HP Onboard Administrator - Manual (Page 118)

Configuring the HP BladeSystem c7000 enclosure and enclosure devices 118
FIPS Strong Password Enforcement
If the change is to the FIPS mode ON or FIPS mode DEBUG, strong passwords are enabled, minimum
password length is set to eight characters, and a new Administrator account password is requested.
Additionally, the Enclosure IP Mode, Telnet, SNMPv1, and SNMPv2 protocols are disabled and SNMPv3 is
available.
To save the settings, click Apply.
NOTE: Entering and exiting FIPS mode performs a factory restore operation and locks the Insight
Display (LCD). If the Onboard Administrator was previously configured with a static IP address, it
defaults to a DHCP address until reconfigured with a static IP address. Recovery requires access
to the Onboard Administrator serial console to perform the SHOW OA NETWORK command to
discover the new Onboard Administrator IP address.
The term FIPS mode used in this document and within the product is to describe the feature, and not its
validation status. The FIPS validation process is lengthy, so not all versions are FIPS validated. For information
about the current FIPS status of this or any other firmware version, see the following documents:
• Cryptographic Module Validation Program FIPS 140-1 and FIPS 140-2 Modules In Process List
(
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140InProcess.pdf )
• FIPS 140-1 and FIPS 140-2 Vendor List
(
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm )
Clear VC Mode
Clearing the VC mode removes all VC settings from the enclosure. Power off all VC-configured servers before
clearing the VC mode. If servers are not powered down, they might maintain the VC settings until they are
rebooted. You must clear the VC mode before changing to the FIPS mode OFF/ON/DEBUG.
To clear the VC Mode:
1. Click Clear VC Mode. A confirmation screen appears, stating All servers should be powered
off and not configured by Virtual Connect prior to clearing VC mode. Are you
sure that you wish to clear VC mode?
2. Click OK.
Link Loss Failover
This screen enables you to configure automatic Onboard Administrator redundancy failover based on
network link status. For Link Loss Failover to function correctly, the redundancy status of the Onboard
Administrators must be OK. An OK status means that both Onboard Administrators have the same firmware
version (firmware version 2.20 or higher), and that they are communicating properly.
Enable Link Loss Failover—This check box enables or disables automatic Link Loss Failover.
Failover Interval—The failover interval is the amount of time the active Onboard Administrator must be
without a link on the external Ethernet interface before the system considers an automatic failover. The
interval must be between 30 and 86400 seconds.
Click Apply to save the settings.