iDRAC9 Security Configuration Guide

Disabling Access to Modify iDRAC Configuration Settings on Host System

Host administrators and users with access to F2 during POST can modify iDRAC configurations through Local RACADM and the iDRAC Settings Utility without being configured as an iDRAC user.

You can disable access to modify the iDRAC configuration settings from these interfaces. However, you can still view these configuration settings when this access is disabled.

If access is disabled, you cannot use Server Administrator, iDRAC Service Module, or IPMITool to perform iDRAC configurations. As a security best practice, it is recommended to disable all management functionality that is not required.

To do this:

1. In iDRAC Web interface, go to iDRAC Settings > Services > Local Configurations.
2. Select one or both of the following:
   • Disable the iDRAC Local Configuration using iDRAC Settings — Disables access to modify the configuration settings in iDRAC Settings utility.
   • Disable the iDRAC Local Configuration using RACADM — Disables access to modify the configuration settings in Local RACADM.
3. Click Apply.