Chassis Intrusion Detection option
The chassis intrusion detection option detects if the chassis access cover is opened or closed. The iLO management processor monitors the switch and if there is a change (if the access cover is either opened or closed), it creates a log entry noting the intrusion. You can set various alerting mechanisms (Remote SysLog, SNMP, AlertMail, and so on) to be notified of the intrusion. The switch and the iLO reporting occur as long as the server is plugged in, regardless of whether the server is powered on or off.
The iLO 5 chipset helps in detecting any intrusions. It provides an unprecedented level of hardware security with its silicon root of trust. The silicon root of trust:
- Is based in the silicon chip hardware itself
- Is impossible to alter
- Enables firmware to be authenticated as far back as the supply chain
- Provides a secure startup process
The iLO 5 chipset acts as a silicon root of trust and includes an encrypted hash embedded in silicon hardware at the chip fabrication facility. Thus making it virtually impossible to insert any malware, virus, or compromised code that would corrupt the boot process. Rather than the iLO firmware checking the integrity of the firmware every time it boots, the iLO 5 hardware determines whether to execute the iLO firmware, based on whether it matches the encryption hash that is permanently stored in the iLO chipset silicon. These improvements help ensure that, if iLO 5 is running, your server is trusted.