Step by step configuration of the XSCF console for the Sun SPARC M3000 server.

I installed the new SPARC M3000 server on the rack and powered it on. The M3000 can only be configured via the serial cable connected to the serial port for XSCF. Any windows computer with hyperterminal should be able to connect to it’s console. Once the XSCF interface has been configured with an IP address and telnet has been enabled, you can then connect to it remotely across the network with telnet.

XSCF (eXtended System Control Facility is used to control, monitor, operate, and service SPARC Enterprise series servers and domains. You can power on/off the server (domain) via the XSCF interface. As long as the server is plugged into a power source the XSCF console will always be online even though the domain (server) is off. For those who are familiar with Windows servers, the XSCF is similar to the DRAC interface for Dell servers or HP Insight Manager.

When you are connected to the XSCF console, you will be prompted for a login ID. The default ID is “default” and there is no password. With this ID you will need to create a new administrative ID. You also need to be standing close to the server for this process as you will be prompted to change the panel mode switch. If you do not create a new logon ID whenever you connect to the console or when the console session times out, you will be prompted to change the panel mode switch.

login: default
Change the panel mode switch to Locked and press return…
Leave it in that position for at least 5 seconds. Change the panel mode switch
to Service, and press return…

Check the version of XSCF.

XSCF> version -c xcp
XSCF#0 (Active )
XCP0 (Current): 1090
XCP1 (Reserve): 1090

Create a user andrew

XSCF> adduser andrew
XSCF> password
password: Permission denied

Change the password for andrew

XSCF> password andrew
New XSCF password:
Retype new XSCF password:

Grant andrew the following privileges, useradm, platadm, aplatop.

XSCF> setprivileges andrew useradm platadm platop

Here is a list of all available privileges.

• Can refer to the status of any hardware mounted in a domain_n.
• Can refer to the status of any part of a domain_n.
• Can refer to the information of all system boards mounted.

• Can power on, power off, and reboot a domain_n.
• Can refer to the status of any hardware mounted in a domain_n.
• Can refer to the status of any part of a domain_n.
• Can refer to the information of all system boards mounted.

• Can refer to the status of any part of the entire server but cannot change it.

• Control of the entire system
• Can operate all hardware in the system.
• Can configure all XSCF settings except the useradm and auditadm privilege settings.
• Can add and delete hardware in a domain.
• Can do the power operation of a domain.
• Can refer to the status of any part of the entire server.

• Can create, delete, invalidate, and validate user accounts.
• Can change user passwords and password profiles.
• Can change user privileges.

• Can refer to the XSCF access monitoring status and monitoring methods.

• Can monitor and control XSCF access.
• Can delete an XSCF access monitoring method.

• Allows field engineers to perform the maintenance tasks or change the server configuration.

• When the local privilege for a user is set to none, that user has no privileges, even if the privileges
for that user are defined in LDAP.
• Setting a user’s privilege to none prevents the user’s privileges from being looked up in LDAP.

XSCF firmware has two networks for internal communication. The Domain to Service Processor Communications Protocol (DSCP) network provides an internal communication link between the Service Processor and the Solaris domains. The Inter-SCF Network (ISN) provides an internal communication link between the two Service Processors in a high-end server.

Configure DSCP with an IP address using the setdscp command.

XSCF> setdscp
DSCP network [ ] >

DSCP netmask [ ] >

XSCF address [ ] >
Domain #00 address [ ] >
Commit these changes to the database? [y|n] : y

Configure the XSCF interface with an IP address, this will be the adress you connect to via telnet to manage the console.

XSCF> setnetwork xscf#0-lan#0 -m

Enable the XSCF interface you just configured with an IP address of

XSCF> setnetwork -c up lan#0

Confiure the default route

XSCF> setroute -c add -n -g xscf#0-lan#1
XSCF> showroute -a
Destination Gateway Netmask Flags Interface
1622.10.0.0 * U xscf#0-lan#0

Configure the hostname.

XSCF> sethostname xscf#0 paris

Configure the domain name.

XSCF> sethostname -d

You must apply the network configurations with the applynetwork command.

XSCF> applynetwork
The following network settings will be applied:
xscf#0 hostname :paris
DNS domain name

interface : xscf#0-lan#0
status :up
IP address :
netmask :
route :

interface : xscf#0-lan#1
status :down
IP address :
netmask :
route :

Continue? [y|n] :yes

Please reset the XSCF by rebootxscf to apply the network settings.
Please confirm that the settings have been applied by executing
showhostname, shownetwork, showroute and shownameserver after rebooting
the XSCF.

Now reboot XSCF for the configuration to take effect.

XSCF> rebootxscf

After the reboot check the network settings.

XSCF> shownetwork -a
Link encap:Ethernet HWaddr 00:0B:5D:E3:39:B4
inet addr: Bcast: Mask:
RX packets:13160 errors:0 dropped:0 overruns:0 frame:0

TX packets:5 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1943545 (1.8 MiB) TX bytes:210 (210.0 B)
Base address:0xe000

Link encap:Ethernet HWaddr 00:0B:5D:E3:39:B5
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Base address:0xc000

Enable ssh, it will require a reboot.

XSCF> setssh -c enable
Continue? [y|n] :y
Please reset the XSCF by rebootxscf to apply the ssh settings.

Enable telnet. You probably do not need telnet if ssh is enabled.

XSCF> settelnet -c enable
XSCF> showtelnet
Telnet status: enabled

It is much easier to configure and manage XSCF via https as you do not have to remember all the commands. I will show you how to enable https by creating a Web Server Certificate by constructing the self CA.

First generate the web server private key. Remember the passphrase you will need it in the next step.

XSCF> sethttps -c genserverkey
Enter passphrase:
Verifying – Enter passphrase:

Create the self-signed web server certificate by speficying the DN.

XSCF> sethttps -c selfsign CA Ontario Toronto CupidPost Technology Center
CA key and CA cert already exist. Do you still wish to update? [y|n] :y
Enter passphrase:
Verifying – Enter passphrase:

Now enable https.

XSCF> sethttps -c enable
Continue? [y|n] :y
Please reset the XSCF by rebootxscf to apply the https settings.

Reboot with the rebootxscf command,

XSCF> rebootxscf
The XSCF will be reset. Continue? [y|n] :y

After the reboot you can connect to the XSCF console by telnet, ssh or https.

About Andrew Lin

Hi, I have always wanted to creat a blog site but never had the time. I have been working in Information Technology for over 15 years. I specialize mainly in networks and server technologies and dabble a little with the programming aspects. Andrew Lin

View all posts by Andrew Lin →

26 Comments on “Step by step configuration of the XSCF console for the Sun SPARC M3000 server.”

  1. Thanks for the article also. We’ve got an M5000 already in place that we had sun installation as part of the purchase. We went cheaper with a new M4000 so this time I had to do the initial xscf configuration before I could do anything with the box. You step by step was really helpful, much more so than the docs that sun provides. Since we keep our console access on an isolated subnet the only thing I changed was omitting the default router and did the apply and things went smoothly. What did we ever do before google?


  2. Hi, Andrew:

    This great stuff. Thanks!

    However, alas and alack, somewhere during its Data Center installation, our M3000 server lost its “mode switch” key. Without this key, we are unable to get past the XSCF login: prompt and to configure anything :-(

    Would you know of a way around this missing key problem? We’ve got the Sun Service manual and can remove the operator panel, but doing this seems a bit extreme.

    Thanks in advance,

    1. Hi Bill,

      I always wondered how long it would take for Sun to provide a replacement key. Unfortunately I do not know of a work around beside taking apart the panel and shorting the wires. Makes you wonder why Sun will not replace the key with a switch. The key looks simple enough, it does not have many groves and cuts, it makes me think that a thin bladed screwdriver may be able to turn the lock. This key reminds me of the lock I use to have on my old floppy disk case, it looks the same as the key that would open it. Sometimes I would use a screwdriver to unlock the case.

      Let me know how you make out with this predicament, I’m sure you figured out a solution by now.


      1. Hi, Andrew:

        My colleague and I were about ready to remove the Operator panel and short-out the contacts to access Service Mode. However, we figured doing so might void our Oracle/Sun warranty, so we decided to give up until we got a replacement key.

        As we headed out of the Data Center, we met an interested IT administrator who asked about our problem. After we laid it out, he took pity and spent the next 30 minutes walking up and down the DC aisles to find a possible replacement. Good luck! He found an M3000 in one of racks with its key still in place.

        Fortunately, as you noted, it’s a simple “one-size-fits-all” key, and it fit our server. Thereafter, we were able to follow your documentation and the Admin Guide to configure both XCSF and Solaris 5.10. So we’re up and happy.

        Thanks again for your helpful advice and support.


    1. You are welcome Suresh. This article seems to very popular. I guess most people struggled to figure out how to configure the XSCF console, much like I did. I had a tough time trying to figure things out and the documentation from SUN was not very helpful.

      Andrew Lin

    1. Maurizio, you are welcome. This seems to be a popular article, I am getting a lot of positive feedback. I struggled to get the XSCF console working the first time I came across it.


  3. Was looking over the information you provided. It will come in handy when I sart to configure my M3000. I have a few questions
    1)can the dscp net work set like in the example?
    2) after you did the setnetwork, you do a shownetwork -a. But the IP address are different. they should be the same right?

    1. 1) Yes, you can use the same IP address and steps as I have shown, it is the default IP. If this IP is already in use on your network then use a different IP subnet.
      2) Thanks for pointing out the typo. I have corrected the IP address.

      After the XSCF is configured, to switch to the server console from XSCF, enter the command
      console -d 0
      enter yes to contunue.

      At the server console enter the command boot to startup the OS if it came factory installed with one.

      Good luck, feel free to drop me a line is you are stuck.

Comments are closed.