EMC® VNX® Series Security Configuration Guide for VNX

Secure serviceability settings (block)

EMC Customer Service uses RemotelyAnywhere to gain direct access to a VNX SP through the TCP/IP management port, the TCP/IP service port, or the serial port.

You can change the username/password for the management port by going to the service port https://<SP_IP_address>/setup and clicking Change Service Password. Only administrators and security administrators can change the password.

In addition to providing the ability to change the password, RemotelyAnywhere provides additional security by providing IP filtering. This way you can limit the service access to only trusted IP addresses. You can manage IP filtering for Remotely Anywhere by going to https://<SP_IP_address>/setup and clicking Set RemotelyAnywhere Access Restrictions. By logging in to the VNX for block system using RemotelyAnywhere, you generate a unique message in the event log.

If a VNX system requires service, but the service password is unavailable, there is a permanently fixed default username/password that allows access through the service and serial ports. You should not physically connect these ports to anything in the data center. EMC recommends leaving these ports disconnected unless specifically requested by service personnel. These ports should be secured by controlling physical access to the room and/or rack where the storage systems are located.