EMC® VNX® Series Security Configuration Guide for VNX

Physical security controls

The area where the storage systems reside should be chosen or configured to provide physical security for the VNX systems. These include basic measures such as providing sufficient doors and locks, permitting only authorized and monitored physical access to the system, providing a reliable power source, and following standard cabling best practices.

In addition, the serial port connection requires particular care. EMC and our service partners are capable of enabling emergency access with a serial connection to the storage processor. The customer is responsible for managing the authorized access to the management port as described in Secure serviceability settings (block) as well as for locating the storage system in a physically secure environment. This includes appropriate protection of physical access to the storage processor including the serial port for emergency service.

Restricting anonymous root login on the serial console and SSH enhances system security on VNX for file/unified systems. See Restrict anonymous root login for more information.

Protecting the GRUB boot loader with a password increases the security of the system. Setting a password for GRUB requires root access and can be accomplished by logging in to the CLI as the root user. Set the password in the GRUB configuration file. This file is often located in one of several locations; for example, /etc/grub.conf, or /boot/grub/grub, or /boot/grub/menu.lst. To set a plain-text password, edit your GRUB configuration file by adding the following line before the first uncommented line:

password <password>