iDRAC & iLO: setup, generations and license tiers
The out-of-band controller is what lets you run a server you have never physically touched. Here is how iDRAC and iLO differ, how to bring one up from the pull-tag password, and which license tier you actually need — the detail that quietly decides whether a refurbished unit can be reinstalled from your desk.
What iDRAC and iLO actually are
iDRAC (Dell) and iLO (HPE) are the baseboard management controllers built into every rack server — a small computer on the motherboard with its own processor, memory and network port that runs whether the host is powered on, hung or fully off. Through it you power-cycle the machine, watch POST, read fan and temperature sensors, mount an ISO and reinstall the operating system, all remotely. Lenovo calls its equivalent XClarity Controller (XCC). Both iDRAC and iLO expose a web UI, IPMI, and the modern Redfish API.
Because the controller runs independently of the OS, it is the single most useful thing in a data center you cannot walk into — and, when buying used, the feature buyers most often get wrong. What you can do remotely is gated by a license tier, and that tier is exactly what a cheap refurbished unit tends to be missing.
Generations: match the controller to the server
The controller generation is fixed by the server generation — firmware is not cross-compatible, so an iDRAC9 board cannot be flashed to iDRAC10. When you compare quotes, read the controller as a proxy for how modern the platform is:
| Controller | Server generation | Example models | Status in 2026 |
|---|---|---|---|
| iDRAC8 | Dell 13G | R630 / R730 | Legacy |
| iDRAC9 | Dell 14G–16G | R640 / R650 / R660 / R760 | Volume install base |
| iDRAC10 | Dell 17G | R670 / R770 (Xeon 6) | New, 2025 onward |
| iLO 5 | HPE Gen10 / Gen10 Plus | DL380 Gen10 | Cheapest used 2U |
| iLO 6 | HPE Gen11 | DL360 / DL380 Gen11 | Volume install base |
| iLO 7 | HPE Gen12 | DL380 Gen12 (Xeon 6) | New, FIPS 140-3 L3 |
iDRAC license tiers (Dell)
Dell layers iDRAC features into tiers. The one that matters for remote work is Enterprise — it is where the graphical console and virtual media live.
- iDRAC Basic — health and sensor monitoring, basic remote power control. Ships on some entry servers.
- iDRAC Express — included on most PowerEdge racks; adds richer monitoring, iDRAC Direct and the Lifecycle Controller for local firmware/driver management.
- iDRAC Enterprise — the working tier: HTML5 virtual console (KVM), virtual media to mount an ISO and reinstall remotely, directory/AD integration, and more automation.
- iDRAC Datacenter — Enterprise plus advanced thermal and power telemetry, serial-over-LAN and the deepest automation; mostly for large fleets.
iLO license tiers (HPE)
HPE splits iLO the same way. iLO Standard is free on every ProLiant; the graphical console and virtual media are the paid Advanced tier.
- iLO Standard — included free: health monitoring, remote power on/off/reset, basic web UI and Redfish.
- iLO Advanced — the working tier: the Integrated Remote Console (graphical KVM), virtual media, directory integration, email alerting and console record/replay.
- iLO Advanced Premium Security — Advanced plus runtime firmware verification and stricter security features for compliance-driven estates.
The one capability that decides a used purchase: remote OS install
Almost every buyer wants the same thing from the controller — to mount an ISO from their desk and install or repair the operating system without sending anyone to the rack. That single capability (graphical console plus virtual media) sits behind iDRAC Enterprise and iLO Advanced. On the base tier you can watch the server and power it, but you cannot reinstall it. This is why the license tier, not the CPU, often decides whether a refurbished unit is actually usable for you:
| Capability | iDRAC minimum | iLO minimum |
|---|---|---|
| Health and sensor monitoring | Basic | Standard |
| Remote power on / off / reset | Basic | Standard |
| Redfish API automation | Express | Standard |
| Graphical remote console (KVM) | Enterprise | Advanced |
| Virtual media — mount ISO, remote OS install | Enterprise | Advanced |
| Directory / Active Directory integration | Enterprise | Advanced |
| Advanced power / thermal telemetry | Datacenter | Advanced Premium |
First-time setup, step by step
Bringing up a controller from a factory state takes about ten minutes and is the same shape on both platforms:
- Cable the dedicated management port (labelled iDRAC / iLO). If the server has no dedicated port, the controller shares the first LOM — plan the VLAN accordingly.
- At power-on, open the setup: Dell — press F2, then iDRAC Settings, Network, set a static IP or DHCP. HPE — press F9 for System Utilities, then iLO Configuration.
- Browse to the management IP over HTTPS. Default login is per-unit, not a shared password: Dell uses user root with a random password printed on the pull-out service tag; HPE uses Administrator with the password on the tag.
- Change the default password immediately and create named accounts with roles. Leave the shared factory credential behind on day one.
- Open the HTML5 console, attach an OS image through Virtual Media, and install — this is the step that needs iDRAC Enterprise or iLO Advanced.
- Update the controller firmware to match the server generation: Dell via the Lifecycle Controller, HPE via the Service Pack for ProLiant (SPP).
- Enable IPMI-over-LAN or Redfish only if you automate against them; otherwise leave legacy interfaces off.
Security hardening for day one
The management controller is a full remote-power path into the machine, so treat it like one:
- Replace every default credential with a unique per-server password; never reuse one across a fleet.
- Put management ports on their own isolated VLAN, never on the public internet.
- Install a real TLS certificate and disable old ciphers.
- Turn off IPMI and any legacy console you do not use.
- Keep firmware current — iDRAC9/10 and iLO 6/7 anchor the boot chain in a silicon root of trust, and iLO 7 on Gen12 adds FIPS 140-3 Level 3 and post-quantum firmware signing.
What to confirm before you pay (importing from China)
This is where the money is. A tested refurbished server can look identical to another and be far less useful because it ships on the base management tier. Before the balance is due, get these in writing:
- The exact license tier — iDRAC Basic/Express/Enterprise/Datacenter, or iLO Standard/Advanced. Many used units ship base-only, which blocks remote OS installs.
- That the controller generation matches the server generation (an iLO 6 board belongs on a Gen11 server, not a Gen10).
- That the license is bound to the unit’s service tag/serial and stays with the machine.
- A short iDRAC/iLO log export as part of pre-ship evidence: power-on hours, ECC counters, thermal history and PSU events for that specific unit.
How we ship it
We supply Dell PowerEdge, HPE ProLiant and Lenovo ThinkSystem as new factory CTO or as tested refurbished units, and we state the iDRAC/iLO license tier on every quote. If you need Enterprise or Advanced for remote installs, we either include it or price it in rather than leave you to discover the gap on arrival. We sell EXW Hangzhou and ship every machine by air. If you are importing for the first time, we help appoint a freight forwarder who delivers to your door in 1–2 weeks.
Frequently asked questions
Do I need iDRAC Enterprise or iLO Advanced?
If you ever want to install or repair the operating system remotely, yes. The graphical console and virtual media that let you mount an ISO from your desk live in iDRAC Enterprise and iLO Advanced. Health monitoring and remote power control work on the base tiers.
Can I add the license later?
Yes. Both are software licenses you can buy and apply to an existing server — an iDRAC Enterprise upgrade or an iLO Advanced key. It costs more after the fact than specifying it at purchase, and the key is tied to that server’s service tag.
Where is the default password?
On current Dell (14G and later) and HPE servers it is a unique factory password printed on the pull-out tag at the front of the chassis, not a shared default. Change it on first login.
Does a refurbished server include the Enterprise or Advanced license?
Often not — many used units ship with the base tier only. Always confirm the tier in writing before paying; we state it explicitly on every quote.
iDRAC or iLO — which is better?
Both are mature. iDRAC 9/10 is the most widely known and heavily scripted; iLO 6/7 has a clean console and, on Gen12, leading firmware-security certifications. Pick the one your team already operates.
Related
Specs and ships enterprise and GPU servers from our Hangzhou warehouse. These guides come from real orders and burn-in benches, not spec sheets.
About QingzhiGet a quote in 1 hour
Send us your configuration or your requirement — we confirm parts, price and lead time, and help you make sense of the import side.