Reference Guide

Session logout is performed by issuing a DELETE of the Session resource provided by the Login operation including the
X-Auth-Token header.
iDRAC authentication
The Integrated Dell Remote Access Controller (iDRAC) is designed to make you more productive as a system administrator and
improves the overall availability of Dell EMC servers. iDRAC alerts you on system issues, remotely manage your systems, and
reduces the need for physical access to the system. See the latest iDRAC User Guide for more details on available methods of
authentication.
OMAM communicates with iDRAC using WSMan and REST. OMAM supports both session-based and basic authentication for
iDRAC REST calls over HTTPS.
OMAM supports standard Redfish endpoints as well. Both session-based and basic authentication are supported.
OpenManage Enterprise Authentication
OpenManage Enterprise is a simple-to-use, one-to-many systems management console. It is cost effective and facilitates
comprehensive lifecycle management for Dell EMC PowerEdge servers through one console. OpenManage Enterprise supports
basic authentication and X-Auth-Token Authentication for the REST calls. For more information, see the latest OpenManage
Enterprise API guide.
OMAM supports both session-based and basic authentication for OpenManage Enterprise over HTTPS.
File server authentication
Some of the OMAM modules take the artifacts from CIFS or NFS shares as module parameters. These shares are accessed by
iDRAC services to perform operations such as firmware update, system configuration exports or imports. It is recommended to
configure the share folders securely with the required user access controls.
Data security
OMAM does not store data. See Ansible Vault for details on securing credentials passed to external systems.
Serviceability
The support website https://www.dell.com/support provides access to product documentation, advisories, downloads, and
troubleshooting information. This information helps you to resolve a product issue before you contact the support team.
Security patches
OMAM follows a monthly release cycle. On the last week of every month, the updated modules are posted on GitHub. The
monthly OMAM releases include feature updates, defect fixes, and security only updates. Every major release is uploaded on the
Dell support site. For a critical security issue, a security patch is released as soon as possible.
Network security
OMAM uses HTTPS with a default security profile to communicate with OpenManage Enterprise and iDRAC. This release does
not support SSL certificate validation.
Product and Subsystem Security
7