Skip to main content

Setting security for ThinkEdge servers

OneCLI supports to set the security by using the -redfish parameter on the ThinkEdge servers.

Example of supported values

OneCli config showvalues Security --redfish
Security.ChassisIntrusionEnabled=true=false
Security.EncryptionEnabled=true=false
Security.HostShutdown=true=false
Security.MotionDetection=true=false
Security.SED_AK=*generate=backup=restore
Security.StepCounter=0
Security.ThresholdLevel=4_Steps=10_Steps=20_Steps=50_Steps=100_Steps=500_Steps

Example of SED Authentication Key (AK) Management

  • To generate SED AK with the random method:

    OneCli.exe config generate Security.SED_AK --bmc USERID:PASSW0RD@XX.XX.XX.XX --redfish

  • To generate SED AK with the passphrase method:

    OneCli.exe config generate Security.SED_AK --passphrase xxxxxx --bmc USERID:
    PASSW0RD@XX.XX.XX.XX --redfish

  • To backup SED_AK to a file and restore with the file:

    OneCli.exe config backup Security.SED_AK --passphrase xxxxxx --file backup.txt 
    --bmc USERID:PASSW0RD@XX.XX.XX.XX --redfish
    OneCli.exe config restore Security.SED_AK --passphrase xxxxxx --file backup.txt 
    --bmc USERID:PASSW0RD@XX.XX.XX.XX --redfish