iDRAC10 Security Configuration Guide

Securely Configuring iDRAC Web Server

One of the most widely used interfaces offered in iDRAC is a web server that supports remote RACADM, Redfish, and iDRAC GUI communication. The web server includes various configurable security settings to meet user security requirements such as HTTPS redirection, encryption strength, TLS protocol, and filtering the available TLS cipher suites. Below are the recommended configurations to maximize security for iDRAC’s webserver.

• Redirecting all HTTP requests to HTTPS
• Configure TLS 1.3
• Enable 256-bit encryption strength
• Limit cipher suites to strongest available
• Use CA Signed TLS/ SSL Certificates
• Enable Simple Certificate Enrollment Protocol (SCEP)