Recorded 2026-10-13 from a Supermicro X10DRL-i, BMC firmware 3.91 (REDFISH_X10 line), without a Supermicro license. Requests were made without credentials. service_root_403.json GET /redfish/v1/ -> HTTP 403, Content-Type application/json landing_page.html GET / -> HTTP 200, the BMC web login page (trimmed to the head and the login form action) ipmi/ Read over IPMI 2.0 (pyghmi 1.6, lanplus) with a BMC account, 2026-10-13. One file per pyghmi call: power (get_power), net_configuration (get_net_configuration), firmware (get_firmware), inventory (get_inventory), sensors (get_sensor_data, each SensorReading's attributes), health (get_health), event_log (get_event_log). Serial numbers, the system UUID, MAC addresses and IPs are replaced by placeholders. redfish/ Read over Redfish with a BMC account on 2026-10-17, after an SFT-OOB-LIC license was activated (no DCMS). Every resource reachable by @odata.id links from the service root was fetched with GET, except JsonSchemas, Registries, SessionService/Sessions and actions: 69 paths, each as /index.json, unmodified apart from scrubbing. STATUS.json lists the paths that did not answer 200 (Storage and UpdateService need DCMS; IKVM and the virtual media CfgCD were refused as well); their files hold the error body the BMC sent. Serial numbers, UUIDs, MAC addresses, IPs, the host name and the SNMP communities are replaced by placeholders. The server was on.