--- title: "What is IPMI and what it does on a dedicated server | StreetHosting" description: "Learn what IPMI and BMC are, how iDRAC, iLO and XClarity deliver remote console, virtual ISO and power control, and how to keep that interface safe." url: "https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server" type: "page" language: "en-US" --- Infrastructure · 8 min · Intermediate Published on Nov 13, 2026 · Updated on Nov 13, 2026 # IPMI and BMC: the remote hardware control of a dedicated server When the server's operating system hangs or won't boot, SSH no longer helps. IPMI is the computer inside the computer that lets you see the screen, power it on and off and mount an installer remotely, and also a dangerous way in if left exposed. By [Equipe StreetHosting](https://streethosting.com.br/en/autores#equipe-streethosting) · StreetHosting infrastructure and support team [Hardware and datacenter](https://streethosting.com.br/en/guides/topics/hardware) [Security and hardening](https://streethosting.com.br/en/guides/topics/security) Summarize with: [](https://chat.openai.com/?q=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "ChatGPT") [](https://claude.ai/new?q=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "Claude") [](https://www.google.com/search?udm=50&aep=11&q=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "Google AI Mode") [](https://x.com/i/grok?text=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "Grok") [](https://www.perplexity.ai/search/new?q=Summarize%20the%20key%20points%20of%20this%20StreetHosting%20guide%3A%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server.%20Highlight%20the%20step-by-step%20instructions%2C%20the%20prerequisites%20and%20the%20most%20common%20mistakes. "Perplexity") Share: [](https://x.com/intent/tweet?text=What%20is%20IPMI%20and%20what%20it%20does%20on%20a%20dedicated%20server&url=https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server "Share on X") [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server "Share on Facebook") [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server "Share on LinkedIn") [](https://wa.me/?text=What%20is%20IPMI%20and%20what%20it%20does%20on%20a%20dedicated%20server%20https%3A%2F%2Fstreethosting.com.br%2Fen%2Fguides%2Finfrastructure%2Fwhat-is-ipmi-dedicated-server "Share on WhatsApp") For agents: Copy as Markdown [.md](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server.md) In this guide 6 sections * [What IPMI and BMC are](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#o-que-e) * [iDRAC, iLO, XClarity and friends](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#nomes-comerciais) * [What you can do](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#o-que-faz) * [ipmitool commands](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#ipmitool) * [Security: never on the internet](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#seguranca) * [What to ask the provider](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#perguntar) Quick answer **IPMI**(Intelligent Platform Management Interface) is a server's hardware management interface, run by a chip called the **BMC**, which has its own system, network and power and stays on even when the machine is off. Through it you see the screen as if you were standing in front of the server, power it on, off and restart it, mount an ISO to install the system and read temperatures and fan speeds. It is a lifesaver when SSH does not answer, and for that very reason it must never be exposed to the internet: access goes through a VPN or a management network. ## What IPMI and BMC are[](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#o-que-e) An ordinary server has the operating system, such as Ubuntu or Windows, which you manage over SSH or remote desktop. If the system hangs, the disk fails or the network configuration breaks, those accesses vanish and, with nothing else, only someone at the datacenter can fix it. The BMC (Baseboard Management Controller) is a small computer soldered onto the server board, independent of the main processor. It stays powered as long as the machine is plugged in, has its own network port and runs an embedded system. IPMI is the set of rules you use to talk to it. Since the BMC does not depend on the operating system, it keeps answering even when the server is hung or powered off. On many servers there is a network port exclusive to the BMC, separate from the ports the system uses. On others, the BMC shares one of the regular ports, which matters when you isolate its network. It is the opposite of the situation on a [VPS or cloud, where the host takes care of the hardware](https://streethosting.com.br/en/guides/infrastructure/bare-metal-vs-cloud-vs-vps) and you never need it. ## iDRAC, iLO, XClarity and friends[](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#nomes-comerciais) IPMI is the open standard, but each manufacturer ships the BMC under its own brand and adds its own features: | Manufacturer | Commercial name | Common extras | | ------------------- | -------------------------- | ---------------------------------------------- | | Dell | iDRAC | Browser console, Redfish API, firmware updates | | HPE | iLO | Integrated console, Redfish API, event log | | Lenovo | XClarity Controller | Browser console, Redfish API | | Supermicro | IPMI, on most boards | Web interface and a remote console app | | Other server boards | Usually called IPMI or BMC | Varies by manufacturer | In practice, what changes from one to another is the interface design and the licensing: on some models the full remote console depends on a paid license from the manufacturer. The standard IPMI commands and the Redfish API, a newer standard built for automation, work in a similar way on all of them. ## What you can do[](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#o-que-faz) * **Remote console:** also called KVM over IP. You see the screen and use a virtual keyboard and mouse, from boot, including the BIOS screen and the system installer. * **Virtual media:** you mount an ISO file from your computer or from a network address as if it were a flash drive or a CD plugged into the server, and install or reinstall the system with nobody at the datacenter. * **Power control:** power on, shut down cleanly, power off by force and restart. Useful when the system has frozen completely. * **Sensors:** CPU and board temperature, fan speed, power supply voltage and the state of the memory modules. * **Event log:** the SEL (System Event Log) keeps hardware warnings, such as a fan failure, a memory error or a power supply drop, even when the operating system saw nothing. * **Serial console over the network:** SOL (Serial over LAN) gives a text output of the server, useful for seeing boot messages and reaching a system that lost its network. People who build their own server or rent dedicated hardware use these features mainly to reinstall the system, unfreeze a machine and investigate failures. Having the access or not weighs a lot when you are deciding [when to use a dedicated server](https://streethosting.com.br/en/guides/infrastructure/when-to-use-a-dedicated-server), because the whole hardware becomes your responsibility. ## ipmitool commands[](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#ipmitool) `ipmitool` is the command line tool for talking to a BMC. On Ubuntu and Debian, install it with `sudo apt install ipmitool`. Over the network, the connection uses the `lanplus` interface, which is IPMI 2.0: `# the password is typed without showing on screen or landing in history read -rsp 'BMC password: ' IPMI_PASSWORD; echo export IPMI_PASSWORD alias bmc='ipmitool -I lanplus -H IP_DO_BMC -U USUARIO -E' # power state bmc chassis power status # power on, clean shutdown, forced restart bmc chassis power on bmc chassis power soft bmc chassis power cycle # sensors and event log bmc sensor bmc sdr list bmc sel list # serial console over the network (to quit, type ~. at the start of a line) bmc sol activate` The `-E` option reads the password from the `IPMI_PASSWORD` variable. Avoid `-P password`, because the password is saved in the terminal history and may show up in the process list. Inside the server itself, with no network, ipmitool uses the kernel's local device: `sudo modprobe -a ipmi_devintf ipmi_si sudo ipmitool lan print 1 sudo ipmitool user list 1` `lan print 1` shows the BMC's address, mask and gateway, and `user list 1` lists its users. The channel number, 1 here, varies between boards. If the local command complains it cannot find the device, the server may not have a BMC or the module did not load. On modern models, the Redfish API, which uses HTTPS and JSON, replaces ipmitool in automation. For manual use and for running a quick power or sensor command, ipmitool is still the simplest way. ## Security: never on the internet[](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#seguranca) The BMC controls the entire hardware underneath the operating system. Whoever gets into it can power the machine off, mount a system of their own and read the screen, and none of that goes through your Linux firewall, because the BMC sits outside the system. At the same time, IPMI's history has serious problems: * **Flaws in the protocol itself:** IPMI 2.0 has known authentication weaknesses. During the login exchange, the BMC itself hands anyone who asks a hash of the password of any user that exists, and the attacker tries to crack that hash on their own computer, with no limit on attempts. Some implementations also have cipher zero enabled, which accepts a login with any password. * **Firmware with vulnerabilities:** serious flaws have been published in BMCs from several manufacturers, including remote access with no login, and firmware is rarely updated as often as it should be. * **Factory passwords:** many devices ship with a well known default user and password, and automated scans across the internet look for exactly that. Never leave the BMC's IP reachable from the public internet. IPMI's UDP port 623 and the BMC's web interface are constant scanning targets. The rule is: a management network separate from the production network, access only through a VPN, the default user changed or disabled and a long, unique password. 1. **Isolate the network:** the BMC should sit on a private network, with no direct route to the internet. 2. **Come in through a VPN:**connect to the VPN first and only then reach the BMC's address. A tunnel like the one in the guide on [a WireGuard VPN](https://streethosting.com.br/en/guides/vps/wireguard-vpn-vps) works for this. 3. **Change the credentials:**change the default user's password the first time you log in and create separate users for each person. 4. **Turn off what you do not use:** cipher zero, old protocols and extra BMC services. 5. **Update the firmware:**follow the board manufacturer's security notices. 6. **Check from outside:**test whether port 623 and the BMC's web interface are closed from the internet, as described in [how to check if a port is open](https://streethosting.com.br/en/guides/infrastructure/check-open-port-server). ## What to ask the provider[](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#perguntar) Not every rented dedicated server comes with IPMI access. Some providers give access to the BMC, others offer an equivalent console in their panel, and others only reinstall the system on request. If that access matters to your choice, confirm it with the provider before you rent. The same goes for [StreetHosting dedicated servers](https://streethosting.com.br/en/dedicated), which are in São Paulo, delivered within 6 days and come with 30 to 80 TB of traffic included: check which management access comes with the configuration you want before you commit. Questions worth asking, which also belong in the [checklist for renting a dedicated server](https://streethosting.com.br/en/guides/infrastructure/dedicated-server-checklist-for-business): * Does the server have a BMC, and do I get access to it or only the provider? * Is access through a remote console, ISO mounting or only power control? * Is the BMC on a private network, or does the provider expose a public address? * Can I reinstall the system myself, and how long does support take to do it when I ask? * Who updates the BMC firmware, and how often? With the answers in hand, you can compare offers fairly. When the provider gives no access at all, the plan is still valid, but you depend on support for any total freeze, and it is worth knowing that cost before you commit. In this guide * [What IPMI and BMC are](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#o-que-e) * [iDRAC, iLO, XClarity and friends](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#nomes-comerciais) * [What you can do](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#o-que-faz) * [ipmitool commands](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#ipmitool) * [Security: never on the internet](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#seguranca) * [What to ask the provider](https://streethosting.com.br/en/guides/infrastructure/what-is-ipmi-dedicated-server#perguntar) ## Frequently asked questions What is IPMI? IPMI is a hardware management standard for servers. It runs on a chip called the BMC, which has its own power, processor and network connection, and works even with the server off. It lets you see the screen, power on, power off, reboot and read sensors remotely. Are iDRAC, iLO and IPMI the same thing? They are relatives. IPMI is the standard, and Dell's iDRAC, HPE's iLO and Lenovo's XClarity Controller are each manufacturer's implementation, with extras such as a browser console and the Redfish API. On Supermicro boards the feature is simply called IPMI. Can I leave the IPMI interface open to the internet? No. IPMI has been the source of several security flaws over the years, and an exposed BMC gives full control of the server, including powering the machine off and mounting an operating system. The right way is to keep it on a separate management network and reach it through a VPN. Will the dedicated server I rent have IPMI? It depends on the provider and the model. Some offer access to the remote console, others offer only an equivalent feature in their panel, and others offer nothing. Ask before you rent and confirm what the access is and who controls the BMC. Does ipmitool work on any server? It works on servers with an IPMI compatible BMC, which covers most server boards. Over the network it needs the BMC's address, a user and a password. Inside the server itself, it talks to the BMC through the operating system and requires the right kernel module to be loaded. Next step See dedicated servers Exclusive hardware in São Paulo with NVMe and Anti-DDoS. [See dedicated servers](https://streethosting.com.br/en/dedicated) ## Related guides [Infrastructure Intermediate Dedicated server checklist: what to ask before you sign Almost every dedicated server headache comes from something nobody asked before signing. This checklist gathers the questions a business needs to put to the provider, and what to document internally, so you do not find out the answer in the middle of an incident. 11 min Read guide](https://streethosting.com.br/en/guides/infrastructure/dedicated-server-checklist-for-business) [Infrastructure Intermediate When to use a dedicated server: moving from a VPS to bare metal A dedicated server makes sense when predictable performance and physical isolation matter more than the flexibility of a VPS. The decision usually comes up with continuous workloads, compliance requirements, heavy I/O or specific licensing. With clear criteria, the migration lowers risk and avoids unnecessary cost. 4 min Read guide](https://streethosting.com.br/en/guides/infrastructure/when-to-use-a-dedicated-server) [Infrastructure Intermediate Bare metal vs cloud vs VPS: which one fits your project A VPS shares one machine, bare metal gives you the whole box and cloud is built for elasticity. Each solves a different problem. Here is how to choose based on your workload and budget. 3 min Read guide](https://streethosting.com.br/en/guides/infrastructure/bare-metal-vs-cloud-vs-vps) [← Back to the Guide Center](https://streethosting.com.br/en/guides)