background image

Oracle System Firmware

{0} ok 

setenv oem-banner 

banner-message

{0} ok 

setenv oem-banner? true

The banner message can be up to 68 characters. All printable characters are accepted.

Oracle System Firmware

The Oracle system firmware uses a controlled update process to prevent unauthorized

modifications. Only the superuser or an authenticated user with proper authorization can use the

update process.

For information on how to obtain the latest updates or patches, refer to the product notes at:

http://docs.oracle.com/cd/E55211_01/

Secure WAN Boot

WAN boot supports varying levels of security. You can use a combination of the security

features that are supported in WAN boot to meet the needs of your network. A more secure

configuration requires more administration, but also protects your system data to a greater

extent.

For the Oracle Solaris 10 OS, refer to the information on securing WAN boot installation

configuration in the 

Oracle Solaris Installation Guide: Network-Based Installations

 book.

See 

http://www.oracle.com/goto/solaris10/docs

For the Oracle Solaris 11 OS, refer to 

Securing the Network in Oracle Solaris

.

See 

http://www.oracle.com/goto/solaris11/docs

Understanding Software Security

15

Содержание SPARC M7

Страница 1: ...SPARC M8 and SPARC M7 Servers Security Guide Part No E55218 02 September 2017 ...

Страница 2: ......

Страница 3: ...f information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate fail safe backup redundancy and other measures to ensure its safe use Oracle Corporation and its af...

Страница 4: ...n des informations Ce logiciel ou matériel n est pas conçu ni n est destiné à être utilisé dans des applications à risque notamment dans des applications pouvant causer un risque de dommages corporels Si vous utilisez ce logiciel ou ce matériel dans le cadre d applications dangereuses il est de votre responsabilité de prendre toutes les mesures de secours de sauvegarde de redondance et autres mesu...

Страница 5: ...f information management applications It is not developed or intended for use in any inherently dangerous applications including applications that may create a risk of personal injury If you use this software or hardware in dangerous applications then you shall be responsible to take all appropriate fail safe backup redundancy and other measures to ensure its safe use Oracle Corporation and its af...

Страница 6: ...n des informations Ce logiciel ou matériel n est pas conçu ni n est destiné à être utilisé dans des applications à risque notamment dans des applications pouvant causer un risque de dommages corporels Si vous utilisez ce logiciel ou ce matériel dans le cadre d applications dangereuses il est de votre responsabilité de prendre toutes les mesures de secours de sauvegarde de redondance et autres mesu...

Страница 7: ...d Access Oracle Solaris OS 11 Prevent Unauthorized Access Oracle ILOM 11 Prevent Unauthorized Access Oracle VM Server for SPARC 12 Restricting Access OBP 12 Implement Password Protection 12 Enable the Security Mode 13 Disable the Security Mode 14 Check for Failed Log Ins OBP 14 Provide a Power On Banner 14 Oracle System Firmware 15 Secure WAN Boot 15 7 ...

Страница 8: ...8 SPARC M8 and SPARC M7 Servers Security Guide September 2017 ...

Страница 9: ...ccess to hot plug or hot swap devices Store all spare replacement parts in a locked cabinet Restrict access to the locked cabinet to authorized personnel Periodically verify the status and integrity of the locks on the rack and the spares cabinet to guard against or detect tampering or doors being accidentally left unlocked Store cabinet keys in a secure location with limited access Restrict acces...

Страница 10: ...s radio frequency identification RFID readers can further simplify asset tracking An Oracle white paper How to Track Your Oracle Sun System Assets by Using RFID is available at http www oracle com technetwork articles systems hardware architecture o11 001 rfid oracle 214567 pdf Hard Drives Hard drives hard disk drives and solid state drives are often used to store sensitive information To protect ...

Страница 11: ...ftware harden the OS use security features and protect applications Obtain the Oracle Solaris Security Guidelines document for the version you are using at http www oracle com goto solaris11 docs http www oracle com goto solaris10 docs Prevent Unauthorized Access Oracle ILOM 1 Use Oracle ILOM commands to restrict access to the Oracle ILOM software change the factory set password limit the use of t...

Страница 12: ...Oracle VM for SPARC commands to restrict access to the Oracle VM for SPARC software Obtain the Oracle VM for SPARC Security Guide at http www oracle com goto vm sparc docs Restricting Access OBP These topics describe how to restrict access at the OBP prompt Implement Password Protection on page 12 Enable the Security Mode on page 13 Disable the Security Mode on page 14 Check for Failed Log Ins OBP...

Страница 13: ...ssword is required to perform any action including normal operations such as boot When set to command a password is not required for the boot or go commands but all other commands require a password For business continuity reasons set the security mode parameter to command as in the following example 0 ok setenv security mode command 0 ok 2 Obtain the security mode prompt After setting the securit...

Страница 14: ... access the OpenBoot environment by using the security badlogins parameter as in the following example ok printenv security badlogins If this command returns any value greater than Ø a failed attempt to access the OpenBoot environment was recorded 2 Reset the parameter by typing ok setenv security badlogins 0 Provide a Power On Banner Although it is not a direct preventative or detective control a...

Страница 15: ...ocs oracle com cd E55211_01 Secure WAN Boot WAN boot supports varying levels of security You can use a combination of the security features that are supported in WAN boot to meet the needs of your network A more secure configuration requires more administration but also protects your system data to a greater extent For the Oracle Solaris 10 OS refer to the information on securing WAN boot installa...

Страница 16: ...16 SPARC M8 and SPARC M7 Servers Security Guide September 2017 ...

Отзывы: