Unsupported Features When FIPS Mode Is Enabled
Upon enabling FIPS compliance in Oracle ILOM, the following non-compliant FIPS 140-2 features in Oracle ILOM are not supported.
Table 4-1 Unsupported Features in Oracle ILOM When FIPS Mode Is Enabled
Unsupported FIPS Mode Feature | Description |
---|---|
Firmware Compatibility for Oracle ILOM System Remote Console |
FIPS mode in Oracle ILOM prevents the earlier firmware versions of Oracle ILOM Remote System Console to be compatible with the later Oracle ILOM remote System Console firmware versions. For instance, the Oracle ILOM Remote System Console client firmware version 3.2.4 is backward compatible with the Oracle ILOM Remote System Console firmware version 3.2.3 and earlier. However the Oracle ILOM Remote System Console client firmware version 3.2.2 and earlier are not forward compatible with the Oracle ILOM Remote System Console firmware version 3.2.4 and later. Note: This firmware compatibility limitation does not apply to the Oracle ILOM Remote System Console Plus. The Oracle ILOM Remote System Console Plus is provided on newer service processor systems such as SPARC T5 and later systems, and or Oracle Server x4-4, x4-8 and later systems. The Oracle ILOM Remote System Console is provided on older service processor systems such as SPARC T3 and T4 and Sun Server x4-2/2L/2B and earlier systems. |
Lightweight Directory Access Protocol (LDAP) |
When FIPS mode is enabled and running on the system, the LDAP configuration properties in Oracle ILOM are automatically removed from the Oracle ILOM CLI and web interface. Note: The following remote authentication services are supported in both FIPS compliant and non-compliant modes: Active Directory and LDAP/SSL. |
Remote Authentication Dial-In User Service (RADIUS) |
When FIPS mode is enabled and running on the system, the RADIUS configuration properties in Oracle ILOM are automatically removed from the Oracle ILOM CLI and web interface. Note: The following remote authentication services are supported in both FIPS compliant and non-compliant modes: Active Directory and LDAP/SSL. |
Simple Network Management Protocol (SNMP) DES and MD5 |
When FIPS mode is enabled and running on the system, the SNMP configuration properties for DES Privacy Protocol and MD5 Authentication Protocol are not supported in the Oracle ILOM CLI or web interface. |