Skip to main content

CMM security

Unsecured systems-management tools can damage hardware and software and place your data at risk. You must understand all security risks in your system environment and what you can do to minimize these risks. The CMM offers advanced security capabilities and user-management settings to help you secure your environment.

For educational information about security and user management, see Lenovo Datacenter Support site. For an overview of Lenovo Flex System security, see Flex System Secutiry.

  • Security policies
    A CMM security policy is a set of security-related characteristics that define a particular level of protection from security exposures. The CMM security policies include hardware-related communication-protocol controls and account-related access controls.
  • User account policies
    A CMM user account policy is a set of criteria that determine how CMM user account security, including passwords, is implemented.
  • Configuring NIST 800-131A compliance
    The CMM can be configured to enforce NIST 800-131A cryptography for compute nodes in the chassis managed by the CMM and the CMM itself.
  • SIOM mode Switch credentials
    Each Lenovo Flex Switch using SIOM mode (requires 8.4.3 firmware or greater) can be accessed only using CMM LDAP credentials, or the external LDAP credentials configured on the CMM, if any (e.g. LXCA credentials under Centralized User Management). Furthermore, valid SNMPv3 accounts of the switch are determined by the Centralized User Management flag settings on the CMM: if enabled, valid credentials are those used configured on the CMM. If disabled, valid credentials are those set up locally on the switch. This information applicable to Lenovo switches only.