Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
- Threat modeling for BMCs
- Identifying the attack surface of server BMCs
- Common vulnerabilities found in legacy BMC firmware
- Overview of OpenBMC security architecture
- Compliance standards (NIST, PCI-DSS)
Secure Boot Implementation
- U-Boot verified boot chain management
- Image signing using RSA and ECDSA
- Key hierarchy structure and revocation procedures
- Basics of measurement and attestation
Firmware Update Integrity
- Image signature verification workflows
- Rollback prevention and version control policies
- Dual-bank update methodologies
- Code deployment via Redfish and IPMI
Certificate Governance
- Phosphor-certificate-manager architecture
- Installation and rotation of HTTPS certificates
- Certificate Authority (CA) trust store management
- LDAPS and client certificate authentication
Authentication and Access Control
- Local user administration and password policies
- Integration with LDAP and Active Directory
- Configuration of the PAM stack
- Redfish RBAC and privilege mapping strategies
Network Defense
- Firewall rule management and nftables
- TLS 1.3 configuration within bmcweb
- SSH hardening and key-based authentication
- Network segmentation for BMC interfaces
Monitoring and Incident Response
- Remote syslog configuration
- Logging of security-related events
- SEL and audit trail oversight
- Incident response protocols for compromised BMCs
Security Verification
- Static code analysis using CodeQL and Bandit
- Fuzz testing of D-Bus interfaces
- Penetration testing of REST and Redfish APIs
- CVE tracking and patch management
Requirements
- Foundational knowledge of PKI and TLS principles
- Basic comprehension of Linux security frameworks
- Experience with embedded firmware update processes
Target Audience
- Security engineers
- Firmware developers
- System administrators responsible for BMC infrastructure
Testimonials (3)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
The report and rules setup.
Jack - CFNOC- DND
Course - Micro Focus ArcSight ESM Advanced
I understood the process of the operating system and how do we link all factors together information of network as well so now I have an obvious and full picture about what is going on these computers how they communicate with each others ultimately gained knowledge about the most important operating system which is Linux and how do we implement our own embedded Linux
