GroupSID 'S-1-5-21-3378864806-258445030-1681850372' -GroupName "TestGroup" -LoginPrivilege "Yes" -HostStorageConfigPrivilege "Yes" -HostNICConfigPrivilege "Yes" -SystemRecoveryConfigPrivilege "Yes" -UserConfigPrivilege "Yes" -RemoteConsolePrivilege "Yes" -iLOConfigPrivilege "Yes" -VirtualPowerAndResetPrivilege "Yes" -VirtualMediaPrivilege "Yes" -HostBIOSConfigPrivilege "Yes" | Format-Custom class ReturnStatus { IP = 10.xxx.xxx.xxx Hostname = Status = PARTIAL StatusInfo = class StatusInfo { Category = General Message = GroupName value not found.ResourceMissingAtURI AffectedAttribute = [ /redfish/v1/RoleCollection/ ] } }
Any HPE ProLiant Gen10/Gen10 Plus servers or HPE Store Easy Gen10 servers configured with Integrated Lights-Out 5 (iLO 5) firmware version 2.41 (or earlier) and using HPE Scripting Tools for Windows Powershell to execute an iLO cmdlets script.
This issue has been fixed with HPE Integrated Lights-Out 5 (iLO 5) version 2.55 (or later). As a workaroundfor previous versions, follow the steps below: 1) Run "Connect-HPEiLO" cmdlet to establish connection to iLO on the target HPE ProLiant or Store Easy Gen10 server. Example: PS C:\Users\Administrator> #$con = Connect-HPEiLO -Address 10.xxx.xxx.xxx -Username "xxxxxxxx" -Password "xxxxxxxx" -DisableCertificateAuthentication 2) Run "Add-HPEiLODirectoryGroup" cmdlet without "SystemRecoveryConfigPrivilege" and other permissions parameters set to "Yes" on same command line as indicated below. Example: PS C:\Users\Administrator> Add-HPEiLODirectoryGroup -Connection $con -GroupName 'TestGroup' -GroupSID 'S-1-5-21-2758641919-3968728078-2214261853-1003' -LoginPrivilege "yes" 3) To enable permissions in iLO, run "Set-HPEiLODirectoryGroup" cmdlet without the GroupSID parameter and include "SystemRecoveryConfigPrivilege" and other permissions parameters set to "Yes". Example: PS C:\Users\Administrator> Set-HPEiLODirectoryGroup -Connection $con -GroupName "TestGroup" -LoginPrivilege "Yes" -HostStorageConfigPrivilege "Yes" -HostNICConfigPrivilege "Yes" -SystemRecoveryConfigPrivilege "Yes" -UserConfigPrivilege "Yes" -RemoteConsolePrivilege "Yes" -iLOConfigPrivilege "Yes" -VirtualPowerAndResetPrivilege "Yes" -VirtualMediaPrivilege "Yes" -HostBIOSConfigPrivilege "Yes" | Format-Custom RECEIVE PROACTIVE UPDATES : Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively in your e-mail through HPE Support Alerts. Sign up for Support Alerts at the following URL: HPE Email Preference Center. NAVIGATION TIP: For hints on navigating HPE.com to locate the latest drivers, patches and other support software downloads, refer to the Navigation Tips document. SEARCH TIP: For hints on locating similar documents on HPE.com, refer to the Search Tips document.