Reference Guide

Pre-loaded accounts
Not applicable.
Default credentials
Not applicable.
Disabling accounts
● The ismtech utility installed by iSM can be used to create an iDRAC user for support purposes. From the host operating
system, the ismtech utility can be used to delete the user so created. As a security measure, the iSM service deletes the
ismtech user account automatically after 24 hours.
● If the administrator has created an SMUX peer password while enabling the InBandSNMPTraps feature; then this
password can be cleaned up by disabling the feature using the following command:
/opt/dell/srvadmin/iSM/bin/Enable-iDRACSNMPTrap.sh
● The iDRAC SNMP user created for the InBandSNMPGet feature can be deleted by disabling this feature using iSM installer
or iDRAC interfaces.
Managing credentials
The ismtech utility can be used to change the password for the ismtech local account that was created in iDRAC.
Securing credentials
It is recommended to install iSM on the file system that is accessible only by the system administrator. iSM stores the
certificates in the native store of the operating system on the Microsoft Windows operating system. On other operating
systems, the certificates are stored in the file system area restricted to only administrator users. The credentials created for
creating an iDRAC local user are stored in iDRAC. Example: ismtech utility.
Password complexity
The password complexity for iDRAC local user creation using ismtech utility can be configured in iDRAC interfaces and is
enforced accordingly. To create the secure passwords, follow the iDRAC recommendations provided in Integrated Dell Remote
Access Controller 9 User's Guide at https://www.dell.com/idracmanuals.
12
Product and subsystem security