- \n
- Initial server setup and troubleshooting<\/span><\/li>\n
- Server recovery and maintenance<\/span><\/li>\n
- Remote access to allow complete power control and software installation maintenance<\/span><\/li>\n<\/ul>\n
Important Security recommendations<\/h2>\n
If you’re using a public IP address to access the RMI, please implement these security measures<\/strong> to prevent this device and IP from being used in abuse scenarios (eg: external attacks of 3rd party systems or sending spam mails via the mail sending mechanism).<\/span><\/p>\n
The following security measures are recommended according to your relevant software:<\/p>\n
- \n \n
- \n Intel<\/i><\/a>\n \n\t\n\n
Please read this article<\/a> if you’re accessing your server’s RMI with a private IP address.<\/span><\/p>\n
1.\u00a0 Delete unnecessary users and reset the password(s)<\/h3>\n
\n- \n
- Log in to the Remote Control\u00a0<\/b><\/li>\n
- Select the Configuration<\/b>\u00a0tab from the top menu\u00a0
![\"remote-intel-1\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/remote-intel-1.png\")
<\/li>\n- Select Users<\/b>\u00a0from the left hand menu\u00a0
![\"remote-intel-2a\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/remote-intel-2a.png\")
<\/li>\n- Delete<\/strong> all users that are not required by selecting the UserID and then clicking the Delete User<\/strong> button. Only the root user can’t be deleted and may be the only one required.<\/li>\n
- Update the user(s) passwords: select the relevant user, then click\u00a0Modify User<\/b>.
![\"remote-intel-3\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/remote-intel-3.png\")
<\/li>\n- Ensure that\u00a0Change Password<\/b>\u00a0is ticked and then specify a new password\u00a0of up to 16 characters.
![\"remote-intel-4\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/remote-intel-4.png\")
<\/li>\n- Click\u00a0Modify<\/b><\/li>\n<\/ol>\n
You have now successfully updated your password for your user.<\/p>\n
2. Install an SSL certificate<\/h3>\n
Upload an SSL certificate and privacy key, which allows the device to be accessed in a secure mode.<\/p>\n
On the Configuration<\/strong>\u00a0tab, select SSL<\/strong>.<\/p>\n
![\"\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/intelssl.png\")
<\/p>\n3. Set timeout after failed login attempts<\/h3>\n
If you’re using a public IP address, you have the option of choosing your own timeout interval and number of failed log in attempts. We suggest a fairly long timeout e.g. 15 minutes to deter brute force login attempts.<\/p>\n
On the Configuration<\/strong> tab, select Login<\/strong> from the left menu.<\/p>\n
For customers using a private IP address via the RMI Tunnel,<\/a> this is not applicable. The network is only accessible as long as the bundle session is active.<\/p>\n
![\"\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/ssl_login_timeout.png\")
<\/p>\n4.\u00a0Delete<\/strong> all services that are not used or required<\/h3>\n
If you don’t use certain services provided as options, e.g. mail, rather delete these services to avoid the risk of them being used for abuse.<\/p>\n<\/div>\n<\/div>\n <\/div>\n<\/li>\n\n<\/ul>\n\n
- \n \n
- \n Supermicro<\/i><\/a>\n \n\t\n\n
1. Delete unnecessary users and\u00a0reset password(s)<\/h3>\n
- \n
- Log in to the Remote Control\u00a0<\/b><\/li>\n
- If a Runtime error notification pops up, press Cancel<\/strong><\/li>\n
- Select the Configuration<\/b>\u00a0tab from the top menu\u00a0
![\"remote-supermicro-1\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/remote-supermicro-1-1.png\")
<\/li>\n- Select Users<\/b>\u00a0from the left side menu\u00a0
![\"remote-supermicro-2\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/remote-supermicro-2.png\")
<\/li>\n- Delete<\/strong> all users that are not required by selecting the UserID and then clicking the Delete User<\/strong> button. Only the root user can’t be deleted and may be the only one required.<\/li>\n
- Update the user(s) passwords: select the relevant user, then click\u00a0Modify User<\/b>.<\/li>\n
![\"remote-supermicro-3\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/remote-supermicro-3.png\")
<\/li>\n- Ensure that Change Password<\/b>\u00a0is ticked and then specify a new password\u00a0of up to 19 characters.<\/li>\n
- Select the Modify<\/b>\u00a0button at the bottom of the page.
![\"remote-supermicro-4\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/remote-supermicro-4.png\")
<\/li>\n<\/ol>\n2. Install an SSL certificate<\/h3>\n
Upload an SSL certificate and privacy key, which allows the device to be accessed in a secure mode.\u00a0 On the Configuration<\/strong>\u00a0tab, select SSL certification\u00a0<\/strong>then browse and upload the SSL certificate and privacy key.\u00a0
![\"\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/supermicro_ssl.png\")
<\/p>\n3. Block ports<\/h3>\n
On the Configuration<\/strong> tab, select Port<\/strong> from the left menu. The current or default ports will be displayed. You can change the default ports to those that are not commonly used to reduce the risk of malicious entry via these ports. Click Save<\/strong>.
![\"\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/supermicro_ports.png\")
<\/p>\n4. IP access control<\/h3>\n
For customers using a private IP address via the RMI Tunnel,<\/a> this is not applicable. The network is only accessible as long as the bundle session is active.<\/em><\/p>\n
This firewall feature allows you to limit access except from your IP(s) e.g. your office. Enabling the IP Access Control allows you to create IP Access rules.<\/p>\n
- \n
- On the Configuration<\/strong> tab, select IP Access<\/strong><\/li>\n
- Tick to activate\u00a0Enable IP Access Control\u00a0<\/strong><\/li>\n
- Click\u00a0Add\u00a0<\/strong>to add your rule, providing your IP address.<\/li>\n
- Enter the information needed\n
- \n
- IP Address\/Mask<\/strong>: This item allows you to grant access to a specific IP address or a range of IP addresses. For example, if you wanted to specify a range of IP addresses from 192.168.0.1 to 192.168.0.126, you would enter 192.168.0.1\/25.<\/li>\n
- Policy<\/strong>: Select to allow access for the IP address(es) entered above. Select Drop to deny access.<\/li>\n
- Click\u00a0Save<\/strong>
![\"\"](\"https:\/\/xneelo.co.za\/help-centre\/wp-content\/uploads\/2011\/09\/supermicro_IPaccess.png\")
<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n5.\u00a0Delete<\/strong> all services that are not used or required<\/h3>\n
If you don’t use certain services provided as options, e.g. mail, rather delete these services to avoid the risk of them being used for abuse.<\/p>\n<\/div>\n <\/div>\n<\/li>\n\n<\/ul>\n\n","protected":false,"plain":"
What is the RMI or Remote Control?<\/h3>\r\nThe Remote Management Interface or Remote Control is a remote access and management hardware module that allows you to set up and troubleshoot your Self-Managed Server from a remote location. This feature, included with all Self-Managed products, can be used for:<\/span>\r\n
- \r\n \t
- Initial server setup and troubleshooting<\/span><\/li>\r\n \t
- Server recovery and maintenance<\/span><\/li>\r\n \t
- Remote access to allow complete power control and software installation maintenance<\/span><\/li>\r\n<\/ul>\r\n
Important Security recommendations<\/h2>\r\nIf you're using a public IP address to access the RMI, please implement these security measures<\/strong> to prevent this device and IP from being used in abuse scenarios (eg: external attacks of 3rd party systems or sending spam mails via the mail sending mechanism).<\/span>\r\n\r\nThe following security measures are recommended according to your relevant software:\r\n\r\n[accordion class=\"p-3013\"]\r\n[item title=\"Intel\" id=\"prep-01\" class=\"remove-space\"]\r\n[large-12 class=\"accordion-list\"]\r\n\r\nPlease read this article<\/a> if you're accessing your server's RMI with a private IP address.<\/span>\r\n
1.\u00a0 Delete unnecessary users and reset the password(s)<\/h3>\r\n
\r\n- \r\n \t
- Log in to the Remote Control\u00a0<\/b><\/li>\r\n \t
- Select the Configuration<\/b>\u00a0tab from the top menu\u00a0
<\/li>\r\n \t- Select Users<\/b>\u00a0from the left hand menu\u00a0
<\/li>\r\n \t- Delete<\/strong> all users that are not required by selecting the UserID and then clicking the Delete User<\/strong> button. Only the root user can't be deleted and may be the only one required.<\/li>\r\n \t
- Update the user(s) passwords: select the relevant user, then click\u00a0Modify User<\/b>.
<\/li>\r\n \t- Ensure that\u00a0Change Password<\/b>\u00a0is ticked and then specify a new password\u00a0of up to 16 characters.
<\/li>\r\n \t- Click\u00a0Modify<\/b><\/li>\r\n<\/ol>\r\nYou have now successfully updated your password for your user.\r\n
2. Install an SSL certificate<\/h3>\r\nUpload an SSL certificate and privacy key, which allows the device to be accessed in a secure mode.\r\n\r\nOn the Configuration<\/strong>\u00a0tab, select SSL<\/strong>.\r\n\r\n
\r\n3. Set timeout after failed login attempts<\/h3>\r\nIf you're using a public IP address, you have the option of choosing your own timeout interval and number of failed log in attempts. We suggest a fairly long timeout e.g. 15 minutes to deter brute force login attempts.\r\n\r\nOn the Configuration<\/strong> tab, select Login<\/strong> from the left menu.\r\n\r\nFor customers using a private IP address via the RMI Tunnel,<\/a> this is not applicable. The network is only accessible as long as the bundle session is active.\r\n\r\n
\r\n4.\u00a0Delete<\/strong> all services that are not used or required<\/h3>\r\nIf you don't use certain services provided as options, e.g. mail, rather delete these services to avoid the risk of them being used for abuse.\r\n\r\n<\/div>\r\n[\/large-12]\r\n[\/item]\r\n[\/accordion]\r\n[accordion class=\"p-3013\"]\r\n[item title=\"Supermicro\" id=\"prep-02\" class=\"remove-space\"]\r\n[large-12 class=\"accordion-list\"]\r\n
1. Delete unnecessary users and\u00a0reset password(s)<\/h3>\r\n
- \r\n \t
- Log in to the Remote Control\u00a0<\/b><\/li>\r\n \t
- If a Runtime error notification pops up, press Cancel<\/strong><\/li>\r\n \t
- Select the Configuration<\/b>\u00a0tab from the top menu\u00a0
<\/li>\r\n \t- Select Users<\/b>\u00a0from the left side menu\u00a0
<\/li>\r\n \t- Delete<\/strong> all users that are not required by selecting the UserID and then clicking the Delete User<\/strong> button. Only the root user can't be deleted and may be the only one required.<\/li>\r\n \t
- Update the user(s) passwords: select the relevant user, then click\u00a0Modify User<\/b>.<\/li>\r\n \t
<\/li>\r\n \t- Ensure that Change Password<\/b>\u00a0is ticked and then specify a new password\u00a0of up to 19 characters.<\/li>\r\n \t
- Select the Modify<\/b>\u00a0button at the bottom of the page.
<\/li>\r\n<\/ol>\r\n2. Install an SSL certificate<\/h3>\r\nUpload an SSL certificate and privacy key, which allows the device to be accessed in a secure mode.\u00a0 On the Configuration<\/strong>\u00a0tab, select SSL certification\u00a0<\/strong>then browse and upload the SSL certificate and privacy key.\u00a0
\r\n3. Block ports<\/h3>\r\nOn the Configuration<\/strong> tab, select Port<\/strong> from the left menu. The current or default ports will be displayed. You can change the default ports to those that are not commonly used to reduce the risk of malicious entry via these ports. Click Save<\/strong>.
\r\n4. IP access control<\/h3>\r\nFor customers using a private IP address via the RMI Tunnel,<\/a> this is not applicable. The network is only accessible as long as the bundle session is active.<\/em>\r\n\r\nThis firewall feature allows you to limit access except from your IP(s) e.g. your office. Enabling the IP Access Control allows you to create IP Access rules.\r\n
- \r\n \t
- On the Configuration<\/strong> tab, select IP Access<\/strong><\/li>\r\n \t
- Tick to activate\u00a0Enable IP Access Control\u00a0<\/strong><\/li>\r\n \t
- Click\u00a0Add\u00a0<\/strong>to add your rule, providing your IP address.<\/li>\r\n \t
- Enter the information needed\r\n
- \r\n \t
- IP Address\/Mask<\/strong>: This item allows you to grant access to a specific IP address or a range of IP addresses. For example, if you wanted to specify a range of IP addresses from 192.168.0.1 to 192.168.0.126, you would enter 192.168.0.1\/25.<\/li>\r\n \t
- Policy<\/strong>: Select to allow access for the IP address(es) entered above. Select Drop to deny access.<\/li>\r\n \t
- Click\u00a0Save<\/strong>
<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>\r\n5.\u00a0Delete<\/strong> all services that are not used or required<\/h3>\r\nIf you don't use certain services provided as options, e.g. mail, rather delete these services to avoid the risk of them being used for abuse.\r\n\r\n[\/large-12]\r\n[\/item]\r\n[\/accordion]"},"excerpt":{"rendered":"
The Remote Management Tool is used to gain location-independent remote access to respond to critical incidents and to undertake necessary maintenance.<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"lsx_disable_title":"0","_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","footnotes":""},"categories":[205],"tags":[21191,20923,17574,17081,10134],"topics":[10407],"class_list":["post-3013","post","type-post","status-publish","format-standard","hentry","category-products-and-services","tag-remote-security","tag-self-managed-server-remote-management-security","tag-rmi","tag-self-managed-server","tag-remote-control","topics-self-managed-management"],"acf":[],"additional_meta":{"category_title":[{"term_id":205,"name":"Products and Services","slug":"products-and-services","term_group":0,"term_taxonomy_id":205,"taxonomy":"category","description":"Products and Services provided by xneelo","parent":0,"count":93,"filter":"raw","term_order":"98","cat_ID":205,"category_count":93,"category_description":"Products and Services provided by xneelo","cat_name":"Products and Services","category_nicename":"products-and-services","category_parent":0}],"tag_title":[{"term_id":21191,"name":"remote security","slug":"remote-security","term_group":0,"term_taxonomy_id":21191,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"1081"},{"term_id":20923,"name":"Self-Managed Server Remote Management security","slug":"self-managed-server-remote-management-security","term_group":0,"term_taxonomy_id":20923,"taxonomy":"post_tag","description":"","parent":0,"count":1,"filter":"raw","term_order":"1169"},{"term_id":17574,"name":"rmi","slug":"rmi","term_group":0,"term_taxonomy_id":17574,"taxonomy":"post_tag","description":"","parent":0,"count":2,"filter":"raw","term_order":"2271"},{"term_id":17081,"name":"self-managed server","slug":"self-managed-server","term_group":0,"term_taxonomy_id":17081,"taxonomy":"post_tag","description":"","parent":0,"count":13,"filter":"raw","term_order":"2426"},{"term_id":10134,"name":"remote control","slug":"remote-control","term_group":0,"term_taxonomy_id":10134,"taxonomy":"post_tag","description":"","parent":0,"count":2,"filter":"raw","term_order":"2961"}]},"featured_image_src":null,"author_info":{"display_name":"marketing","author_link":"https:\/\/xneelo.co.za\/help-centre\/author\/marketing\/","author_avatar":"https:\/\/secure.gravatar.com\/avatar\/a6ea315e112423b2b955cb020fbce2b0835956c6ad85ff0f13f1db298977eaaa?s=96&d=mm&r=g"},"_links":{"self":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts\/3013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/comments?post=3013"}],"version-history":[{"count":0,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/posts\/3013\/revisions"}],"wp:attachment":[{"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/media?parent=3013"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/categories?post=3013"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/tags?post=3013"},{"taxonomy":"topics","embeddable":true,"href":"https:\/\/xneelo.co.za\/help-centre\/wp-json\/wp\/v2\/topics?post=3013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- Policy<\/strong>: Select to allow access for the IP address(es) entered above. Select Drop to deny access.<\/li>\r\n \t
- Tick to activate\u00a0Enable IP Access Control\u00a0<\/strong><\/li>\r\n \t
- If a Runtime error notification pops up, press Cancel<\/strong><\/li>\r\n \t
- Select the Configuration<\/b>\u00a0tab from the top menu\u00a0
- Server recovery and maintenance<\/span><\/li>\r\n \t
- Policy<\/strong>: Select to allow access for the IP address(es) entered above. Select Drop to deny access.<\/li>\n
- Tick to activate\u00a0Enable IP Access Control\u00a0<\/strong><\/li>\n
- If a Runtime error notification pops up, press Cancel<\/strong><\/li>\n
- Log in to the Remote Control\u00a0<\/b><\/li>\n
- Select the Configuration<\/b>\u00a0tab from the top menu\u00a0
- Log in to the Remote Control\u00a0<\/b><\/li>\n
- Server recovery and maintenance<\/span><\/li>\n