TL;DR

iLOProLiantLatest firmwareDateStatus
iLO 1G2–G4 (and 100-series up to G6)1.962014-04-30Final
iLO 2G5–G6 (300-series and up)2.332018-03-30Final
iLO 3G71.94 (1.94.2)2020-12-06Final; HPE will not publish more
iLO 4Gen8–Gen92.822023-02-06Nothing new since 2023
iLO 5Gen10 / Gen10 Plus3.212026-07-31Active
iLO 6Gen111.782026-07-31Active
iLO 7Gen121.24.002026-08-02Active

Data as of 2026-09-25. The first four generations no longer get new releases; iLO 5, 6 and 7 ship firmware every few months, so for those three check HPE’s portal before flashing.

Direct downloads

iLOPackageContains
iLO 1CP023365.scexeilo196.bin
iLO 2CP035238.scexeilo2_233.bin
iLO 3CP046328.scexeilo3_194.bin
iLO 4CP053894.scexeilo4_282.bin
iLO 5ilo5_321.fwpkgilo5_321.bin
iLO 6ilo6_178.fwpkgilo6_178.bin
iLO 7ilo7_1.24.00.fwpkgilo7_1.24.00.bin

At the time of writing all seven links answer 200 with no HPE account. The iLO 5/6/7 ones will go stale: on the support portal search Integrated Lights-Out 5 (or 6, 7) → Drivers & Software → Firmware. A public tracker that keeps up: pingtool.org.

Extracting the .bin from the package

1
2
3
4
5
6
7

# iLO 1–4: .scexe is a self-extracting archive; --unpack only extracts, it flashes nothing
sh CP053894.scexe --unpack=ilo4
ls ilo4/*.bin        # ilo4_282.bin

# iLO 5/6/7: .fwpkg is a zip holding the .bin plus a payload.json
unzip -o ilo5_321.fwpkg
ls *.bin             # ilo5_321.bin

The web UI on iLO 5 and later accepts the .fwpkg as is. The .bin works on every generation and is what load -source over SSH expects.

Checking the installed version

No login, through the iLO’s inventory XML (works at least from iLO 2 to iLO 5):

1

curl -sk "https://<ilo-ip>/xmldata?item=All" | grep -o '<FWRI>[^<]*</FWRI>'

Over SSH, show /map1/firmware1. On iLO 2/3, when the browser no longer gets in, the XML and SSH still answer.

Intermediate steps

A big jump between versions sometimes fails with an opaque error (flash failed, invalid image). What is documented:

  • iLO 3: if you are below 1.20, go to 1.20 first. From 1.55 go to 1.57 and then to 1.94 (guide on GitHub).
  • iLO 4/5/6/7: read the release notes of the target version; HPE states there whether a minimum prior version is required.

If a direct flash fails, find the intermediate in the portal’s history and do it in two steps.

How to apply it

PathWhen
Web UI → Administration → FirmwareThe normal way on iLO 4+; on iLO 2/3 only if the browser gets in (TLS trick)
SSH: load -source http://…/iloN_xxx.binWhen the UI does not open. Full procedure
From the operating systemThe same .scexe run as root on Linux (or the .exe on Windows) flashes online; it also ships in the SPP

Traps

  • iLO 3 on 1.94 is still TLS 1.1; the last release does not fix access from Chrome/Edge. Details in ERR_SSL_VERSION_OR_CIPHER_MISMATCH.
  • Official firmware only. The .fwpkg files are signed and the iLO refuses images from another generation; there is no risk of pushing an ilo4_*.bin into an iLO 5, but there is also no point hunting for it on mirrors.
  • Gen8/Gen9 are out of support. iLO 4 2.82 has had no successor since 2023; if a security advisory shows up, HPE’s portal is the only source.
  • Do not cut the session. The iLO reboots itself when done; the server stays up.

See also