iDRAC vs iLO vs IPMI vs IMM: Remote Server Management and Which Licence You Need
Short answer: iDRAC (Dell), iLO (HPE), IMM and XClarity Controller (Lenovo) and IPMI (the common standard) all do the same basic job: they let you power a server on, off or restart it and watch its health over the network, even when the operating system is down. The paid part is the remote console and virtual media, which let you see the screen and mount an ISO from your desk. On Dell and Lenovo these need a licence above the default level. On HPE the console works before the operating system starts without a licence, but the full console and virtual media need iLO Advanced. Check this before you buy a used server.
Key takeaways
- On a Dell iDRAC8 or iDRAC9 rack or tower server, the Basic and Express licences give power control, boot control and serial-over-LAN, but not the virtual console or virtual media. Those need iDRAC Enterprise or higher.
- Dell's own documentation lists iDRAC Express as the default on R6XX, R7XX, R8XX and R9XX servers, and Basic on 100 to 500 series rack and tower servers. So a plain PowerEdge R640 or R740 does not come with a remote console unless an Enterprise licence was added.
- On HPE iLO 5, the Integrated Remote Console is pre-OS only without a licence on most servers, and virtual media through the remote console needs iLO Advanced. HPE iLO licences stay with the server for its life.
- Lenovo's remote console needs XClarity Controller Advanced or Enterprise, or IMM2 Premium on older System x servers.
- Whichever brand it is, keep the management port on a separate, trusted network. CISA warns that IPMI-style interfaces are easy to find and abuse when exposed.
This guide is for IT managers, sysadmins and buyers in India who are comparing refurbished servers and want to know what remote access they will actually get. For the wider buying checklist, read our guide on whether refurbished servers are reliable and what to ask a seller.
What out-of-band management is, and why it saves site visits
Every enterprise server has a small second computer on the motherboard called the baseboard management controller (BMC). It has its own network port, its own firmware and its own memory. Wikipedia's description of IPMI explains that this subsystem works independently of the host's CPU, firmware (BIOS or UEFI) and operating system, and that a monitored machine may be powered off as long as it is connected to a power source. This is what "out-of-band" means: you reach the server through a path that does not depend on the server being up.
In practice that gives you four things:
- Power control: switch a hung server off and on without going to the rack.
- Health monitoring: temperature, fans, power supplies and hardware event logs.
- Remote console (KVM): see the screen and use the keyboard and mouse, including during boot and BIOS setup.
- Virtual media: attach an ISO file from your PC so you can install an operating system or update firmware remotely.
For a business with a server in a branch office, a data centre in another city or a rack that is hard to reach, the last two are the valuable ones. They are also the ones that vendors sell as licensed features.
The names: what each brand calls it
| Brand | Name of the controller | Where you find it |
|---|---|---|
| Dell | iDRAC (Integrated Dell Remote Access Controller). iDRAC8 is on 13th generation servers and iDRAC9 on 14th generation, according to Dell's technical brief | Dell PowerEdge servers |
| HPE | iLO (Integrated Lights-Out). iLO 5 is the Gen10 version | HPE ProLiant servers |
| Lenovo (and IBM System x) | IMM2 on older System x servers, XClarity Controller (XCC) on ThinkSystem | Lenovo servers and IBM rack servers |
| Supermicro | A BMC with an IPMI web interface | Supermicro servers |
| Cisco | CIMC (Cisco Integrated Management Controller) | Cisco UCS servers |
IPMI is not a product. It is a set of interface specifications for the BMC, led by Intel, first published in 1998, with version 2.0 appearing in 2004. Dell's iDRAC and HPE's iLO both list IPMI among their network interfaces, and add their own web interface, command line and a REST-style API on top. So "iDRAC vs IPMI" is not a real either-or. iDRAC is Dell's controller, and IPMI is one of the ways to talk to it.
Dell iDRAC: Basic, Express, Enterprise and Datacenter
Dell sells iDRAC features in licence levels. Dell's iDRAC9 user guide says iDRAC Basic or Express are the standard licences on a system by default, that Enterprise and Datacenter include all the licensed features and can be purchased at any time, and that a perpetual licence is bound to the server's Service Tag. Evaluation licences last 30 days and cannot be extended.
The feature table in Dell's technical brief on iDRAC8 and iDRAC9 shows where the remote console sits. This is the part buyers care about:
| Remote feature | Basic | Express (rack and tower) | Enterprise |
|---|---|---|---|
| Power control, boot control, serial-over-LAN | Yes | Yes | Yes |
| Virtual console (KVM) and HTML5 console | No | No | Yes |
| Virtual media | No | No | Yes |
| Virtual folders and remote file share | No | No | Yes |
| Directory services (AD, LDAP), two-factor authentication, single sign-on | No | No | Yes |
The same table shows an "Express for Blades" level that does include the virtual console and virtual media, so blade servers behave differently from rack and tower servers. Dell's knowledge base article on virtual media says the same thing in one line: an Enterprise or greater licence is required on iDRAC7, iDRAC8 and iDRAC9.
What is the default on the servers Indian buyers ask about? Dell's release notes list iDRAC Express as the default licence on rack or tower servers in the R6XX and R7XX series (and R8XX, R9XX and T6XX), and its user guide lists Basic for the 100 to 500 series. In plain words, the default on a Dell R630, R640, R730 or R740 is Express, which has no remote console. Enterprise is an upgrade, so a used server only has it if the previous owner ordered or added it, and a licence installed on the server is bound to that server's Service Tag.
Dell's brief also notes that iDRAC9 on 14th generation servers adds a factory-generated default password, so a new iDRAC9 no longer starts with a well-known shared one. Our R740 vs R640 comparison covers the other differences between those two models.
HPE iLO: Standard and Advanced
HPE's iLO 5 Licensing Guide has a simpler two-level scheme. iLO Standard ships at no extra cost on every server that supports iLO. iLO Advanced is a licence. The guide's feature table gives these differences for the features buyers ask about:
| Feature (iLO 5) | iLO Standard | iLO Advanced |
|---|---|---|
| iLO web interface, IPMI over LAN/DCMI, RESTful API, SSH command line | Yes | Yes |
| Virtual serial port, virtual power button | Yes | Yes |
| Integrated Remote Console (virtual KVM) | Pre-OS only on all servers except BL and WS | Yes |
| Virtual media through the remote console | Only on BL and WS servers | Yes |
| Scripted or URL-based virtual media | No | Yes |
| Remote console record and playback | No | Yes |
| Directory service authentication, Kerberos, two-factor authentication | No | Yes |
| Advanced power management (history graphs, dynamic power capping) | No | Yes |
So on a typical ProLiant DL380 an unlicensed iLO gives you a console only until the operating system starts. That is enough to get into the BIOS or watch a boot problem, but not to work inside the running operating system from the iLO console, and not to mount an ISO to install one. HPE adds that iLO licences do not expire: once installed, a licence stays on that server even if the support agreement lapses, and it is valid for the life of the server it is installed on. The same licence part numbers work across iLO 3, 4, 5 and 6 servers. Licences with a part number ending in #0D1 are factory pre-installed.
That last point helps refurbished buyers. If the original owner bought iLO Advanced, the licence is on the server and stays there. Our guide to buying certified refurbished HP ProLiant servers covers what else to check.
Lenovo IMM2 and XClarity Controller
Lenovo follows the same pattern. Its XClarity Controller documentation says the remote console is available only in the XClarity Controller Advanced and Enterprise levels. For the older IMM2 on System x servers, Lenovo's documentation says the remote presence function is available only in IMM2 Premium, which is installed with an activation key. If you are buying a used Lenovo or IBM System x server, ask which level the controller is at, not just whether it has a management port. See our Lenovo servers and IBM rack servers pages for current stock.
Supermicro IPMI and Cisco CIMC
Supermicro. A Supermicro board has a standard BMC web interface. Supermicro sells optional licence keys, and the licence needed depends on the board generation, so check the exact board before you buy. Thomas-Krenn, a European server builder, publishes a feature table in its wiki. It lists the IPMI interface, HTTPS web interface and the HTML5 KVM console as available without a licence, and Redfish, syslog and, on older X9, X10 and X11 boards, BIOS update through the web interface as needing the SFT-OOB-LIC key. This is a partner's table and not Supermicro's own, so confirm it for your board. Our Supermicro buyer's guide covers the model side.
Cisco. Cisco's controller is called CIMC. We could not confirm a licence requirement for its console and virtual media in current Cisco documentation, so do not assume one way or the other. Ask the seller to show the console working on the exact unit.
Which one to look for, by situation
| Your situation | What you need |
|---|---|
| Server in your own office, someone can walk to it | Basic power control and health monitoring is often enough. Remote console is a convenience |
| Branch office or colocation in another city | Remote console and virtual media, so Dell iDRAC Enterprise, HPE iLO Advanced or Lenovo XCC Advanced |
| Rebuilding or reinstalling the OS remotely | Virtual media, which is a licensed feature on Dell, HPE and Lenovo |
| Many servers with central logins | Directory authentication (Active Directory or LDAP), which is Enterprise on Dell and Advanced on HPE |
| Budget build where a visit is cheap | Skip the licence and use the unlicensed features |
How to check the licence on a server before you buy
- Ask for the exact licence level in writing, not just "iDRAC" or "iLO". The model and the level both matter.
- Look inside the controller. On Dell iDRAC9, Dell's user guide places licence management under Configuration, then Licenses, with options to view, import, export and delete. Menu names change between firmware versions. On HPE, iLO shows the licence state in its web interface.
- Ask for a screenshot or a short live check of the remote console opening and an ISO mounting. That is the real test.
- Remember the licence is tied to the server. Dell binds a perpetual licence to the Service Tag, and HPE says an installed licence stays on the server. If a seller says a licence key can be moved to a different server, ask to see how.
- Check the warranty and age of the server too. Our guide to checking server warranty by serial number works with the same Service Tag or serial number.
Security: do not leave the management port exposed
The management controller can reboot the server and mount media, so it is a high-value target. CISA's alert on IPMI risks says internet-facing IPMI interfaces are easy for attackers to find, that an attacker who reaches the controller can bypass operating system security, and that many controllers ship with default or missing passwords. Its recommendations are to restrict IPMI traffic to trusted internal networks (for example a separate VLAN), set strong unique passwords on every device, disable "cipher 0" and anonymous logins, and enable encryption where possible. That alert dates from 2013, so also read your vendor's current guidance, but the basics have not changed.
In short: put the iDRAC, iLO or IMM port on a management network that is not reachable from the internet or from ordinary office PCs, change the default password on any used server on day one, and keep the controller firmware up to date. Our guides to securing your server from hackers and enterprise network security explain network separation, and the server rack setup guide shows where the management network fits in a rack.
Frequently asked questions
Is iDRAC free?
Part of it is. Every Dell PowerEdge has iDRAC with a default licence, which is Basic or Express depending on the model. That gives you power control, boot control and serial-over-LAN. The virtual console and virtual media need iDRAC Enterprise or higher, which is a paid upgrade that can be bought at any time.
Do I need iLO Advanced to use the remote console?
It depends on what you want to do. HPE's iLO 5 licensing guide says iLO Standard gives the Integrated Remote Console before the operating system starts on all servers except BL and WS models. To use the console after the operating system starts, and to use virtual media through it, you need iLO Advanced.
Can I buy an iDRAC or iLO licence separately for a used server?
Yes, both vendors sell licence upgrades. Dell ties a perpetual iDRAC licence to the server's Service Tag, and HPE licences stay on the server they are installed on. Prices vary by vendor, reseller and licence level, so get a quote for the exact model. Also confirm the server is not already licensed before you pay for a second one.
What is the difference between iDRAC8 and iDRAC9?
iDRAC8 is on 13th generation PowerEdge servers and iDRAC9 on 14th generation. Dell's technical brief lists several features that exist only on iDRAC9, including a factory-generated default password, secure UEFI boot certificate management and a lockdown mode. The licence levels and the split of the remote console features are the same on both.
Is IPMI secure?
It can be, if it is configured carefully and kept off untrusted networks. CISA's alert lists the risks, including exposure to the internet, default or missing passwords and the "cipher 0" setting, and recommends a separate trusted network, strong unique passwords, disabling cipher 0 and enabling encryption where possible.
Do I need a remote console at all?
Not always. If the server is in your office and someone can reach it in a few minutes, power control and health monitoring may be enough. A licensed remote console is worth paying for when the server is in another building or city, or when you expect to reinstall the operating system or update firmware remotely.
Not sure what remote access a server has?
Tell us the server model you are looking at and ask for the iDRAC, iLO or XClarity licence status of that exact unit before you order. Call or WhatsApp +91-87962-44410, or contact us. You can also compare Dell and HP servers, browse refurbished servers in India, or look at server AMC if you want support after you buy. Our guide to server end of life and end of support helps you pick a generation that will still be supported.
Sources: Dell, Side-by-side comparison of the features of Dell EMC iDRAC9 and iDRAC8 (technical brief, August 2017: licence feature table); virtual media on iDRAC6 to iDRAC9; iDRAC9 User's Guide, types of licenses (default licence by server series, Service Tag binding); iDRAC9 7.00.55.00 release notes, licence requirements. HPE, iLO 5 Licensing Guide: standard and licensed features and licence characteristics. Lenovo, XClarity Controller remote presence and IMM2 remote presence. Thomas-Krenn, Supermicro licences SFT-OOB-LIC and SFT-DCMS-Single (partner wiki, not Supermicro's own). CISA, Risks of using IPMI (2013). Wikipedia, Intelligent Platform Management Interface. Licence levels and defaults vary by model and firmware, so confirm on the exact unit. No licence prices are quoted because they vary by seller. Last verified 27 October 2026.