Dieser Artikel beschreibt welche TCP/UDP Ports auf einer Firewall für einen Zugriff auf die unterschiedlichen Dienste (z.B. Webinterface, IPMI, Remote Console) des Full Remote Managements von Supermicro Servern offen sein müssen.

Dan Farmer is known for his groundbreaking work on security tools and processes. Over the last year, Dan has identified some serious security issues with the Intelligent Platform Management Interface (IPMI) protocol and the Baseboard Management Controllers (BMCs) that speak it. This post goes into detail on how to identify and test for each of the issues that Dan identified, using a handful of free security tools. If you are looking for a quick overview of the issues discussed in this post, please review the FAQ. Dan has also put together an excellent best practices document that is a must-read for anyone working on the remediation side.

DMTF Redfish LogoScalability in today’s data center is increasingly achieved with horizontal, scale-out solutions, which often include large quantities of simple servers. The usage model of scale-out hardware is drastically different than that of traditional enterprise platforms, and requires a new approach to management.

Designed to meet the expectations of end users for simple, modern and secure management of scalable platform hardware, the DMTF’s Redfish is an open industry standard specification and schema that specifies a RESTful interface and utilizes JSON and OData to help customers integrate solutions within their existing tool chains.

Industry feedback has been incorporated into each work-in-progress release and previous versions of the standard have converged into Redfish 1.0.