Users Guide

● Set user passwords and BIOS passwords using one-way hash format for improved security.
● FIPS 140-2 Level 1 capability.
● Support for TLS 1.2, 1.1, and 1.0. To enhance security, default setting is TLS 1.1 and higher.
● SMCLP and web interfaces that support 128 bit and 40-bit encryption (for countries where 128 bit is not acceptable), using
the TLS 1.2 standard.
NOTE: To ensure a secure connection, Dell recommends using TLS 1.1 and higher.
● Session time-out configuration (in seconds).
● Configurable IP ports (for HTTP, HTTPS, SSH, Telnet, Virtual Console, and Virtual Media).
NOTE: Telnet does not support SSL encryption and is disabled by default.
●
Secure Shell (SSH) that uses an encrypted transport layer for higher security.
● Login failure limits per IP address, with login blocking from that IP address when the limit is exceeded.
● Limited IP address range for clients connecting to iDRAC.
● Dedicated Gigabit Ethernet adapter available on rack and tower servers (additional hardware may be required).
New in this release
● Added support for Redfish 2016.R1 and .R2, a RESTful Application Programming Interface (API), which is standardized by
the Distributed Management Task Force (DMTF). It provides a scalable and secure systems management interface.
● Enhanced iDRAC RESTful API support for Server Configuration Profiles with access via local file streaming and via HTTP/S
file transfer.
● Added Server Configuration Profile support for firmware repository-based updates and JSON file format.
● Export and import Server Configuration Profiles from the iDRAC GUI.
● Quick Sync 2 replaces Quick Sync NFC (Near Field Communication) with BLE (Bluetooth Low Energy) and Wi-Fi for high
throughput. Supports iDRAC GUI and Virtual Console access.
● Added support for HTTP/HTTPS file transfers.
● Added support for WSMan streaming for Server Configuration Profiles.
● Added new feature Group Manager. All iDRACs in the same subnet can be grouped together and the systems can be
grouped and managed by one master iDRAC of the group.
● Added Security Banner for GUI log in page.
● Multi Vector Cooling for better air flow cooling of 3rd party PCIe cards.
● DHCP is the default iDRAC IP address (static was the default on previous generations).
● Default password is randomly generated and printed on the system information tag, unless the legacy “root/calvin” was
ordered from the factory.
● iDRAC Direct USB on the front of the server is now a Micro B slot, and is hard wired to iDRAC only for increased security.
● Added new System Lockdown feature to restrict use of Dell tools to make changes to BIOS, iDRAC, firmware, etc.
● iDRAC Service Module (iSM) is pre-installed on the iDRAC and can be surfaced to the OS; nothing to download.
● SupportAssist can be set up through the iDRAC for 1x1 ‘phone home’ service to Dell Support.
● SupportAssist Collector now includes iDRAC core dumps, hardware crash dumps, and ESXi logs.
● SupportAssist viewer - option to export HTML5 formatted report for customer viewing by standard web browsers.
● Full HTML5 web interface for faster page loading and ease of use.
● BIOS configuration in the iDRAC GUI.
● Expanded storage functions via iDRAC, such as Online Capacity Expansion (OCE) and RAID Level Migration (RLM) without
the use of agents, via GUI or CLI.
● Improved add/delete of iDRAC Users.
● Streamlined alerts configuration.
● Added Power Control and Next Boot options in HTML5 vConsole.
● Added feature Connection View provide the switch and port for iDRAC, LOM’s and Dell supported PCIe cards.
● Internal 16GB vFlash card (optional).
● Bezel with LCD panel (optional).
● Secure Boot is a UEFI technology that removes the legacy threat and provides software identity checking at every step of
the boot—Platform firmware, Option Cards, and OS BootLoader which eliminates the major security void that may occur
during the handoff between the UEFI firmware and UEFI operating system (OS).
18
Overview