1. Oracle ILOM Security Guide For Firmware Release 5.1.x
  2. Oracle ILOM Deployment Practices for Increasing Security
  3. Configuring Oracle ILOM Interfaces for Increased Security
  4. Configure the Web Interface for Increased Security
  5. TLS Support for HTTPS Data Transmission

TLS Support for HTTPS Data Transmission

To support HTTPS data transmissions, TLS encryption configuration properties in Oracle ILOM are enabled by default. The properties and their default settings are as follows:

  • Firmware version 5.0.0 to 5.1.2: The tlsv1_2 encryption configuration property is enabled by default and supports TLS version 1.2. If this property is disabled, all Oracle ILOM SSL interfaces (Oracle ILOM web, IPMItool, and so on) are prevented from negotiating connections.

  • Firmware version 5.1.3: Property tlsv1_2 was replaced with properties minimum_tls_version and maximum_tls_version to support TLS v1.3 in addition to TLS v1.2, while also providing flexibility for future TLS version support. The min option for minimum_tls_version and the max option for maximum_tls_version are default settings, and they do not specify a version, but respectively use the lowest and highest protocol versions presently supported. Currently, the lowest supported version is TLS v1.2, and the highest supported version is TLS v1.3.

Note:

Support for earlier TLS versions have been removed from Oracle ILOM. Support for TLS v1.0 was removed in Oracle ILOM as of firmware version 4.0.0. TLS v1.1 was removed in Oracle ILOM as of firmware version 5.0.0.

Use the following procedure to view or modify the web server security properties in Oracle ILOM.

Before You Begin

  • Admin (a) role is required to modify the web server properties in Oracle ILOM.

To view or modify the web server security properties in Oracle ILOM, refer to the following web-based instructions.

  1. In the Oracle ILOM web interface, click ILOM Administration -> Management Access -> Web Server.
  2. In the Web Server page, view or modify the web security properties as required.

    For further details, click the More details... link located at the top of the Management Access -> Web Server page.

  3. Click Save to apply the changes.

Related Information