1. Oracle ILOM Security Guide For Firmware Release 5.1.x
  2. Oracle ILOM Deployment Practices for Increasing Security
  3. Choosing Whether to Configure FIPS Mode At Deployment
  4. Unsupported Features When FIPS Mode Is Enabled

Unsupported Features When FIPS Mode Is Enabled

Upon enabling FIPS compliance in Oracle ILOM, the following non-compliant FIPS 140-2 features in Oracle ILOM are not supported.

Table 4-1 Unsupported Features in Oracle ILOM When FIPS Mode Is Enabled

Unsupported FIPS Mode Feature Description

Firmware Compatibility for Oracle ILOM System Remote Console

FIPS mode in Oracle ILOM prevents the earlier firmware versions of Oracle ILOM Remote System Console to be compatible with the later Oracle ILOM remote System Console firmware versions.

For instance, the Oracle ILOM Remote System Console client firmware version 3.2.4 is backward compatible with the Oracle ILOM Remote System Console firmware version 3.2.3 and earlier. However the Oracle ILOM Remote System Console client firmware version 3.2.2 and earlier are not forward compatible with the Oracle ILOM Remote System Console firmware version 3.2.4 and later.

Note: This firmware compatibility limitation does not apply to the Oracle ILOM Remote System Console Plus. The Oracle ILOM Remote System Console Plus is provided on newer service processor systems such as SPARC T5 and later systems, and or Oracle Server x4-4, x4-8 and later systems. The Oracle ILOM Remote System Console is provided on older service processor systems such as SPARC T3 and T4 and Sun Server x4-2/2L/2B and earlier systems.

Lightweight Directory Access Protocol (LDAP)

When FIPS mode is enabled and running on the system, the LDAP configuration properties in Oracle ILOM are automatically removed from the Oracle ILOM CLI and web interface.

Remote Authentication Dial-In User Service (RADIUS)

When FIPS mode is enabled and running on the system, the RADIUS configuration properties in Oracle ILOM are automatically removed from the Oracle ILOM CLI and web interface.

Simple Network Management Protocol (SNMP) DES and MD5

When FIPS mode is enabled and running on the system, the SNMP configuration properties for DES Privacy Protocol and MD5 Authentication Protocol are not supported in the Oracle ILOM CLI or web interface.