Reference Guide

Product and Subsystem Security
Topics:
• Security controls map
•
Authentication
• Login security settings
• User and credential management
• RBAC privileges
• Data security
• Cryptography
• Auditing and logging
• Serviceability
Security controls map
Using Update Manager create and manage custom repositories for the PowerEdge devices that are discovered and managed in
OpenManage Enterprise. Interact with the Update Manager UI through a browser using HTTPS protocol.
Update Manager interacts with downloads.dell.com through HTTPS protocol and with any network share or file server
through the CIFS or NFS or HTTP or HTTPS protocols.
The following figure displays the Update Manager security controls map:
Authentication
Access control settings provide protection of resources against unauthorized access. Only Administrators, Device Managers,
and Viewers have access to Update Manager plug-in features with appropriate roles and privileges configured. For feature-
based access details, see the OpenManage Enterprise Update Manager and OpenManage Enterprise User's Guide.
Login security settings
There are various security configurations available in OpenManage Enterprise which when applied gets automatically applied to
Update Manager plug-in. For example, you can provide an IP range where only the devices that are specified in the IP range can
access OpenManage Enterprise, block a user by specifying the username or an IP address, or lock a user for a specific duration
after multiple failed attempts. For more details, see the Set the login security properties topic in OpenManage Enterprise User's
Guide.
3
Product and Subsystem Security 7