HP Integrated Lights-Out manual Encryption, ILO Security Override Switch Administration

136 User Guide Integrated Lights-Out

•iLO should not be connected directly to the Internet.

•A 128-bit cipher strength browser must be used.

Encryption

iLO provides strong security for remote management in distributed IT environments by using 128-bit SSL encryption of HTTP data transmitted across the network. SSL encryption ensures that the HTTP information is secure as it travels across the network.

Remote Console data is protected using 128-bit RC4 bidirectional encryption.

iLO Security Override Switch Administration

The iLO Security Override Switch allows the administrator full access to the iLO processor. This access may be necessary for any of the following conditions:

•iLO must be re-enabled after it has been disabled.

•All user accounts with the Administer User Accounts privilege have been locked out.

•A bad configuration keeps the iLO from displaying on the network and RBSU has been disabled.

•The boot block must be flashed.

Ramifications of setting the Security Override Switch include:

•All security authorization checks are disabled while the switch is set.

•iLO RBSU runs if the host server is reset.

•iLO is not disabled and might display on the network as configured.

•iLO, if disabled while the Security Override Switch is set, does not log the user out and complete the disable process until the power is cycled on the server.

•iLO Option ROMPaq is allowed to reprogram the iLO ROM even if the iLO firmware is not running.