Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

To defend against brute-force attacks to the BMC, the number of unsuccessful login attempts allowed is four. After four attempts, the user account is disabled by default for both SSH and Web UI logins to the BMC. Note that the number of unsuccessful login attempts equals sum of both SSH and WEB UI login attempts. For Exampleexample, If two unsuccessful attempts are made from SSH and two from the WEB UI, the user account is locked by the server. This action is recorded in an appropriate event log. The server automatically unlocks the user account after 60 seconds, whereby a user can reattempt to login to the BMC.

Info
titleNote
  • Administrators must re-apply the security settings after every software installation or upgrade.
  • This feature applies specifically for BMC Web UI and SSH login.

...