Users Guide
Enabling FIPS Mode Using RACADM
To enable FIPS mode, run the following command:
racadm config –g cfgRacTuning –o cfgRacTuneFipsModeEnable 1
.
Disabling FIPS Mode
To disable FIPS mode, reset CMC to the default factory settings.
Conguring Services
You can congure and enable the following services on CMC:
• CMC Serial console — Enable access to CMC using the serial console.
• Web Server — Enable access to CMC Web interface. If you disable the option, use local RACADM to re-enable the Web Server, since
disabling the Web Server also disables remote RACADM.
• SSH — Enable access to CMC through rmware RACADM.
• Telnet — Enable access to CMC through rmware RACADM
• RACADM — Enable access to CMC using RACADM.
• SNMP — Enable CMC to send SNMP traps for events.
• Remote Syslog — Enable CMC to log events to a remote server.
NOTE
: When modifying CMC service port numbers for SSH, Telnet, HTTP, or HTTPS, avoid using ports commonly used by OS
services such as port 111. See Internet Assigned Numbers Authority (IANA) reserved ports at http://www.iana.org/assignments/
service-names-port-numbers/service-names-port-numbers.xhtml.
CMC includes a Web server that is congured to use the industry-standard SSL security protocol to accept and transfer encrypted data
from and to clients over the Internet. The Web server includes a Dell self-signed SSL digital certicate (Server ID) and is responsible for
accepting and responding to secure HTTP requests from clients. This service is required by the Web interface and remote RACADM CLI
tool for communicating with CMC.
If the Web server resets, wait at least one minute for the services to become available again. A Web server reset usually happens as a result
of any of the following events:
• Network conguration or network security properties are changed through the CMC Web user interface or RACADM.
• Web Server port conguration is changed through the Web user interface or RACADM.
• CMC is reset.
• A new SSL server certicate is uploaded.
NOTE
: To modify Service settings, you must have Chassis Conguration Administrator privilege.
Remote syslog is an additional log target for CMC. After you congure the remote syslog, each new log entry generated by CMC is
forwarded to the destination(s).
NOTE
: Since the network transport for the forwarded log entries is UDP, there is no guaranteed delivery of log entries, nor is
there any feedback to CMC whether the log entries were received successfully.
86 Conguring CMC