Dell iDRAC Service Module 5.0.1.0 User’s Guide

Data communication between iSM and iDRAC uses Transport Layer Security (TLS) protected USBNIC INET sockets. This ensures protection of all the data that transports from iDRAC to iSM over USBNIC. iSM and iDRAC use self-signed certificates to control authentication. The self-signed certificates are valid for 10 years. New self-signed certificates are generated at each new installation of new iSM every time. Reinstall or upgrade the iSM when the certificates expire.

Both iDRAC and the host TLS versions must be 1.1 or later. Communication between iSM and iDRAC is unsuccessful if the TLS protocol version negotiation is unsuccessful. If iSM with TLS capability is installed on an iDRAC firmware which does not support TLS communication over USBNIC, it will work with the non-TLS channel as in the earlier versions of iSM.

If iSM is installed or upgraded to version 3.4.0 or later before iDRAC is upgraded to version 3.30.30.30 or later, then iSM must be uninstalled and reinstalled to establish new TLS certificate. iSM with TLS capability is supported on iDRAC firmware versions 3.30.30.30 and later.

iSM without TLS capability does not function on a TLS-capable version of iDRAC firmware. For example, iSM 3.3 or earlier which are not TLS-capable is not supported on iDRAC firmware 3.30.30.30 and later. If iSM 3.3.0 is installed on iDRAC 3.30.30.30 firmware, multiple events with ISM0050 are observed in Lifecycle Controller log file.