Course Outline
- BMC threat modelling
- Server BMC attack surface analysis
- Common vulnerabilities in legacy BMC firmware
- Overview of the OpenBMC security architecture
- Compliance requirements (NIST, PCI-DSS)
Secure Boot
- U-Boot verified boot chain
- Image signing using RSA and ECDSA
- Key hierarchy and revocation strategies
- Basics of measurement and attestation
Firmware Update Security
- Image signature verification workflow
- Rollback protection and versioning policies
- Dual-bank update methodologies
- Code updates via Redfish and IPMI
Certificate Management
- Phosphor-certificate-manager architecture
- Installation and replacement of HTTPS certificates
- Certificate Authority (CA) trust stores
- LDAPS and client certificate authentication
Authentication and Authorisation
- Local user management and password policies
- Integration with LDAP and Active Directory
- PAM stack configuration
- Redfish RBAC and privilege mapping
Network Security
- Firewall rules and nftables
- TLS 1.3 configuration in bmcweb
- SSH hardening and key-based authentication
- Network segmentation for BMC interfaces
Audit and Response
- Remote syslog configuration
- Logging of security events
- Management of SEL and audit trails
- Incident response for compromised BMCs
Security Testing
- Static analysis using CodeQL and Bandit
- Fuzzing D-Bus interfaces
- Penetration testing of REST and Redfish APIs
- CVE tracking and patch management
Requirements
- Foundational understanding of PKI and TLS.
- Basic knowledge of Linux security concepts.
- Familiarity with embedded firmware update mechanisms.
Audience
- Security engineers
- Firmware developers
- System administrators overseeing BMC infrastructure
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customised Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from £3200 + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (3)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
I understood the process of the operating system and how do we link all factors together information of network as well so now I have an obvious and full picture about what is going on these computers how they communicate with each others ultimately gained knowledge about the most important operating system which is Linux and how do we implement our own embedded Linux
Rawda Alnaqbi - beamtrail
Course - Introduction to Embedded Linux (Hands-on training)
Speed of response and communication
