HP OpenVMS Systems

Security and Network Console Access?

» close window

The Question is:

 
Is there a security hole if I have network access to my serial console port ?
I have a decserver always connected to the network and serial port of my Alpha.
  If I have the information, I can connect by the network to the serial console
 port of my system: it ask me my username and password.  Break is disabled. Is
 there a security i
ssue (is it possible to get in or stop the system without username/password and
 without physical access to the system ?
 

The Answer is :

 
  Anyone with access to the system console has full system access.
 
  The OpenVMS Wizard must decline further discussions of an open-ended
  discussion of security exposures.  For general configuration details
  and recommendations, please see the appendix of the security manual.
 
  The OpenVMS Wizard will mention that there are various system error
  messages that are system critical, and -- because of the run-time
  system context and the nature of the errors -- these messages can
  only be written to the console, if the error messages can be
  written at all.
 

  

     

     
answer written or last revised on ( 30-DEC-2003 )
     
» close window