Skip to main content

Software Security


Software Security
Most hardware security is implemented through software measures.
  1. When a new system is installed, change all default passwords. Most types of equipment use default passwords, such as changeme, that are widely known and would allow unauthorized access to the equipment. Also, devices such as network switches can have multiple user accounts by default. Be sure to change all account passwords.
  2. Use a dedicated network for service processors to separate them from the general network.
  3. Protect access to USB consoles. Devices such as system controllers, power distribution units (PDUs), and network switches can have USB connections, which can provide more powerful access than SSH connections.
  4. Refer to the documentation that came with your software to enable any security features available for the software.
  5. A server can boot securely with WAN Boot or iSCSI Boot.
    For an Oracle Solaris 10 release, refer to the Oracle Solaris Installation Guide: Network-Based Installations book

    For an Oracle Solaris 11 release, refer to the Installing Oracle Solaris 11 Systems book for WAN Boot information and the System Administration Guide: Basic Administration book for iSCSI boot information.
The Oracle Solaris Security Guidelines document provides information on:
  1. How to harden Oracle Solaris
  2. How to use Oracle Solaris security features when configuring your systems
  3. How to operate securely when you add applications and users to a system
  4. How to protect network-based applications
Oracle Solaris Security Guidelines documents can be found at: