Definition of IPMI

IPMI (Intelligent Platform Management Interface) is an open standard introduced jointly in 1998 by Intel, HP, Dell, NEC, and others. It defines the protocol between the Baseboard Management Controller (BMC) on the motherboard and external management software. Its core value: even when the OS is fully crashed or the server is not powered on, IPMI still provides hardware access through a separate management network.

Core IPMI components

The IPMI architecture includes multiple layers:

  • BMC (Baseboard Management Controller): an independent microcontroller on the motherboard with its own CPU, memory, network interface, and firmware
  • IPMB (Intelligent Platform Management Bus): internal bus connecting the BMC to sub-modules
  • LAN channel: remote BMC access over the network (in-band or out-of-band)
  • RMCP (IPMI over LAN): send IPMI commands remotely via UDP port 623
  • SOL (Serial Over LAN): remote access to the server serial console, replacing physical KVM

IPMI security considerations

IPMI v1.5 uses plaintext authentication and carries serious security risk — attackers can capture BMC admin credentials and fully control the server. IPMI v2.0 introduced RMCP+ and AES encryption, but the following cautions still apply:

  • Disable IPMI v1.5; enforce v2.0
  • Use strong passwords and rotate them regularly
  • Isolate the BMC management network from the business network (VLAN segmentation)
  • Restrict source IPs allowed to reach the BMC management port
  • Update BMC firmware regularly to remediate known vulnerabilities
Key Point

CloudSino DCOS unifies hardware telemetry collection across server brands via IPMI/Redfish, automatically detects IPMI configuration security issues, and feeds them into the unified alerting pipeline.

Related Products
DCOS