At Discover Las Vegas 2017, Hewlett Packard Enterprise announced new Gen 10 server solutions.
HPE introduced new major directions which will differentiate Gen 10 servers from the competition:
- Economic control
In this blog post we will elaborate on the security aspect of these directions and the HPE iLO 5 processor.
Make your data center more secure with iLO 5
At Discover 2017 Hewlett Packard Enterprise announced and gave more details on the new ASIC chip – major recognizable feature of Hewlett Packard Enterprise servers. According to HPE, the new iLO 5 makes their devices the most secure servers in the world. Improved and advanced cutting-edge security is also just one of the many features of this new chip.
Hewlett Packard Enterprise, unlike other server manufacturers, makes its own ASIC silicon chip, which means each Gen 10 server has a unique individual fingerprint in the HPE custom silicon. The server will not boot unless the firmware matches this unique print. Hewlett Packard Enterprise is the only manufacturer offering this proprietary firmware option. Proactive detection and recovery is also featured, making it possible for the server to search through and inspect millions of lines of code each day in order to detect potential inconsistencies or malware and activate recovery if needed. This level of security can only be achieved with the HPE iLO Advanced Premium Security Edition license.
Actions specific to the new iLO5 chip:
- Silicon Root of Trust – This is more than a hardware root of trust. This is a silicon root of trust.
- Secure Start – Compromised or corrupted firmware will not be run.
- Secure Recovery – We can recover the iLO firmware, the system ROM, the System Programmable Logic Device, the Innovation Engine firmware and the System Platform Services firmware.
- Runtime Firmware Verification – iLO has the ability to scan the firmware on a daily, weekly and monthly basis
- Recovery Set/Recover Set administrator – The Recovery Set is the collection of firmware iLO will use if a compromise is detected.
- Addon – New security modes, Common Access Card/smart card support full control of all user interfaces.
All of these actions are largely supported by integrated software created by the NIARA company – recently acquired by Hewlett Packard Enterprise. Gen 10 servers use built-in machine learning capabilities for self-training and constantly learn to identify any malicious behavior. The system analyzes all suspicious behavioral patterns and activities, evaluates them and responds according to specific rules.
Finally, when such server is retired or replaced with a new machine, activities are planned to ensure that stored information does not fall into the wrong hands.
iLO 5 demo news
- Remote control thumbnail – Quick access shortcut to a remote desktop environment
- Local to Remote folder – Create a file and transfer files or boot OS images from local to remote host
- New iLO5 ASIC – Double the speed of its predecessor
- Active Health System Log – Detailed view of log files for a set time period
Other information and detailed overview can be found in the following video:
Read other news regarding Gen 10 on the official HPE website or by clicking this link.
Contact us for more information or if you want to schedule access to a Gen 10 demo server.
Interesting facts: A Storage Guy Talking about New ProLiant Gen10 Servers