ProLiant Servers (ML,DL,SL)
cancel
Showing results for 
Search instead for 
Did you mean: 

Erase iLO - how secure?

 
SOLVED
Go to solution
Donal Rogers_1
Occasional Advisor

Erase iLO - how secure?

All,

I have a customer requirement to verify that any and all information stored in the ILO card in a number of ProLiant and blade servers has been securely erased by the HP System Erase Utility. In the case of the ProLiants, I used the System Erase Utility on SmartStart. In the case of the blades, I wiped the CMOS using the DIP switches located on the motherboard as stated in the Maintenance and Service Guide.

 

Is there any written verification available from HP that the System Erase utility can and does perform a full non-recoverable wipe of the iLO and that the blades CMOS memory cannot be recovered in any way once it has been erased?

 

Thanks.

 

Donal.

 

 

4 REPLIES
Jimmy Vance
HPE Pro

Re: Erase iLO - how secure?

Unless it has been changed, the system erase utility doesn't touch iLO, just NVRAM and the Smart Array settings. The iLO can be reset to factory default and that will clear out all the settings and user accounts.




__________________________________________________
No support by private messages. Please ask the forum!      I work for HPE

If you feel this was helpful please click the KUDOS! thumb below!   
Donal Rogers_1
Occasional Advisor

Re: Erase iLO - how secure?

Thanks for the quick reply Jimmy. I was editing the question while you were replying - sorry!
Donal Rogers_1
Occasional Advisor

Re: Erase iLO - how secure?

My apologies for the confusion. I wiped the servers several weeks ago and have forgotten the exact details. Apart from running System Erase, I also went in to the iLO setup page and reset it to defaults.

 

I suppose arising from that, my question is whether it can be verified that the information stored in the iLO has gone for ever and can never be recovered and whether HP can issue a statement to that effect?

 

 

Johan Guldmyr
Honored Contributor
Solution

Re: Erase iLO - how secure?

If you want official HP statements you need to go through the support (and quite likely an elevated case).