Go to main content

Oracle® SuperCluster M8 and SuperCluster M7 Security Guide

Exit Print View

Updated: June 2020
 
 

Configure Login Warning Banners (Oracle ILOM)

Oracle ILOM supports the ability to display customer-specific messages both before and after an administrator has connected to the device.

The Oracle ILOM connect message is displayed prior to authentication, whereas the login message is displayed after authentication.

Optionally, you can configure Oracle ILOM to require acceptance of the login message prior to being granted access to Oracle ILOM functions. Both the connection and login messages and the optional acceptance requirement are implemented by both the browser and command-line access interfaces.

Oracle ILOM supports connection and login messages up to a maximum of 1,000 characters.

  1. On the management network, log in to Oracle ILOM.

    See Log in to the Oracle ILOM CLI.

  2. Determine if connect and login messages are configured.
    -> show /SP/preferences/banner connect_message login_message
    /SP/preferences/banner
    Properties:
    connect_message = (none)
    login_message = (none)
    
  3. Set a connection or login message.
    -> set /SP/preferences/banner connect_message="Authorized Use Only"
    -> set /SP/preferences/banner login_message="Authorized Use Only"
    
  4. Determine if login message acceptance is enabled.
    -> show /SP/preferences/banner login_message_acceptance
    /SP/preferences/banner
    Properties:
    login_message_acceptance = disabled
    
  5. (Optional) Enforce acceptance of the login message.

    Caution

    Caution  -  Requiring login message acceptance might inhibit the correct operation of automated management processes that use SSH, because they might not be able or configured to respond to the acceptance request. As a result, such connections can hang or time out because Oracle ILOM will not permit use of the CLI until the message acceptance requirement has been satisfied.


    -> set /SP/preferences/banner login_message_acceptance=enabled
    
  6. Verify the setting by repeating Step 2 and Step 4.