iDRAC9 Security Configuration Guide

iDRAC Credential Vault

The iDRAC service processor provides a secure storage memory that protects various sensitive data such as iDRAC user credentials and private keys for default self-signed TLS/SSL certificates. Another example of silicon-based security, this memory is encrypted with a unique immutable root key that is programmed into each iDRAC chip at the time of manufacture. This protects against physical attacks where the attacker desolders (removes) the chip to attempt to gain access to the data.