Security: UEFI Secure Boot and Secure Start support Immutable Silicon Root of Trust FIPS 140-2 validation (iLO 5 certification in progress) Common Criteria certification (iLO 5 certification in progress) Configurable for PCI DSS compliance Advanced Encryption Standard (AES) and Triple Data Encryption Standard (3DES) on browser Support for Commercial National Security Algorithms (CNSA) Tamper-free updates - components digitally signed and verified Secure Recovery - recover critical firmware to known good state on detection of compromised firmware Ability to rollback firmware Secure erase of NAND/User data TPM (Trusted Platform Module) 1.2 option TPM (Trusted Platform Module) 2.0 option Front bezel key-lock feature - standard, available in both Tower and Rack models Padlock slot, standard Kensington Lock slot, standard
Security: Cryptographically signed firmware
Data at Rest Encryption (SEDs with local or external key mgmt)
Secure Boot
Secure Erase
Secured Component Verification (Hardware integrity check)
Silicon Root of Trust
System Lockdown (requires iDRAC9 Enterprise or Datacenter)
TPM 2.0 FIPS, CC-TCG certified, TPM 2.0 China NationZ