Support for Using IPMI With Transport Layer Security (TLS)

Language:

In previous versions of Oracle Hardware Management Pack for Oracle Solaris prior to Oracle Solaris 11.3 SRU 18, network IPMI encryption was handled using the LANPLUS protocol. Support has been added to use IPMI with the TLS protocol if it is supported by the target Oracle ILOM. To use IPMI over TLS, the target Oracle ILOM must be version 3.2.8.1 or later. You can verify support by logging into the target Oracle ILOM using the web interface and checking the TLS Sessions setting under Administration > Management Access > IPMII.

If IPMI over TLS support is not available in the target Oracle ILOM, the protocol will fall back to the LANPLUS protocol (If enabled).

Note - Although encrypted communication for IPMI over TLS is supported in Oracle Hardware Management Pack for Oracle Solaris 11.3 SRU 18, certificate verification is not currently supported. Support for full certificate verification is expected in a future release of Oracle Hardware Management Pack for Oracle Solaris 11.3.