How a baseboard management controller works
A baseboard management controller (BMC) is a small processor on a server or industrial motherboard that manages the hardware independently of the main CPU and operating system. It has its own firmware, memory and network connection, and it runs from standby power, so it stays reachable whenever the system is plugged in, whether the host is running, crashed or switched off.
The BMC is wired to the board’s sensors and control lines. It reads temperatures, voltages and fan speeds over I²C and SMBus, controls the power and reset circuits, and talks to the host through a dedicated link such as eSPI, LPC or PCIe. Most current BMCs are system-on-chip devices, with the ASPEED AST2500 and AST2600 the most widely used, running vendor firmware or the open-source OpenBMC stack.
The network side is either a dedicated management Ethernet port, often labeled IPMI or MGMT, or a sideband connection that shares one of the main LAN ports through NC-SI. A dedicated port is easier to keep on a separate management network.
What a BMC lets you do
The features vary by board and firmware license, but most BMCs cover the same core tasks.
-
//
Remote power control. Power on, power off, hard reset or power-cycle the host from anywhere on the management network.
-
//
Remote console (KVM over IP). See the screen and use the keyboard and mouse from a browser, including the BIOS setup screens and boot messages that remote desktop tools cannot reach.
-
//
Virtual media. Mount an ISO or disk image from your own computer so the system can boot an installer or recovery tool without anyone visiting the site.
-
//
Health monitoring and alerts. Track temperatures, fans, voltages and power supplies, record events in the system event log and send alerts by SNMP trap, email or Redfish event.
-
//
Firmware updates. Update the BIOS or UEFI, the BMC itself and, on some boards, drive and network firmware without an operating system.
-
//
Serial over LAN. Reach the host’s text console over the network, which is useful for Linux systems and headless appliances.
IPMI vs Redfish: how you talk to a BMC
A BMC is reached through one or more management interfaces. Older tools speak IPMI; newer fleet tools use Redfish, and most current BMCs support both. Server makers also brand their BMC firmware under their own names, such as iDRAC, iLO or XClarity, but the job is the same.
| Interface | Defined by | Transport | Best suited to |
|---|---|---|---|
| IPMI 2.0 | Intel, Dell, HP and NEC (2004) | RMCP+ over UDP port 623 | Existing scripts and ipmitool; widely supported but dated security |
| Redfish | DMTF (first released 2015) | REST API, JSON over HTTPS | Automation, provisioning tools and large fleets |
| Web console | Board or server maker | HTTPS in a browser | Ad hoc access, remote console and virtual media |
| Serial over LAN and SSH | IPMI and the board maker | IPMI session or SSH | Text console on Linux and headless systems |
| SNMP | IETF | UDP traps and polling | Feeding alerts into an existing monitoring system |
In-band access also exists: software inside the running operating system can query the BMC through the KCS interface. It is handy for inventory and sensor readings, but it fails when the operating system does, so recovery always goes out of band.
BMC vs Intel vPro and other management options
A BMC is a separate chip with its own processor and, usually, its own port, which is why it is standard on servers and server motherboards. Intel vPro takes a different route: its Active Management Technology runs inside the Intel chipset’s management engine and shares the main network controller. It brings similar remote power, console and reimaging features to business-class Core systems that have no BMC.
Compact fanless PCs rarely have room or power budget for a full BMC. They can still be managed out of band with an add-on module or a vendor agent; our guide to out-of-band management for industrial PCs with Allxon shows one approach.
Where BMCs are found in edge and industrial systems
BMCs started in data-centre servers, and they are moving outwards as more computing is installed at remote sites with no IT staff. At the edge, a BMC turns a site visit into a remote fix: a frozen system can be power-cycled, inspected at the BIOS screen and reimaged from a central office.
In our range, many server motherboards for Intel Xeon processors include IPMI remote management, and our AMD EPYC edge servers list BMC management alongside PCIe 5.0 x16 slots. The multi-GPU rack mount servers we supply for cabinets and comms rooms also include BMC remote management. Always check each datasheet for the BMC chip, the management port and whether remote console is included or licensed separately.
How to secure a BMC
A BMC can switch power, reinstall the operating system and read the console, so anyone who controls it effectively controls the system. Treat it as part of the security boundary, not as a convenience feature.
-
//
Change the default credentials. Set unique passwords for every BMC account before the system goes live. In the USA, the Cyber Essentials secure configuration control expects default passwords to be changed, and that includes management controllers.
-
//
Keep it on a separate network. Put management ports on their own VLAN or VPN, never directly on the internet or the production network.
-
//
Prefer Redfish over HTTPS. IPMI 2.0’s authentication has a known weakness that exposes password hashes, so disable IPMI over LAN when your tools can use Redfish or the web console instead.
-
//
Update BMC firmware. BMC firmware gets security fixes like any other software. In the US, NIST SP 800-193 sets out platform firmware resilience guidance that covers management controllers.
-
//
Log and review access. Send BMC logs to a central system so out-of-hours logins and configuration changes are visible.
Quick answers on BMCs
Baseboard management controllers: common questions
What does BMC stand for?
Baseboard management controller. Baseboard is an older name for the motherboard. In server documentation, BMC never refers to the software company of the same name.
Is IPMI the same as a BMC?
No. The BMC is the hardware controller; IPMI is one of the standard interfaces used to talk to it. Many people call the management port the IPMI port because that was the first common protocol.
Does a BMC work when the server is switched off?
Yes, as long as the power supply is connected. The BMC runs from standby power, so it can report status and power the host on. If the power is disconnected entirely, the BMC is off too.
Can BMC firmware be updated?
Yes. Updates are usually applied through the BMC’s web console or Redfish, and some boards can also update from the operating system. Follow the board maker’s order for BIOS and BMC updates.
Do all industrial PCs have a BMC?
No. BMCs are standard on servers and server boards but rare on compact fanless PCs, which use Intel vPro or add-on modules for remote management.
We configure the BMC on our servers and server boards as part of the standard build, setting the management network, accounts and alerts to match your monitoring plan before the system ships.