Recommended baseboard management controller (BMC) and BIOS security practices include:
- Always flash the latest BMC and BIOS images as they are released even if the release notes do not explicitly state a security fix.
- Use the Administrator Password in BIOS setup.
- Use strong passwords for IPMI user accounts and BIOS administrator password.
- Set up an isolated network for manageability and never expose that network to the Internet.
- If using onboard NICs for manageability is required, configure VLANs to isolate it from the host network.