User Guide

Product and Subsystem Security
Topics:
•
Security controls map
• Authentication
• Rest API security
• Login security settings
• User and credential management
• Role and scope-based access
• Data security
• Cryptography
• Auditing and logging
Security controls map
Power Manager uses fine-grained instrumentation to provide increased visibility to power consumption, anomalies, and
utilization. Power Manager alerts and reports about power and thermal events in servers, chassis, and custom groups consisting
of servers and chassis. This reporting enables increased control, faster response times, greater accuracy, and broader decision-
making intelligence than is otherwise possible.
Figure 1. Security control map for Power Manager plug-in
Authentication
Access control settings provide protection of resources against unauthorized access. Only Administrators, Device Managers,
and Viewers have access to Power Manager plug-in features with appropriate roles and privileges configured. For feature-based
access details, see the OpenManage Enterprise Power Manager and OpenManage Enterprise User's Guide.
Rest API security
For the rest API security-related information, see the Security section in OpenManage Enterprise Power Manager RESTful API
Guide.
Login security settings
There are various security configurations available in OpenManage Enterprise which when applied in OpenManage Enterprise
gets automatically applied to Power Manager plug-in. For example, you can provide an IP range where only the devices that are
specified in the IP range can access OpenManage Enterprise, block a user by specifying the username or an IP address, or lock
a user for a specific duration after multiple failed attempts. For more details, see the Set the login security properties topic in
OpenManage Enterprise User's Guide.
4
Product and Subsystem Security 9