Hello,This should help you.From the ASMI menu log in as the admin user, then expand the System Configuration menu, expand Security and select USB Policy. From here you can enable or disable USB access on the FSP and on the CEC.Regards,DouglasDouglas GibbsIO Product Manager, IBM Cognitive SystemsIBM Canada Ltd.905-413-5334"Tommi Sihvo via IBM Community" ---02/23/2022 06:27:31 AM---Hi, Bumped into curious thing in one security audit.
Hellowe cannot find a way to disable USB on P8 .Where can i disable USB on P8 machines e.g. E880 ?
The firmware option to disable USB is unique to the Power9 E980 because it has 2 physically integrated ports that cannot be removed (safely). The Power8 and Power10 high end enterprise platforms have the option to only enable USB via a USB adapter so the most secure way to remove USB functionality is to pull the adapter from the system when it is not needed. This may not be ideal and may cause support issues if the adapter is added and removed too frequently. The next best option on Power8 and Power10 is to avoid assigning the adapter to any LPARs and only dynamically add and remove it.Regards,DouglasDouglas GibbsIO Product Manager, IBM Cognitive SystemsIBM Canada Ltd.905-413-5334"Vincencio Michaelis via IBM Community" ---02/24/2022 09:16:56 AM---Russell the risc is a possability to use USB if you find a way to access/assign etc. it
> the risc is a possability to use USB if you find a way to access/assign etc...
By the time you've managed to assign the USB to an LPAR, the USB is already the least of your problems.