Go to main content
Sun Storage 16 Gb Fibre Channel ExpressModule Universal Host Bus Adapter Security Guide

Exit Print View

Updated: March 2015
 
 

Maintaining a Secure Environment

After the initial installation and setup of the universal HBA, use Oracle hardware and software security features to continue controlling hardware and tracking system assets.

The following sections are included:

Asset Tracking

Use serial numbers to track inventory. Oracle embeds serial numbers in firmware on option cards and system motherboards. You can read these serial numbers through local area network connections.

You can also use wireless radio frequency identification (RFID) readers to further simplify asset tracking. Refer to an Oracle white paper, How to Track Your Oracle Sun System Assets by Using RFID.

Firmware Updates

Keep firmware versions current on your equipment.

  • Check regularly for updates.

  • All operating systems in general, and Oracle Solaris in particular, require you to log in with root credentials to administer the cards and to upgrade the drivers or firmware.

  • Always install the latest released version of the firmware.

Software Updates

Keep your software versions current on your equipment.

  • Software updates for Oracle Solaris drivers are available through Oracle Solaris patches and updates.

  • Software updates for drivers for other operating systems might be available from: http://driverdownloads.qlogic.com/QLogicDriverDownloads_UI/Oracle_Search.aspx

  • Refer to the universal HBA documentation, located in the Documenation area of the Oracle website, for late-breaking news, information about software update requirements, or other security information.

  • Always install the latest released version of the software.

  • Install any necessary security patches for your software.

  • Devices also contain firmware and might require firmware updates.

Log Security

Inspect and maintain your log files on a regular schedule.

  • Review logs for possible incidents and archive them in accordance with a security policy.

  • Periodically retire log files when they exceed a reasonable size. Maintain copies of the retired files for possible future reference or statistical analysis.

Module Security

The universal HBA is managed by the QLogic QConvergeConsole command-line interface (CLI) or graphical user interface (GUI) utilities. These utilities enable you to do the following:

  • Monitor universal HBA operation.

  • Change the operating protocol mode configuration of the universal HBA.

  • Update universal HBA firmware.

The QConvergeConsole utilities provide access only to users with root credentials. Therefore, unprivileged users cannot make changes to the SAN environment through the use of these utilities.

For information about the QConvergeConsole CLI and GUI, see the QLogic QConvergeConsole documentation at the following website: http://www.qlogic.com