# Known Issues

The following are known issues present in the current release of iLOrest. If available, a link to the relevant Customer Advisory (CA) has been included:

| Issue | CA | Description | Workaround |
|  --- | --- | --- | --- |
| When the required privilege is not set, the `addcert` [command](/docs/redfishclients/ilorest-userguide/ilocommands#examples-14) returns error code 255 rather than the expected privilege error in certain session contexts. | NA | During `iloaccounts addcert` (and similarly deletecert), the privilege validation path may raise a KeyError: `UserConfigPriv`. This occurs when session privileges are filtered to include only values set to True, resulting in the omission of `UserConfigPriv` when it is set to False. Consequently, the command exits with error code 255, bypassing the expected privilege validation and error-handling behavior. | Use any user account with the necessary privileges may be used to log in and validate the behavior. |
| Intermittent iLO authentication failures occur during repeated iLOrest operations, with valid credentials. | NA | When scripts use a mixed authentication flow—where a session is established through login, subsequent commands are executed using Basic Authentication, and logout is performed afterward—the session is not cleaned up properly. In contrast, session cleanup occurs as expected when the workflow is executed entirely in session-only mode, without mixing Basic Authentication and session-based authentication in command. | Modify your script to use either session-only authentication or auth-only, instead of using both authentication methods within the same workflow. |
| Limited support for high-concurrency iLOrest login sessions on Gen12 platforms. |  | In iLOrest v7.3, improvements have been made to enhance concurrent login operations on Gen12 platforms. The solution shows improved stability for workloads involving up to 3–4 parallel concurrent sessions. However, higher levels of concurrency may still result in intermittent failures when multiple sessions are executed repeatedly at scale. | Limit concurrent iLOrest operations to a maximum of 3–4 parallel jobs and avoid sharing the same cache/session directory across multiple concurrent processes whenever possible. |
| Local iLOREST (Unreleased 6.1.0) On ESXi 8 Update 3: `esxcli ilorest` command is unable to discover the iLO 5 interface. | NA | On ESXi 8 Update 3, the local iLOrest (unreleased 6.1.0) implementation fails to discover the iLO 5 interface when the `esxcli ilorest` command is executed. As a result, local iLO connectivity cannot be established, preventing subsequent iLOREST operations that depend on successful iLO discovery. | Invoke `./ilorest.sh` directly instead of using the `esxcli ilorest` command. |
| `ilorest login` --`url` <`iLO_IP`> `-u` <`username`> `-p` <`password`> fails when run from ESXi (esxcli). | NA | Detection of iLO version is not succeeding in `esxcli ilorest` commands. | Use `ilorest.sh` from the iLOrest installation on a supported OS (Linux or Windows) rather than using `esxcli` commands. |
| iLOrest commands when executed with PyPI version of the tool, throws the [error code](/docs/redfishclients/ilorest-userguide/errors/) `255` upon any failure. | NA | When the iLOrest commands are run from PyPI installation , even if there is specific [error code](/docs/redfishclients/ilorest-userguide/errors/), ilorest displays 255 generic [error code](/docs/redfishclients/ilorest-userguide/errors/). | None. Please note that the functionality is not impacted; however, the actual error code is not currently displayed. |
| iLOrest uninstallation deletes the [application accounts](/docs/redfishservices/ilos/supplementdocuments/securityservice#application-accounts). | NA | When iLOrest is upgraded or uninstalled the existing [application accounts](/docs/redfishservices/ilos/supplementdocuments/securityservice#application-accounts) are deleted. | Customer can re-create the [application accounts](/docs/redfishservices/ilos/supplementdocuments/securityservice#application-accounts) either from iLO Web-UI or from iLOrest ([Appaccount](/docs/redfishclients/ilorest-userguide/ilocommands#appaccount-command)). |
| [`flashfwpkg`](/docs/redfishclients/ilorest-userguide/ilorepositorycommands/#flashfwpkg-command) command is unable to wait until the PLDM component `HPE_UBM7_1.10_B.fwpkg` is flashed. | NA | The command fails as the timeout is hit , instead of waiting for the component to flash. | Customers can upload the component to iLO repository followed by creating and invoking the Install Set for this component. |
| [`flashfwpkg`](/docs/redfishclients/ilorest-userguide/ilorepositorycommands/#flashfwpkg-command) command is unable to flash multiple drives connected behind a storage controller. | NA | When several drives are connected to the same controller, the update can only proceed if all selected drives are ready for the update. If even one drive is not eligible for the update (for example, because it has a problem or does not support the selected firmware), the system stops the update and rejects the request. | iLO GUI can be used to flash it directly. |
| [`flashfwpkg`](/docs/redfishclients/ilorest-userguide/ilorepositorycommands/#flashfwpkg-command) command shows a warning on stdout despite successful flash. | NA | The command shows a warning message on stdout even when the flash operation is successful. | Verify the firmware version. If updated, the warning can be ignored. See iLOrest Error and Warning Codes [`documentation`](/docs/redfishclients/ilorest-userguide/errors/) for details. |
| [`flashfwpkg`](/docs/redfishclients/ilorest-userguide/ilorepositorycommands/#flashfwpkg-command) command should not flash when iLO is enabled with TPM and `--tpmover` option not provided. | NA | The command does not prevent flashing when TPM is enabled in iLO and the `--tpmover` flag is not specified. | None. Use the `-v` option to view error code and diagnostic information; note that it does not prevent or stop the firmware flashing process. |
| [`flashfwpkg`](/docs/redfishclients/ilorest-userguide/ilorepositorycommands/#flashfwpkg-command) command flashes firmware of drives behind a controller without `--tpmover`. | NA | The command flashes firmware of drives connected behind a controller even when the `--tpmover` flag is not specified. | Use iLO GUI and check the TPM Override checkbox. |
| IP 4.32 fails to download AHS logs from certain ProLiant models. | NA | Intelligent Provisioning (IP) version 4.32 fails to download Active Health System (AHS) logs from certain HPE ProLiant server models. | Use IP 4.31.4 with iLOrest 4.6.0.0. |
| `--ilossa` option in [`serverclone`](/docs/redfishclients/ilorest-userguide/ilocommands/#serverclone-command) is unsupported for HPE iLO 5. | NA | The `--ilossa` option for smart storage array cloning is not supported on HPE iLO 5 based servers. | Use [`createvolume`](/docs/redfishclients/ilorest-userguide/smartarraycommands/#createvolume-command-former-createlogicaldrive-command) to create volumes. |
| Certificate login in ESXi 7.0 does not work. | NA | Certificate-based authentication does not function properly when using ESXi 7.0. | Use iLOrest from supported OS (Linux or Windows) rather than ESXi for remote ([out-of-band](/docs/redfishservices/ilos/supplementdocuments/vnic/#out-of-band-management)) certificate login. |
| Directory group clone in [`serverclone`](/docs/redfishclients/ilorest-userguide/ilocommands/#serverclone-command) does not work. `serverclone --source <source_server> --target <target_server>` does not clone directory groups | NA | Directory group (LDAP) configurations are not included in serverclone operations | Use iLOrest directory group management commands (list, create, delete). See [`iLOrest Directory`](/docs/redfishclients/ilorest-userguide/ilocommands/#directory-command) Group Management documentation. |
| iLOrest exits during UBM3 Backplane Firmware Update, but update continues. | [a00134171en_us](https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-a00134171en_us) | When running a UBM3 (Universal Backplane Management 3) Backplane firmware update using iLOrest in in‑band mode (for example, iLOrest executed on the host OS), the iLOrest application may exit unexpectedly. Although the CLI exits, the firmware update continues running in the background and can complete successfully. | Use iLO web interface or remote mode from another system to update firmware. |
| Attribute error when setting static IP on DHCP-configured iLO. `ilorest load network.json --url` <`iLO_IP`> `-u` <`username`> `-p` <`password`> | NA | When using the load command to set a static IP on an iLO configured for DHCP, iLOrest returns an attribute error because the network properties are not writable in DHCP mode, and the configuration change is not applied. | Use [`rawpatch`](/docs/redfishclients/ilorest-userguide/rawcommands/#rawpatch-command) instead of [`load`](/docs/redfishclients/ilorest-userguide/globalcommands/#load-command). |
| TLS 1.2 + EMS unsupported with ESXi 7.0 OS. | NA | When running iLOrest on ESXi 7.0, the External Management Service (EMS) does not support the TLS 1.2 configuration required by iLO. Because iLOrest depends on the OS TLS stack for secure communication, connections to iLO are not supported in this configuration. | Upgrade to ESXi 8.0. |