Using Server Configuration And Management Tools Securely; Oracle System Assistant Security - Oracle X5-2 Security Manual

Using Server Configuration and Management
Tools Securely
Follow the security guidelines in these sections when using software and firmware tools to
configure and manage your server:
"Oracle System Assistant Security" on page 11
■
"Oracle ILOM Security" on page 12
■
"Oracle Hardware Management Pack Security" on page 14
■
Contact your IT Security Officer for additional security requirements that pertain to your system
and specific environment.

Oracle System Assistant Security

Oracle System Assistant is a preinstalled tool that helps you to configure and update server
hardware and to install supported operating systems. For information about how to use Oracle
System Assistant, refer to the Oracle X5 Series Servers Administration Guide at:
http://www.oracle.com/goto/x86AdminDiag/docs
The following information describes security issues related to Oracle System Assistant.
Oracle System Assistant contains a bootable root environment.
■
Oracle System Assistant is an application that runs on a preinstalled, internal USB flash
drive. Oracle System Assistant is built on top of a bootable Linux root environment. Oracle
System Assistant also provides the ability to access its underlying root shell. Users who
have physical access to the system, or who have remote KVMS (keyboard, video, mouse,
and storage) access to the system through Oracle ILOM, can access Oracle System Assistant
and the root shell.
A root environment can be used to change system configuration and policies, as well as to
access data on other disks. To increase security, protect physical access to the server and
assign administrator and console privileges for Oracle ILOM users sparingly.

Using Server Configuration and Management Tools Securely

11