Go to main content

Oracle® ILOM Security Guide For Firmware Releases 3.x and 4.x

Exit Print View

Updated: May 2019
 
 

Security Features Per Oracle ILOM Firmware Release

Use the following table to identify the firmware release in which an Oracle ILOM security feature became available.

Firmware Version Availability
Security Feature
For details, see:
All
Authentication and Authorization
All
Dedicated Secure Management Connection
All
Encrypted Preconfigured Network Ports
All
IPMI 2.0 Secure Management
All
Secure Shell Key Encryption Configuration
All
SNMP 3.0 Secure Management
All
SSL Protocols and Certificates
All
Remote Console Encryption and Secure Protocols
3.0.4 and later
KVMS Host Lock Configuration
3.0.4 and later
Session Timeout Configuration
3.0.12 and later
Local Host Interconnect Authenticated Sessions
3.0.8 and later
Login Banner Configuration
3.0.8 to 3.1.2
WS-Management Secure Access
3.1.0 and later
Separate Audit Log
3.1.0 and later
Physical Security Presence Check
3.2.4 and later
IPMI 1.5 Configurable Property
3.2.4 and later
TLS Protocol Versions 1.1 and 1.2
3.2.4 and later
KVMS Sessions Count
3.2.4 and later
FIPS Compliance Encryption Support
3.2.5 and later
SSH Server State and Weak Ciphers
3.2.5 and later
Password Policy for Local User Accounts
3.2.6 and later
Later versions of 3.2.4.x and 3.2.5.x
The Weak Ciphers property for SSH Management Access was removed.
The Weak Ciphers and SSL properties for HTTPS Management Access was removed.
3.2.8 and later
New TLS management service over IPMI.
3.2.8 and later
New Default web interface (self-signed) SSL Certificate behavior.
3.2.9 and later
The TLSv 1.0 property is disabled by default.
4.0.0
New ASR Endpoint SSL Certificate behavior.
4.0.0
Support for TLS v1.0 service is removed.
4.0.0
The servicetag protocol, when in use, should be configured to use HTTPS and a passphrase.
4.0.4
The TLSv 1.1 property is disabled by default.

Additional Security Information

For additional information about securing Oracle ILOM, see the following sections in this guide: