Unsolved
5 Posts
0
429
iDRAC v9 hardening and firmware query
Hi,
Is anyone aware of any guidance in https://www.dell.com/support/manuals/en-uk/idrac9-lifecycle-controller-v5.x-series/idrac9_security_configuration_guide that shouldn't be implemented in a VxRail deployment? I can't really think why there would be but I guess there's interactions between VxRail Manager and iDRAC so want to be sure I don't break anything...
Also - I'm a bit confused on the encrypted remote syslog option, the guide states:
"Remote Syslog with TLS is supported for Firmware release 6.00.00.00 and above."
But what firmware is that talking about? iDRAC firmware would be the most obvious but from what I can see v5.10.30.00 if the latest version for that (which we're running) - so is this actually a planned feature and not currently supported? I can't see config options in the GUI for it but haven't tried the racadm commands to see if it can be configured that way.
nf12345
5 Posts
0
August 2nd, 2022 02:00
I might have found part of the answer in this doc https://www.dell.com/support/kbdoc/en-uk/000157690/vxrail-idrac-settings-that-cannot-be-changed but is there a newer version of this doc? It mentions VxRail Gen3 in the Summary section - I've no idea what VxRail Gen the current E660F & P670F is but presumably higher than Gen3 as the Product section lists older models.
Things like TLS version I know we've set in other deployments to be v1.2+ and that's been OK (the article mentions setting to v1.1+ though). And this time around I was planning to change the "SSL Encryption" to 256-bit or higher but the article indicates it should be set to 128-bit or higher so not sure whether I should risk changing it or not now.
DELL-Josh Cr
Moderator
Moderator
•
8.7K Posts
0
August 2nd, 2022 08:00
Hi,
Thanks for your question about the iDRAC on Vxrail. I didn’t find any documentation about the differences between this iDRAC and the one in Poweredge servers, and looking through the guide you linked I didn’t see anything that was only going to work on Poweredge. These documents may help https://dell.to/3vBo1mO and https://dell.to/3vyb3WU
Let us know if you have any additional questions.