Hitachi Compute Blade 500 Series - Page 56

Feature Protocol
Security strength
Default high
Therefore, In the initial settings (the settings at shipping time), SSL 3.0 is disabled.
SSL 3.0 has a communication vulnerability and part of the communications might be
readable by third parties. Therefore, we recommend that you disable SSL 3.0 if it is
not required for use. For details about settings, see
TLS/SSL version settings on
page 2-36
Note: When Security strength is set to high or when Security strength is set
to default and communication is enabled only with TLS 1.2, connection with
HCSM not supporting TLS 1.2 is not available. See HCSM instruction manuals
for the operation.
BMC
Feature Protocol
Security strength
Default high
Server blade Web
console
HTTP
Not available
1
Not available
1
HTTPS Available
(SSL3.0,
TLS1.0/1.1/1.2)
4
Available
(TLS 1.2)
IPMI over LAN IPMI v1.5 Available
Not available
2
IPMI v2.0 Available
Available
3
Remote console Hitachi protocol Available
(SSL3.0,
TLS1.0/1.1/1.2)
4
Available (TLS
1.2)
SMASH (CLP) SSHv2 Available Available
SMASH (WS-
Management)
WS-MAN Available (TLS 1.0) Available (TLS
1.0)
Syslog transfer SYSLOG Available Available
LDAP authentication LDAP (StartTLS) Available
(TLS 1.0/1.1/1.2)
Available
(TLS 1.2)
Notes:
1. The port is isolated for CB 520H B2 server blade with firmware version 04-22 or
later. For CB 520H A1/B1/B2,CB 520A A1, CB 540A A1/B1 server blade with
firmware version 04-21 or earlier, HTTP is used for a part of communication
2. Connection is rejected at IPMI v1.5 LAN Session Startup.
3. Connection is available only when CipherSuite ID is 3 and both Username and
Password are not blank.
4. SSL 3.0 is not available for CB 520X B1/B2 and CB 520H B3 because they do not
support SSL 3.0.
2-32
Functional detail
Hitachi Compute Blade 500 Series Management Module Setup Guide