Skip to main content

Security
Security
5 members
16 questions

Answer

You can change the TLS version by setting the SSLServerMethod advanced config in /cm/local/apps/cmd/etc/cmd.conf (on the head node) to the desired version of TLS such as "TLS 1.2". Then follow that with your cipher list options. For example:

AdvancedConfig =... (More)

This article explains Bright Cluster Manager can be configured to manage a regular node with a Self Encrypted Drive (SED), so that the regular node is able to boot via PXE and be provisioned.

This procedure was tested on... (More)

Answer


What should be done to a cluster running Bright Cluster Manager to deal with the Meltdown and Spectre vulnerabilities?

Action to take if running a Bright Cluster

If staying with vulnerable hardware, then software and firmware mitigation should be carried... (More)

Answer

How do I install FreeIPA onto a Bright Cluster?

1. Install packages:
# yum -y install ipa-server

2. Stop LDAP server:
# cmsh -c "device services master; stop ldap"

3. change the default user portal port in the webserver SSL... (More)