Security Strength - Hitachi COMPUTE BLADE 500 SERIES Management Module Setup Manual

Feature
Remote
console
SMASH (CLP)
SMASH (WS-
Management)
Syslog transfer SYSLOG
LDAP
authentication
Legend:
Y: Configurable Blank: Not configurable
Notes:
1 HTTP is used for some communications with firmware version 04-21 or earlier of
.
server blades: CB 520H A1/B1/B2, CB 520A A1, CB 540A A1/B1.
2 Connection with SSHv1 is not supported.
.
3 Port number for the LDAP server. Connection with LDAPS is not supported.
.
4 You can select ciphertext or cleartext by setting.
.

Security strength

Security strength can be increased in management interfaces for
management modules and BMC. Security strength includes "default" and
"high", and the factory setting is "default" at shipping. Security strength
"high" has the following restrictions.
• When cipher-text communication is available, clear-text communication is
not allowed.
• For cipher-text communication, encryption algorithm with high security
can be used.
See Security strength and features on page 2-31
Displaying Security strength for
management modules and BMC
Setting Security strength for
management modules and BMC
Hitachi Compute Blade 500 Series Management Module Setup Guide
Default
Supported
port
protocol
No.
Hitachi 5001
protocol
22
2
SSHv2
WS-MAN 5986
514
LDAP 3
389
(StartTLS)
Table 2-35 Web console operation
Item
Resources tab > Systems > Security strength
setting > Security strength tab
Resources tab > Systems > Security strength
setting > Security strength tab > Edit
Functional detail
Cipher-
Service
text or
disabled
cleartext
cipher Y
cipher Y
cipher Y
cipher/ Y
4
clear
cipher Y
for details.
Operation
Restriction Changing
on IP port
address number
Y Y
Y Y
Y Y
- Y
- Y
2-29