Dell VxRail Security Configuration Guide

Authenticity and integrity

VxRail deploys the VMware vCenter Server OVA and the VxRail Manager OVA. Broadcom uses VMware ESXi to digitally sign the VMware vCenter Server OVA and VIBs, and the VxRail Manager OVA and validates them upon deployment.

The LCM bundle contains a combination of artifacts that are used to upgrade VxRail including:

• VxRail Manager (signed OVA)
• VMware vCenter Server (signed OVA)
• VMware ESXi drivers for Dell Technologies hardware (signed VIBs)
• Platform Service Controllers (signed VIB)
• BIOS signed by PowerEdge
• iDRAC signed firmware
• Other artifacts that may not be signed

For VxRail 7.0.350 and later, the LCM contains a digitally signed manifest of all files within the bundle and their corresponding SHA 512 digests. The digests are generated during the build process. The resulting manifest file is used to generate a digital signature as part of the code signing process.