PrimeKey’s integrated Lights On (PiLO) allows you to interact with the Trust Anchor using a touchscreen.
Additionally, you can access the PiLO by connecting your web browser to the PiLO network rather than using the touchscreen. This requires that you configure the network address of the PiLO Ethernet port, see Network Ports.
The PiLO is delivered with a pre-configured IP4 address, noted in the SEE delivery notes.
After you power on the SEE and the TA integrity tests are successfully completed, the PiLO displays the main management page.
The MANAGE page, displayed when SEE has completed the FIPS tests, contains the following management options.
Power On Platform
Select Power On Platform to make the PiLO send the power-on signal to the TA. The TA then attempts to validate the SFP boot image and if the validation is successful, the TA will provide power to the SFP.
Note that the Power On Platform button is disabled if the SFP is already powered on.
Select Reboot Platform to re-boot the SFP by making the TA send the reboot command to the SFP. Note that the reboot command may be ignored by the SFP.
The Reboot Platform button is disabled by default until the SFP has completed its boot-up sequence.
Reboot Core Trust
Press Reboot Core Trust to re-boot the Trust Anchor (TA) (previously known as the Core Trust).
If the SFP is powered on and you press Reboot Core Trust to re-boot the TA, then power will be immediately removed from the x86 mainboard. This may damage the mainboard and, if your application is executing, may result in data loss.
Once the TA has rebooted, it will automatically execute the FIPS 140-2 Level 3 integrity tests. The tests cannot be by-passed.
Help On Settings
Depending on the version of your SEE device, this option provides help information about PiLO operations.
Power Off Platform
When selected, the TA sends a signal to the SFP to start the shutdown process of the SFP. Any started virtual machines will be shut down.
The Power Off Platform button is only available for selection when the SFP is powered on.
No confirmation or authentication is required to shut down the SFP. Once selected, the shutdown process cannot be terminated. If the SFP does not respond to the shutdown request, the TA will forcibly shut down the SFP after a few minutes by removing the power from the mainboard.
Ensure that your virtual machines acknowledge the ACPI shutdown signal or that you have manually shut down all the current executing virtual machines. Failure to do this may result in data loss.
Reboot Touch Screen
Select Reboot Touch Screen to re-boot the PiLO (controlling the touchscreen). A re-boot of the PiLO is required once you have re-assigned a new network address to the PiLO using the touchscreen.
Re-booting the PiLO does not interfere with the operation of either the TA or the SFP. Thus if the SFP is powered on, re-booting the PiLO will not affect any operations of the hypervisor or the virtual machines executing on the hypervisor.
Select Shutdown Device to shut down the TA and the PiLO.
The Shutdown Device button should never be used when the SFP is powered on since it may damage the mainboard and/or result in data loss. If Shutdown Device is selected when the SFP is powered on, the TA will immediately remove any power to the SFP.
The Messages page provides a log summary of the Trust Anchor and the SFP and lists recent TA and SFP log messages.
SFP log messages are prefixed SFP as shown in the following example.
Note that the log summaries are currently not exportable.
The Status page provides status details when the SFP is operational.
PiLO displaying the various status gauges of the SFP
The Fan Speed gauge refers to the 3 external fans controlled by the PiLO. The PiLO automatically adjusts the speed of these fans based on the CPU temperature reported by the SFP.
Note that the STATUS page will not display any data when the SFP is powered off.
Select Config multiple times to toggle the display of additional configuration pages.
The Network configuration page allows you to set the IP4 address of the PiLO using the onboard keyboard.
Alternatively, you can use your web browser connected to the PiLO to specify the network configuration, see PiLO Network.
PiLO displaying configuration of the PiLO IP4 network address
Specify the IP4 configuration fields and press OK to send the data to the PiLO.
Press REFRESH to read the current IP4 information and display it.
You need to re-boot the PiLO for the new IP address to take effect. Re-booting the PiLO does not affect the TA or the SFP.
The default timeout before the browser screen saver is activated is 15 minutes. To change the timeout, specify a time in the Screensaver timeout value in minutes field.
PiLO touchscreen/browser displaying the data entry page for setting the PiLO date/time
The Screen Saver page also allows you to set the date and time of the PiLO. This is useful if the PiLO has lost the date/time configuration. Note that you can also configure the date and time of the PiLO by logging into the PiLO using SSH and the command line.
The PiLO does not synchronize its internal clock using a network time server and hence over time, the internal clock may drift. In such a case, use the Set UTC date/time setting to correct the values. The PiLO expects UTC format read from your current browser.
Allows you to enter the speed (in percentage) of the 3 external fans located outside the epoxy resin. By default, with the SFP powered off, the fans run at full speed which could create a lot of noise.
PiLO displaying the configuration for external fans
The FAN SPEED setting is only useful when the SFP is not powered on. When the SFP is powered on, the application executing on the SFP, reading the CPU temperature, determines the speed of the fans.