| Skip Navigation Links | |
| Exit Print View | |
|
Sun Flash Accelerator F40 PCIe Card Security Guide |
Use the following notes before and during the installation and configuration of a server and Sun Flash Accelerator F40 PCIe Card.
The following sections are included:
Physical hardware can be secured fairly simply: limit access to the hardware and record serial numbers.
Restrict access
If equipment is installed in a rack with a locking door, keep the door locked except when you have to service components in the rack.
Store spare field-replaceable units (FRUs) or customer-replaceable units (CRUs) in a locked cabinet. Restrict access to the locked cabinet to authorized personnel.
Record serial numbers
Security-mark all Sun Flash Accelerator F40 PCIe Cards. Use special ultraviolet pens or embossed labels.
Keep a record of the serial numbers of all Sun Flash Accelerator F40 PCIe Cards.
Keep hardware activation keys and licenses in a secure location that is easily accessible to the system manager in system emergencies. The printed documents might be your only proof of ownership.
The security considerations for software components are:
Refer to the documentation that came with your software to enable any security features available for the software.
Use the superuser account to set up and update the Sun Flash Accelerator F40 PCIe Card drivers.
Most hardware security is implemented through software measures.
The software components that support the Sun Flash Accelerator F40 PCIe Card rely on system security features to provide secure access.
The Sun Flash Accelerator F40 PCIe Card ships with all of the firmware installed. Firmware installation is not required in the field, except for updates.
If firmware updates are ever needed, contact Oracle support to arrange for support or check Oracle support for the latest updates and procedures for the product.
Use the superuser account to set up and update the Sun Flash Accelerator F40 PCIe Card firmware management utility. Ordinary user accounts allow users to view but not edit firmware. The Oracle Solaris OS firmware update process prevents unauthorized firmware modifications.
Refer to the product notes provided with your Sun Flash Accelerator F40 PCIe Card for late-breaking news, information about firmware update requirements, or other security information.
For information about setting SPARC OpenBootPROM (OBP) security variables, refer to the OpenBoot 4.x Command Reference Manual.
You can actively secure, manage, and monitor system components through Oracle Integrated Lights Out Manager (Oracle ILOM) firmware which is preinstalled on some x86 servers. To understand more about using this firmware when setting up passwords, managing users, and applying security-related features, including Secure Shell (SSH), Secure Socket Layer (SSL), and RADIUS authentication, refer to Oracle ILOM documentation:
http://www.oracle.com/pls/topic/lookup?ctx=ilom31
Enable logging and send logs to a dedicated secure log host.
Configure logging to include accurate time information, using NTP and timestamps.
|