Im setting up hpe server to replace my old one. a colocation server. I would like to reach it with iLo5 but you recommend not to put iLo direct to internet. As it is colocation I dont have access to the hosting companys firewalls. Should I disable iLo or do you think i will be fairly safe if I follow the rest of the steps? Would be nice if you could implement "ip range restricted role" for us with colocation hosting.
1. Update firmware. 2. Disable IPMI. 3. Do NOT connect iLO to internet. 4. Use a real CA-signed certificate. 5. Regularly change passwords. 6. Use strong encryption ciphers. 7. Keep management engine firmware up to date. 8. Configure remote console to lock OS server console. 9. Use dedicated management network. 10. Disable unused ports. Comments to iLOfeedback@hpe.com
