Default SSH password on Data Center Expert ?

[DCIM_Support]

Hi, i have activate the SSH access on my Data Center Expert. Actually i am using a default password -> apc/apc.
The problem is in ssh access. When i going to authenticate this tell me that my password are wrong (using apc/apc)
What are i doing wrong ?
What is the ssh default credentials ? what i have to do for correct authenticate ?
Thanks community.

(CID:102925045)

[DCIM_Support]

Hi Guille,

Why do you need to ssh to the Data Center Expert server? It shouldn't be necessary to ssh to the Data Center Expert server.

What are you trying to accomplish?

We might be able to help you with a workaround that doesn't require logging in to the Data Center Expert server.

You will need to use the root password. You can not log in with the apc password. The root password is uniq  and not normally given out. So we normally require a very specific reason for giving out the password.

If you want to ssh to the server will you also need to enable ssh under the Administration settings in the Data Center Expert server.

Thanks

Jesper

(CID:102925050)

[DCIM_Support]

Hi,
I want SSH password for access to server. We are developing different scripts to get more performance server.
I understand that this can be do from front end , but i want to access back end, set in cron differents scripts, differents security protections, and hardening the server.

Please is necesary for my company.

(CID:102925057)

[DCIM_Support]

Hi Guille, We don't allow customers to log into Data Center Expert and install or change scripts on the server. Doing so will void the warranty of the server and you will no longer be able to get support for the server. This is done so we can ensure the performance of the server. Security updates are applied to the server in new versions of the Data Center Expert software. If you can give more details to what you are trying to do are we maybe able to find a work around that would work for you. Thanks Jesper

(CID:102925060)

[DCIM_Support]

I , I am not concerned for my warranty.

Is very important ( and urgent) get root ( or limit user access) to ssh service. We dont understand the limit. The Client have a option to enable SSH. Why ? if we latter cant use it. We have this service but we cant use it ?

Easy question. What we have to do for connect to server via SSH ?
We need it. 

(CID:102925063)

[DCIM_Support]

Hi Guille, It is like with iPhone - users can not have root access to the system for security and maintainability reasons. And like with iPhone - users have no option to get root access.

(CID:102925341)

[DCIM_Support]

Hello,

As per k-base FA222410 we do not provide root access (see the text for this FAQ below. Support is simply not allowed to provide this information to customers. As Jesper noted, installing your own scripts is unsupported. If you add scripts and then seek assistance from tech support, there is no way we can know if the scripts you added are effecting the server in any way. Additionally since tech support is aware of this limitation, they wouldn't even think to ask if you'd installed anything on the server which would also make troubleshooting issues more difficult.

Steve

Answer

Issue: 

What is the root password available for StruxureWare Data Center Expert. 

Product Line: 

InfraStruxure Central 
StruxureWare Data Center Expert 

Environment: 

Internal systems in StruxureWare 

Cause: 

StruxureWare uses a customized version of Linux. Older systems ran Fedora Core while the newest versions run Centos. As with any Linux systems a super user or root user has full access to the internal systems and processes. 

Resolution: 

Because the system is customized, APC and Schneider Electric do not allow customers access to the back end of the system. StruxureWare Data Center Expert is an appliance and should be considered a "black box" or closed system. We do not provide the root password for theses systems. 

(CID:102925099)

[DCIM_Support]

Our reason is that we recent implement a hard baseline security rules in our company. We need connect remotely to server and make checksum of all process that are running in system (ps aux | md5sum ..eg) and checksum of all files (find | md5sum ..eg) .

Later, periodically recheck this checksum and compare with the last checksums. We need make this to try to identify possible network intrusions.

This is a explicit requirement of Security Departament and we need have control about this server.Really now this is priority in our dmz zone and we dont put more servers on our network without this funtion/checksums.

Over standard ISO 27001 we are obliged to do these checksums and get this reports over our channels.

If we dont get this access, we dispense with product, and we are happy with this product.

regards

(CID:102925111)

[DCIM_Support]

Hi Guille, Thank you for the explanation for the reason to request root access. I will need to follow up with product management to see if this is something they will allow. I will get back to you as soon as possible. Thanks Jesper

(CID:102925139)

[DCIM_Support]

All right. The support tell us that we not have permission to access to ssh, Ok. The next course we discard use APC technology. We have said different legitimate reasons because we need ssh access: All security reasons. We are a important company (Big4) and we don't allow uncontrolled machines in our Network. We are required to discard APC technology for security reasons. Thanks for all support.

(CID:102925396)

[DCIM_Support]

Dear Guille, wait for Jesper Bjerregård. I can also add that Inside our team in Schneider we are not allowed to root systems even for our needs because of security reasons and our corporate responsibility. As IT people (like you) we clearly understand your point. As an IT specialist you should understand that techsupport properly refused to provide you with a door to hack the system. Especially the system operated by a company from top-4 businesses. I would recommend you to ask your manager to communicate with local APC office so they could confirm your credentials. I hope it may help.

(CID:102925400)

[DCIM_Support]

Hi Guille, The option for enabling SSH is in case you need to work with tech support. In some cases, we may be better able to assist you if we can see processes and configurations etc through this functionality. Please keep in mind also that you do not access the operating system of this appliance the same way you do a Windows or Linux computer. You access it only through the web interface or client app. If you do get access (Jesper is in communications with product management for this request.). please be advised that not so much the hardware warranty will be oid but there will be no tech support for this server. we can troubleshoot an altered server. Hardening the server will likely break many components and a total restore would need to be done to even consider troubleshooting. Steve

(CID:102925403)

[DCIM_Support]

All right.
The support tell us that we not have permission to access to ssh, Ok.
The next course we discard use APC technology.

We have said different legitimate reasons because we need ssh access: All security reasons. We are a important company (Big4) and we don't allow uncontrolled machines in our Network.

We are required to discard APC technology for security reasons.
Thanks for all support.

(CID:103583705)

[DCIM_Support]

Hi Guille, I am sorry to hear that. I will like to continue the discussion with you offline. I will reach out to you on email, so we can continue the discussion. Thanks Jesper

(CID:103583706)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.