Security Features Per Oracle ILOM Firmware Release

Use the following table to identify the firmware release in which an Oracle ILOM security feature became available.

Firmware Version Availability	Security Feature	For details, see:
All	Authentication and Authorization	Securing Oracle ILOM User Access
All	Dedicated Secure Management Connection	Securing the Physical Management Connection Maintaining a Secure Management Connection
All	Encrypted Preconfigured Network Ports	Preconfigured Services and Network Ports
All	IPMI 2.0 Secure Management	Configure IPMI Management Access for Increased Security
All	Secure Shell Key Encryption Configuration	Use Server Side Keys to Encrypt SSH Connections Append SSH Keys to User Accounts for Automated CLI Authentication
All	SNMP 3.0 Secure Management	Configure SNMP Management Access for Increased Security
All	SSL Protocols and Certificates	Upload a Custom SSL Certificate and Private Key to Oracle ILOM Obtain a Custom SSL Certificate and Private Key Using OpenSSLToolkit Enable the Strongest TLS Encryption Properties
All	Remote Console Encryption and Secure Protocols	Using Remote KVMS Securely
3.0.4 and later	KVMS Host Lock Configuration	Lock Host Access Upon Exiting a KVMS Session
3.0.4 and later	Session Timeout Configuration	Set a Timeout Interval for Inactive Web Sessions Set a Timeout Interval for Inactive CLI Sessions
3.0.12 and later	Local Host Interconnect Authenticated Sessions	Preferred Authenticated Host Interconnect Access
3.0.8 and later	Login Banner Configuration	Secure System Access With Login Banner (3.0.8 and later)
3.0.8 to 3.1.2	WS-Management Secure Access	Configure WS-Management Access for Increased Security
3.1.0 and later	Separate Audit Log	Monitor Audit Events to Find Unauthorized Access
3.1.0 and later	Physical Security Presence Check	Physical Security Presence for Resetting root Account Default Password
3.2.4 and later	IPMI 1.5 Configurable Property	Configure IPMI Management Access for Increased Security
3.2.4 and later	TLS Protocol Versions 1.1 and 1.2	Enable the Strongest TLS Encryption Properties
3.2.4 and later	KVMS Sessions Count	Limit Viewable KVMS Sessions for Remote System Console Plus (3.2.4 or later)
3.2.4 and later	FIPS Compliance Encryption Support	Choosing Whether to Configure FIPS Mode At Deployment Unupported Features When FIPS Mode Is Enabled Post Deployment Considerations for Securing User Access
3.2.5 and later	SSH Server State and Weak Ciphers	Management of SSH Server State and Weak Ciphers
3.2.5 and later	Password Policy for Local User Accounts	Set Password Policy Restrictions for All Local Users (3.2.5 and later)
3.2.6 and later Later versions of 3.2.4.x and 3.2.5.x	The Weak Ciphers property for SSH Management Access was removed. The Weak Ciphers and SSL properties for HTTPS Management Access was removed.	Management of SSH Server State and Weak Ciphers Enable the Strongest TLS Encryption Properties
3.2.8 and later	New TLS management service over IPMI.	Configure IPMI Management Access for Increased Security
3.2.8 and later	New Default web interface (self-signed) SSL Certificate behavior.	Regenerate Self-Signed Default SSL Certificate Issued By Oracle
3.2.9 and later	The TLSv 1.0 property is disabled by default.	Enable the Strongest TLS Encryption Properties
4.0.0	New ASR Endpoint SSL Certificate behavior.	Securing the Automatic Service Request (ASR) Endpoint Connection
4.0.0	Support for TLS v1.0 service is removed.	Enable the Strongest TLS Encryption Properties
4.0.0	The `servicetag` protocol, when in use, should be configured to use HTTPS and a passphrase.	Figure 6, Table 6, Impact of Services When Enabled or Disabled
4.0.4	The TLSv 1.1 property is disabled by default.	Enable the Strongest TLS Encryption Properties

Additional Security Information

For additional information about securing Oracle ILOM, see the following sections in this guide: