Nvidia DGX A100

NVIDIA DGX A100 DU-09821-001 _v01|77
Chapter13. Security
This section provides information about security measures in the DGX A100 system.
13.1. User Security Measures
The NVIDIA DGX A100 system is a specialized server designed to be deployed in a data center.
It must be configured to protect the hardware from unauthorized access and unapproved
use. The DGX A100 system is designed with a dedicated BMC Management Port and multiple
Ethernet network ports.
When you install the DGX A100 system in the data center, follow best practices as established
by your organization to protect against unauthorized access.
13.1.1. Securing the BMC Port
NVIDIA recommends that you connect the BMC port in the DGX A100 system to a dedicated
management network with firewall protection.
If remote access to the BMC is required, such as for a system hosted at a co-location provider,
it should be accessed through a secure method that provides isolation from the internet, such
as through a VPN server.
13.2. System Security Measures
This section provides information about the security measures that have been incorporated in
an NVIDIA DGX A100 system.
13.2.1. Secure Flash of DGX A100 Firmware
Secure Flash is implemented for the DGX A100 to prevent unsigned and unverified firmware
images from being flashed onto the system.
13.2.1.1. Encryption
Here is some information about encrypting the DGX A100 firmware.
The firmware encryption algorithm is AES-CBC.
‣
The firmware encryption key strength is 128 bits or higher.