Reference Guide
Table Of Contents
- Dell EMC iDRAC Service Module Security Configuration Guide
- Contents
- Overview
- Security quick reference
- Product and subsystem security
- Miscellaneous configuration and management elements
- Internal security information
- Resources and support
- Contacting Dell EMC
User interfaces and the minimum privileges
The following table describes the user interface, interface access, the minimum required privilege, and subsystem of the
interfaces.
Table 1. User interfaces and the required privileges
Interface Local or
remote
CLI or UI Privilege Subsystem
dcismcfg Local CLI Administrator Operating system
dcism-sync Local CLI Administrator Operating system
Enable-
iDRACAccessHostRoute
Local CLI Administrator Operating system
Enable-iDRACSNMPTrap.sh Local or
remote
CLI Administrator Operating system
Invoke-FullPowerCycle Local or
remote
CLI Administrator Operating system
Invoke-iDRACHardReset Local or
remote
CLI Administrator Operating system
Invoke-iDRACLauncher Local UI Administrator and non-
administrator
Operating system
Invoke-
SupportAssistCollection
Local CLI Administrator Operating system
ismspdlogs Local CLI *Dell EMC service
personnel
Operating system
ismtech Local CLI *Dell EMC service
personnel
Operating system
Configure WSMan Local Installer and PowerShell
script
Administrator Operating system
Installer Local UI, Silent Administrator Operating system
NVMe Prepare to Remove Remote UI, CLI Administrator iDRAC interfaces
TechSupportReport
collection
Remote UI, CLI Administrator iDRAC interfaces
Enable or disable iSM
features
Local or
remote
UI, CLI Administrator iDRAC interfaces, iSM
Installer on operating
system
* ismspdlogs and ismtech interface privileges are recommended for Dell EMC service personnel as an administrator user.
Authentication
iDRAC Service Module (iSM) generates a self-signed certificate for authentication with iDRAC. iSM verifies the iDRAC
certificate during handshake before trying any data communication.
iSM uses a UNIX or local socket for interacting with iSM installed binaries. This involves a proprietary handshake before any data
communication takes place.
iSM does not perform user authentication. However, all the command line interfaces require administrator or root user role to
perform the operation.
Product and subsystem security
9