====== Industry PC ======

======  Instructions for the initial setup of IPC Systems  ======
======  RaidMediaSystems Supermicro X11SPL-F (FAIR)  ======

=====  1. Scope  =====

This document describes the setup and initial commissioning of the 90 Supermicro X11SPL-F (FAIR) IPCs procured from RaidMediaSystems in 2021.

=====  2. Tools  =====
Following tools are required for full configuration and commissioning of the IPC systems. \\
  * Linux PC with LAN access to ACC network, resp. BEA-DAT hardware database
  * VGA cable to monitor
  * Two power cables
  * Keyboard acces to CPU
  * Two LAN patch cables (IPMI and CPU)
  * Access to BEA-DAT Barcode Printers (small and large labels)
  * Web browser
For the Moment there is sdlx040 prepared for this type of work.

=====  3. Integration steps  =====
====  3.1 DHCP  ====
RaidMediaSystems is able to provide hardware data for each individual system before or at delivery time. \\
Besides all serial numbers, the MAC addresses of CPU and IPMI are provided. \\
As a first step, it is recommended to request valid IP addresses and network names for the new products. \\
A mail has to be sent to ACO (Pfister, Vincelli) with the MAC addresses (LAN1 for CPU), \\
a proposed network name and a valid boot server or a valid exemplary FEC name to be copied from. \\

Example DHCP parameter: server="fsl00c" filename="/lobi/pxe/pxelinux.0" \\
The network names for CPUs (FEC) are always: sddscXXX \\
The network names for IPMI (FEC) are always: sddscXXXrm \\

**Remark: dsc means “device stub controller”, rm means “remote”** \\
**NB: for the IPC procurement FAIR from 2021 all IPCs are already registered and provided with IP for LAN and IPMI.**

====  3.2 Unboxing  ====
After delivery, carefully check the packaging and in case of damage, file a complaint, if necessary. \\
The usual scope of delivery for a system is the IPC preconfigured for PXE boot (without harddrive) and power cables.

====  3.3 Database, barcode and label  ====
As soon as the IP addresses of IPMI and CPU are available, the systems should be registered in the BEA-DAT hardware database by assigning a CID and a barcode. \\
The database is located here: http://sdlx046.acc.gsi.de:8080/bihw/login \\
To access the database you need an account (-> H. Bräuning). \\
First a DB entry of an existing crate is opened and copied. \\
The name and network name must be adapted and the MAC address, serial number and order number need to be filled. \\
It is helpful to enter a purpose or the sponsor for the system in the note field. \\
A large barcode (sdaprn001.acc.gsi.de or sdaprn003.acc.gsi.de) \\
with FEC name and IP, Fig. 1, shall be printed and sticked onto the front panel as shown in Fig. 2.
^ {{ :playground:large_cid_label_example.png?400 |}} ^
^  Figure 1: Barcode on IPC Chassis with IP and FEC Name  ^

^ {{ :playground:label_on_ipc_example.png?400 |}} ^
^  Figure 2: Barcode and inventory label on IPC frontside  ^

^ {{ :playground:label_on_ipc_back_side_example.png?400 |}} ^
^  Figure 3: IPC backside with labelled LAN/IPMI ports  ^

Small labels based on 6mm tape and named LAN1, LAN2 and IPMI are to be attached to the LAN and IPMI ports, as shown in the picture, on the back of the IPC.

====  3.4 BIOS  ====
The BIOS can be accessed with DEL. Check the Time and Date. \\
The 90 FAIR IPCs from the 2021 order are preconfigured with PXE network boot. \\
No further settings are required.

====  3.5 IPMI  ====
The FAIR IPCs can be fully remote controlled via the IPMI LAN port on the backside. \\
The IPMI network name follows the concept: sddscXXXrm.acc.gsi.de \\
where “rm” means “remote”. \\
Enter this network name in the location bar in your browser and login with \\
**ADMIN** / **RMS.ChangeMe** \\
After successful login change the ADMIN password to \\
**!T01…** \\
and add a root user with \\
**n0k……** -password.

====  3.6 PXE-Boot-system  ====
To boot via PXE the IPC must be correctly set-up on the tftp-boot server. \\
The default tftp-boot server is organized via login on asl740 \\
or after update to Rocky 8 on asl751. \\
This requires an ACC network account. \\
Without this preparation, the CPU will not boot from the network. \\
Execute the following steps: \\
//**ssh** <color #00a2e8>__username@asl740.acc.gsi.de__</color>  **(or asl751)**
**cd /common/tftp/lobi/pxe/pxelinux.cfg**//

Use the script: ./createPxeLink.sh <fec-name> <config-file> \\
e.g. ./createPxeLink.sh sddsc194 R8_R0_85_IPC

or manually: \\
**//gethostip <fec-name>//     e.g. sddsc010** \\
Output of gethostip looks like this: \\
sddsc010.acc.gsi.de 140.181.132.240 8CB584F0 \\
Create a symbolic link from BootOS-Config File \\
e.g. C7_R14_79_UTCA.enp15s0 to fec-name \\
**ln -s C7_R14_79_UTCA_NET10.enp15s0 sddsc010** \\
Create a symbolic link from fec-name to the HEX IP Code \\
**ln -s sddsc010 8CB584F0**

Finally boot the IPC and try a login as root / new….

=====  4. IPC checklist  =====
{{:playground:ipc-checkliste_neue_ip.png?700 |}} \\

===== Infos on Supermicro IndustryPC for GSI BEA DAQ Systems =====



===== Outphased IndustyPCs from Kontron - Do not use anymore! =====


When ordering, make sure you get a backplane with true PCIe x4 performance which is needed for Pexor, Kinpex and Pexaria cards.


===== Kontron KISS AMT/SOL Configuration =====

Kontron KISS industrial PCs feature Intel's //Active Management Technology// [[http://www.intel.com/amt|AMT]].\\
AMT allows to perform defined actions of the device via LAN (//Power Up//, //Power Down//, //Power Cycle//, //Reset//).\\
Furthermore, it provides a virtual, OS-independent serial port which can also be accessed via LAN.\\
This feature is called Serial-over-LAN (SOL) and is typically used to redirect the boot console.\\ \\
[[http://www.kraxel.org/blog/linux/amtterm/|amtterm and amttool]] are POSIX command-line programs to access the remote AMT features.\\
Usage of amtterm to connect to SOL boot consoles is straightforward.\\
In case you get a "connection refused", check the BIOS/ME settings below.



**BIOS Settings** (press <DEL> at boot screen)
  * **->** //Advanced//
    * **->** //Remote Access Configuration:// 
      * Remote Access [Disabled]
    * **->** //Intel AMT Configuration:// 
      * Intel AMT Support [Enable]
      * Unconfigure AMT [Disabled]
\\
**ME Settings** (press <CTRL-P> after boot screen)
  * **->** //Intel(R) ME General Settings// 
    * **->** //Network Setup// **->** //Intel(R) ME Network Name Settings// 
      * **->** //Host Name//
        * sddsc012 (e.g.)
      * **->** //Domain Name//
        * acc.gsi.de
      * **->** //Shared/Dedicated FQDN//
        * [*] DEDICATED  
      * **->** //Activate Network Access//
  * **->** //Intel(R) AMT Configuration// 
    * **->** //SOL/IDER//
      * **->** //Redirection Mode//
        * [*] ENABLED 
\\
Redirection of the Linux boot console is configured via the kernel append syntax.
  console=ttyS2,115200n8
Here, the virtual SOL serial port is ttyS2. It is the next higher number than the highest physically available
serial port of the machine.\\ Hence, the numbering of the virtual SOL serial port may differ for other devices.\\
If you don't know the exact serial device, a good shot is the //ttyS// with the highest number.\\
  dmesg | sed -n 's/.*\(ttyS[0-9]\+\).*/\1/p' | sort | tail -1