You can actively secure, manage, and monitor system components using Oracle Integrated Lights Out Manager (Oracle ILOM) management firmware, which is preinstalled on this server, on other Oracle x86-based servers, and on some Oracle SPARC-based servers.
Use a dedicated internal network for the service processor (SP) to separate it from the general network. Oracle ILOM provides server control and monitoring functions to system administrators. Depending on the authorization level granted to the administrators, these functions might include the ability to power off the server, create user accounts, mount remote storage devices, and so on. Therefore, to maintain the most reliable and secure environment for Oracle ILOM, the dedicated network management port or the sideband management port on the server must always be connected to an internal trusted network or dedicated secure management/private network.
Limit the use of the default Administrator account (root) to the initial Oracle ILOM login. This default Administrator account is provided only to aid with the initial sever installation. Therefore, to ensure the most secure environment, you must change the default Administrator password (changeme) as part of the initial setup of the system. In addition to changing the password for the default Administrator account, new user accounts with unique passwords and assigned authorization levels should be established for each new Oracle ILOM user.
Refer to Oracle ILOM documentation to understand more about setting up passwords, managing users, and applying security-related features, including Secure Shell (SSH), Secure Socket Layer (SSL), and RADIUS authentication. For security guidelines that are specific to Oracle ILOM, refer to the Oracle Security Guide Firmware 3.0, 3.1, and 3.2, which is part of the Oracle ILOM 3.2 documentation library. You can find the Oracle ILOM 3.2 documentation at: