background image

Prevent Unauthorized Access (Oracle VM Server for SPARC)

When you assign user roles to a physical domain, the capabilities for that domain mirror those

of the user roles assigned for the platform, but they are restricted to the commands executed on

the given component.

Note - 

Only user roles of administrator (a), console (c), and reset (r) can be assigned for

individual physical domains.

Obtain the 

SPARC M8 and SPARC M7 Servers Administration Guide

 at:

http://docs.oracle.com/cd/E55211_01/

Prevent Unauthorized Access (Oracle VM Server for

SPARC)

Use Oracle VM for SPARC commands to restrict access to the Oracle VM for

SPARC software.

Obtain the 

Oracle VM for SPARC Security Guide

 at: 

http://www.oracle.com/goto/vm-sparc/

docs

.

Restricting Access (OBP)

These topics describe how to restrict access at the OBP prompt.

“Implement Password Protection” on page 12

“Enable the Security Mode” on page 13

“Disable the Security Mode” on page 14

“Check for Failed Log-Ins (OBP)” on page 14

“Provide a Power-On Banner” on page 14

For information about setting OpenBoot security variables, refer to the OpenBoot

documentation at:

http://www.oracle.com/goto/openboot/docs

Implement Password Protection

If you have not already set a password, perform this step.

12

SPARC M8 and SPARC M7 Servers Security Guide • September 2017

Содержание SPARC M7

Страница 1: ...SPARC M8 and SPARC M7 Servers Security Guide Part No E55218 02 September 2017 ...

Страница 2: ......

Страница 3: ...f information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate fail safe backup redundancy and other measures to ensure its safe use Oracle Corporation and its af...

Страница 4: ...n des informations Ce logiciel ou matériel n est pas conçu ni n est destiné à être utilisé dans des applications à risque notamment dans des applications pouvant causer un risque de dommages corporels Si vous utilisez ce logiciel ou ce matériel dans le cadre d applications dangereuses il est de votre responsabilité de prendre toutes les mesures de secours de sauvegarde de redondance et autres mesu...

Страница 5: ...f information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate fail safe backup redundancy and other measures to ensure its safe use Oracle Corporation and its af...

Страница 6: ...n des informations Ce logiciel ou matériel n est pas conçu ni n est destiné à être utilisé dans des applications à risque notamment dans des applications pouvant causer un risque de dommages corporels Si vous utilisez ce logiciel ou ce matériel dans le cadre d applications dangereuses il est de votre responsabilité de prendre toutes les mesures de secours de sauvegarde de redondance et autres mesu...

Страница 7: ...d Access Oracle Solaris OS 11 Prevent Unauthorized Access Oracle ILOM 11 Prevent Unauthorized Access Oracle VM Server for SPARC 12 Restricting Access OBP 12 Implement Password Protection 12 Enable the Security Mode 13 Disable the Security Mode 14 Check for Failed Log Ins OBP 14 Provide a Power On Banner 14 Oracle System Firmware 15 Secure WAN Boot 15 7 ...

Страница 8: ...8 SPARC M8 and SPARC M7 Servers Security Guide September 2017 ...

Страница 9: ...ccess to hot plug or hot swap devices Store all spare replacement parts in a locked cabinet Restrict access to the locked cabinet to authorized personnel Periodically verify the status and integrity of the locks on the rack and the spares cabinet to guard against or detect tampering or doors being accidentally left unlocked Store cabinet keys in a secure location with limited access Restrict acces...

Страница 10: ...s radio frequency identification RFID readers can further simplify asset tracking An Oracle white paper How to Track Your Oracle Sun System Assets by Using RFID is available at http www oracle com technetwork articles systems hardware architecture o11 001 rfid oracle 214567 pdf Hard Drives Hard drives hard disk drives and solid state drives are often used to store sensitive information To protect ...

Страница 11: ...ftware harden the OS use security features and protect applications Obtain the Oracle Solaris Security Guidelines document for the version you are using at http www oracle com goto solaris11 docs http www oracle com goto solaris10 docs Prevent Unauthorized Access Oracle ILOM 1 Use Oracle ILOM commands to restrict access to the Oracle ILOM software change the factory set password limit the use of t...

Страница 12: ...Oracle VM for SPARC commands to restrict access to the Oracle VM for SPARC software Obtain the Oracle VM for SPARC Security Guide at http www oracle com goto vm sparc docs Restricting Access OBP These topics describe how to restrict access at the OBP prompt Implement Password Protection on page 12 Enable the Security Mode on page 13 Disable the Security Mode on page 14 Check for Failed Log Ins OBP...

Страница 13: ...ssword is required to perform any action including normal operations such as boot When set to command a password is not required for the boot or go commands but all other commands require a password For business continuity reasons set the security mode parameter to command as in the following example 0 ok setenv security mode command 0 ok 2 Obtain the security mode prompt After setting the securit...

Страница 14: ... access the OpenBoot environment by using the security badlogins parameter as in the following example ok printenv security badlogins If this command returns any value greater than Ø a failed attempt to access the OpenBoot environment was recorded 2 Reset the parameter by typing ok setenv security badlogins 0 Provide a Power On Banner Although it is not a direct preventative or detective control a...

Страница 15: ...ocs oracle com cd E55211_01 Secure WAN Boot WAN boot supports varying levels of security You can use a combination of the security features that are supported in WAN boot to meet the needs of your network A more secure configuration requires more administration but also protects your system data to a greater extent For the Oracle Solaris 10 OS refer to the information on securing WAN boot installa...

Страница 16: ...16 SPARC M8 and SPARC M7 Servers Security Guide September 2017 ...

Отзывы: