Dell iDRAC Service Module Security Configuration Guide

User and credential management

This section describes how to manage and secure credentials in iDRAC Service Module (iSM). Topics include password complexity options and configurations and preloaded accounts that exist by default after installation.

• ismtech is a CLI command on all iSM supported operating systems. This command creates a user in iDRAC with a username ismtech to enable a Dell Technologies service personnel to perform support-related actions. This utility is restricted to administrator users only. It requests a password as input and sends a request to iDRAC for user account creation. iDRAC uses its process to manage credentials. This password is not stored on the host operating system.
• For the feature InBandSNMPTraps, if the administrator has chosen the SMUX protocol with password to enable iDRAC alert forwarding through the operating system as SNMP traps, then the password is managed in an administrator-restricted file system location in the operating system.
• For the feature InBandSNMPGet, iSM creates an iDRAC local user with read-only privileges. These credentials are managed by iDRAC.