Users Guide

System Lockdown mode

System Lockdown mode helps in preventing unintended changes after a system is provisioned. This feature can help in protecting the

system from unintentional or malicious changes. Lockdown mode is applicable to both configuration and firmware updates. When the

system is locked down, any attempt to change the system configuration is blocked. If any attempts are made to change the critical system

settings, an error message is displayed.

NOTE: After the System Lockdown mode is enabled, you cannot change any configuration settings. System Settings

fields are disabled.

Lockdown mode can be enabled or disabled using the following interfaces:

• iDRAC web interface

• RACADM

• WSMan

• SCP (System Configuration Profile)

• Redfish

• Using F2 during POST and selecting iDRAC Settings

NOTE:

To enable Lockdown mode, you must have iDRAC Enterprise license and System Control privileges.

Following are a few of the tasks that can be performed even if the system is in Lockdown mode:

• Power cap setting

• System power operations (power on/off, reset)

• Power priority

• Identify operations (Chassis or PERC)

• Part replacement

• Running diagnostics

• Modular operations (VLan configuration, FlexAddress)

• Group Manager passcode

The following table lists the functional and non-functional features, interfaces, and utilities that are affected by Lockdown mode:

NOTE:

Changing the boot order using iDRAC is not supported when lockdown mode is enabled. However, boot-control

option is available in vConsole menu, which has no effect when iDRAC is in lock down mode.

System Lockdown mode 139