Ilo Security With The System Maintenance Switch - NEC iLO 5 User Manual

iLO security with the system maintenance switch

The iLO security setting on the system maintenance switch provides emergency access to an
administrator who has physical control over the server system board. Disabling iLO security
allows login access with all privileges, without a user ID and password, provided that iLO is
configured to use the Production security state.
The system maintenance switch is inside the server and cannot be accessed without opening the
server enclosure. When you work with the system maintenance switch, ensure that the server is
powered off and disconnected from the power source. Set the switch to enable or disable iLO
security, and then power on the server. For detailed information about enabling and disabling
iLO security with the system maintenance switch, see the maintenance and service guide for your
server.
The system maintenance switch position that controls iLO security is sometimes called the iLO
Security Override switch.
Reasons to disable iLO security
• All user accounts that have the Administer User Accounts privilege are locked out.
• An invalid configuration prevents iLO from being displayed on the network, and the ROM-
based configuration utility is disabled.
• The iLO NIC is turned off, and it is not possible or convenient to run the ROM-based
configuration utility to turn it back on.
• Only one user name is configured, and the password is forgotten.
Effects of disabling iLO security
When iLO is set to use the Production security state, and you disable iLO security:
• All security authorization verifications are disabled.
• If the host server is reset, the ROM-based configuration utility runs.
• iLO is not disabled and might be displayed on the network as configured.
• If iLO functionality is disabled, iLO does not log out active users and complete the disable
process until the power is cycled on the server.
• A warning message is displayed on iLO web interface pages, indicating that iLO security is
disabled:
•
• An iLO log entry is added to record the iLO security change.
• If an SNMP Alert Destination is configured, an SNMP alert is sent when iLO starts after you
use the system maintenance switch to enable or disable iLO security.
253