Select MM Control → Security to view and manage security settings.
The following illustrations show examples of security settings for an advanced management module.
Select Security to view or change the Secure Sockets Layer (SSL) settings for the web server and LDAP client and to view or change the Secure Shell (SSH) server settings. You can enable or disable (the default) SSL and select between self-signed certificates and certificates that are provided by a certificate authority (CA). You also can enable (the default) or disable SSH and generate and manage the SSH server key. For an advanced management module, you also can enable or disable data encryption for sensitive data such as passwords and keys. When data encryption is enabled, the only way to disable data encryption is by restoring the management module to its factory default configuration. If data encryption is enabled, installing a management module firmware update that does not support data encryption causes all management module configuration settings to revert to their factory default values.
- For an advanced management module, you also can enable or disable SSH by using SNMP and the management-module command-line interface. See the BladeCenter Advanced Management Module Command-Line Interface Reference Guide for more information.
- An advanced management module can use installed SSH public keys to enable authentication without using passwords. Up to 12 public keys can be installed to enable user access.
- An advanced management module generates SSH host keys automatically, if no host keys are installed and either SSH or Secure SMASH is enabled.
The following illustration shows the Secure Shell configuration page for an advanced management module.
Some of the security settings are used during SSL, LDAP, and SSH configuration. See Secure web server and secure LDAP and Configuring the Secure Shell (SSH) server for additional information.