Users Guide

200 Configuring Security Features
Security Options for the DRAC Administrator
Disabling the DRAC 5 Local Configuration
Administrators can disable local configuration through the DRAC 5 graphical
user interface (GUI) by selecting Remote Access→ Configuration→
Services. When the Disable the DRAC local Configuration using option
ROM check box is selected, the Remote Access Configuration Utility—
accessed by pressing Ctrl+E during system boot—operates in read-only
mode, preventing local users from configuring the device. When the
administrator selects the Disable the DRAC local Configuration using
RACADM check box, local users cannot configure the DRAC 5 through the
racadm utility, or the Dell OpenManage Server Administrator, although they
can still read the configuration settings.
Administrators can enable one or both of these options at the same time.
In addition to enabling them through the GUI, administrators can do so
using local racadm commands.
Disabling Local Configuration During System Reboot
This feature disables the ability of the managed system’s user to configure the
DRAC 5 during system reboot.
racadm config -g cfgRacTune -o
cfgRacTuneCtrlEConfigDisable 1
NOTE: This option is supported only on the Remote Access Configuration Utility
version 1.13 and later. To upgrade to this version, upgrade your BIOS using the BIOS
update package from the Dell Server Updates DVD or the Dell Support website at
support.dell.com.
Disabling Local Configuration From Local racadm
This feature disables the ability of the managed system’s user to configure the
DRAC 5 using the local racadm or the Dell OpenManage Server
Administrator utilities.
racadm config -g cfgRacTune -o
cfgRacTuneLocalConfigDisable 1