Installation Manual

7 Configuring the iLO security features
iLO security features
iLO provides the following security features:
• User-defined TCP/IP ports.
• User actions logged in the iLO Event Log.
• Progressive delays for failed login attempts.
• Support for X.509 CA signed certificates.
• Support for securing iLO RBSU and the iLO 4 Configuration Utility.
• Encrypted communication that uses SSL certificate administration.
• Support for Kerberos authentication and directory services.
General security guidelines for iLO
• For maximum security, configure iLO on a separate management network. For more
information, see “Connecting iLO to the network” (page 27).
• Do not connect iLO directly to the Internet.
• Use a browser that supports a 128-bit cipher.
iLO RBSU and iLO 4 Configuration Utility security
iLO RBSU and the iLO 4 Configuration Utility enable you to view and modify the iLO configuration.
You can configure iLO RBSU and iLO 4 Configuration Utility login and access settings by using
iLO RBSU, the iLO 4 Configuration Utility, the iLO web interface, or RIBCL scripts. If the system
maintenance switch is set to disable iLO security, any user can access iLO RBSU or the iLO 4
Configuration Utility, regardless of the configured access settings.
iLO RBSU and the iLO 4 Configuration Utility have the following security levels:
• Login Not Required (default)
Anyone who has access to the host during POST can enter iLO RBSU or the iLO 4
Configuration Utility to view and modify configuration settings. This setting is acceptable if
host access is controlled. If host access is not controlled, any user can make configuration
changes by using the active configuration menus.
• Login Required (more secure)
If iLO RBSU or iLO 4 Configuration Utility login is required, only users with the correct access
privileges can access the active configuration menus.
• Disabled (most secure)
If iLO RBSU or the iLO 4 Configuration Utility is disabled, user access is prohibited. This
configuration prevents modification by using the iLO RBSU or the iLO 4 Configuration Utility.
More information
iLO access settings
iLO ROM-based utilities
iLO security with the system maintenance switch
68 Configuring the iLO security features