White Papers

ManualsBrandsDell ManualsActive System ManageriDRAC7 Version 1.00.00

Dell │ OpenManage Systems

Management

New Security Features in Integrated

Dell Remote Access Controller 7

The new Dell Integrated Dell Remote Access Controller version 7 for

Dell PowerEdge 12

generation servers delivers key security features

with comprehensive management and enhanced functionality.

Summary of content (7 pages)

PAGE 1
New Security Features in Integrated Dell Remote Access Controller 7 The new Dell Integrated Dell Remote Access Controller version 7 for Dell PowerEdge 12th generation servers delivers key security features with comprehensive management and enhanced functionality.
PAGE 2
New Security Features in the Integrated Dell Remote Access Controller 7 Contents Introduction .............................................................................................................. 3 iDRAC7 firmware signing ............................................................................................... 3 The threat landscape ................................................................................................. 3 Keeping pace ................................................
PAGE 3
New Security Features in the Integrated Dell Remote Access Controller 7 Introduction The Integrated Dell Remote Access Controller version 7 (iDRAC7) provides comprehensive management, without relying on OS agents, for Dell™ PowerEdge™ 12th generation servers. In addition to many new functional and ease-of-use features, iDRAC7 includes the following new key security features. For more information, go to www.dell.com/idrac7.
PAGE 4
New Security Features in the Integrated Dell Remote Access Controller 7 The build process: signing the firmware IDRAC7 firmware signing and verification use industry standard cryptographic hashing and private/public key encryption technologies. The iDRAC7 firmware contains the public (verification) key. The engineering team that designs and builds the iDRAC7 includes a group known as PG Release Engineering (PGRE). The PGRE team, while small, supports a wide variety of engineering activities.
PAGE 5
New Security Features in the Integrated Dell Remote Access Controller 7 encryption/decryption operations. iDRAC7 takes advantage of this capability to create a “root of trust” within iDRAC7’s early boot code. Hidden Root Key: keeping secrets confidential This 256-bit unique, hidden value is called the Hidden Root Key (HRK).
PAGE 6
New Security Features in the Integrated Dell Remote Access Controller 7 Credential vault Without too much trouble it is possible to find businesses that will de-solder industry standard flash memory devices from printed circuit boards and provide a copy of the contents of the device. IDRAC7 deals with this threat in a cost-effective and well accepted way. As the name suggests, the Credential Vault is a new feature in iDRAC7 to encrypt sensitive data before it is put into the iDRAC7 flash memory.
PAGE 7
New Security Features in the Integrated Dell Remote Access Controller 7 This feature preserves the ability to thoroughly debug iDRAC7 in the field if necessary, helping to speed problem resolution and helping Dell to continuously improve our products. Decommissioning and reprovisioning support In the previous generation of Dell PowerEdge servers, iDRAC6 supported erasing all data stored since the iDRAC was deployed. This feature is typically used when a server is decommissioned or repurposed.