ron's questions

if anyone is familiar with Dell PowerEdge Raid Controllers (PERC) that are in servers,

I have a PERC H740P that when you go F2 into the BIOS then navigate to the PERC device it says STATUS: needs attention.

does anyone know how to figure out what exactly needs attention? Because I have cleared configuration and have tried to clear everything yet the thing always seems to say needs attention. Can someone tell me what might be causing this? I've cycled power, held the power button down on the server when power has been disconnected, and have created new virtual disks and everything works fine it just always says needs attention.

I have a computer work lab, it is a simple LAN with no real internet access. It started out as only a few PC's (years ago) and when it was just 4 or less the admin's did everything local on each pc manually. Now we have over 10 pc's and a windows domain server was setup to facilitate managing 10+ pc's.

Picture one large room, 10 win10 PC's and a domain server off to the side, and a network printer.

Issue we are having is it seems any user (in their profile?) can have any number of network printers show up, and when you select any one of them they don't work it gives some kind of error. And it's nearly always the same xerox printer name & mac showing up but then you see something like copy of. Now the printer does work, people can successfully print to it provided they have enough computer knowledge on how to set that up on whichever PC they are sitting at at the time. But it is often frustrating... and having gone from win2000 to winxp to win7 to win8 to win10....

is it too much to ask that for any user new or existing on this little LAN with a Windows 2016 domain server that just one printer show up cleanly in devices & printers, and all anybody should have to do is do File - Print and it simply prints ?

How do you make the following happen?

• For any user who logs into a client PC on this little LAN having a Windows Domain Server, they see only one printer under devices & printers
• The User does not have to do anything other than mouse click File - Print. Mouse click file print always works!

I have a work computer running windows 10, and with the way win10 does everything for you under the hood I would like clarification/help on the following because it seems like I am at a point of this cannot be done and I find it hard to believe.

• When installing 3rd party software and drivers for test equipment, it prompts saying .NET Framework 3.5 is required cannot continue- retry this install after you have installed .NET 3.5. And in win10 it conveniently pops up saying do you want to download from Microsoft.
• The location of my win10 pc does not have internet connection and I am for the most part prohibited from an internet connection. I thought an offline install should be possible but...
• is this correct: https://dotnet.microsoft.com/download/dotnet-framework/net35-sp1 which provides dotnetfx35.exe @ 231MB all that is needed?
• In running this dotnetfx35.exe it still prompts to "Download & Install".

How does one do an offline install of .NET Framework 3.5?

from https://docs.microsoft.com/en-us/dotnet/framework/install/dotnet-35-windows-10

If you're not relying on Windows Update as the source for installing the .NET Framework 3.5, you must ensure to strictly use sources from the same corresponding Windows operating system version. Using a source path that doesn't correspond to the same version of Windows won't prevent a mismatched version of .NET Framework 3.5 from being installed. However, this will cause the system to be in an unsupported and unserviceable state.

that sounds bad, like I should not be doing an "offline" install?

Comptia security+ exam question

An incident involving a workstation that is potentially infected with a virus has occurred. The workstation may have sent confidential data to an unknown internet server. Which of the following should a security analyst do FIRST?

A. Make a copy of everything in memory on the workstation.

B. Turn off the workstation.

C. Consult information security policy.

D. Run a virus scan.

The answer is A, make a copy of everything in memory.

How does one do that?

Once that is done, how is something like that useful?

For example if there's 16GB of DDR4 RAM installed, RAM is 75% used, gonna have 11GB, in the form of what?

This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's.

I have a linux server running third party software to establish an over-the-network OpenGL remote visualization connection.

Win10 pc's as the client connect to the server using a web browser, or with their portable client. The default configuration is to connect via https://myserver:8443 using the browser.

In doing so with a browser one gets the traditional your data is at risk or in Firefox it is Warning: Potential Security Risk Ahead. And then you click on advanced and say Accept the Risk and Continue which (correct me if i'm wrong) establishes a not secure https connection.

I start with trying to create a self signed certificate?

openssl req -x509 -newkey rsa:4096 -keyout private.pem -out public.pem -days 365

and per my software's instructions put these two pem files under their folder /etc/dcv/ and the software will use them instead of automatically generating a self-signed certificate that is used to secure traffic. However I am not sure what the ownership and permissions on these files should be {i thought private.pem was important to protect}

This is where I hit a wall

I found how to combine the private.pem and public.pem file into a PKCS#12 (P12) bundle:

openssl pkcs12 -inkey private.pem -in public.pem -export -out certificate.p12

however I am prompted to password protect this certificate.p12 file, and then i can import it into my web browser but having to type the password to do so. That seemed to make a secure https connection work one time because their was not an https red padlock it was green, but I feel like at this point I and doing something wrong. It feels wrong to bundle private.pem with public.pem and distribute ? Do I need to import anything into my client pc's browser under Trusted Root Authority? If someone can explain in practical terms how it should be done for this kind of LAN scenario would be much appreciated. I am not looking to do anything official such as purchase a certificate, it's just a few computers on a LAN with no internet connection.

In window 10 enterprise, corporate environment (if it matters). I have a single file with info I want to protect, and I want to encrypt just this single file. And I only want to do this in Windows, if it's just win10 that's ok.

I right click on that file and do Properties - General - Advanced and check Encrypt contents to secure data.

The resulting error is Error applying attributes - Recovery policy configured for this system contains invalid recovery certificate.

• What does that error mean?
• What means are there of encrypting just a single file (win7 or win10)? I do not want to use 3rd party software if I do not have to.
• Is this an Enterprise setup type of error/problem, or should I expect any win10 home/pro/enterprise version to be able to do this much like opening/creating a .zip file?

scenario is trying to connect via web browser to the IPMI of a new server I have; from Windows 10 either Internet Explorer 11 or Edge. Both report This site is not secure with the error being DLG_FLAGS_INVALID_CA and DLG_FLAGS_SEC_CERT_CN_INVALID.

Now with the IPMI it has the option for me to replace the default factory installed certs with a new certficate and private key.

I tried doing (in linux) openssel req -x509 -nodes -newkey rsa:4096 -keyout newprivatekey.pem -out newpubliccert.pem

I uploaded that successfully to the IPMI and now I only get one of the above errors (sorry I forget which at moment)

Can someone explain

• what does DLG_FLAGS_INVALID_CA mean?
• what does DLG_FLAGS_SEC_CERT_CN_INVALID mean?
• what is the correct way is fixing this so they do not show up?
• and even though these errors show up and the browser has a red highlight at the top, HTTPS is still actually working correct?

have a few SAS ssd's, the $4000 kind {manufacturer name withheld}. I have had two now go to unconfigured bad after 1-2 hours of only powered on use, such that I am skeptical that the drive is not really bad but more likely a software or firmware bug somewhere.

This is on an Avago Megaraid SAS 9361, where the drive light will blink on boot up, the system will take an extra couple minutes before getting to the Megaraid bios screen, and then make unconfigured good for the SSD is grayed out, as well as the size of the disk showing 0kb where my others show 3.84TB. I have never had a problem like this with other SAS (spinning) disks.

What does unconfigured bad really mean? And is there a solution for going from bad to good in this case? Does it mean I need to warranty replace the drive?

Is something special needed?

It is in a supermicro server having a AOM-TPM-9670V-S TPM 2.0 and a Broadcom/Avago MegaRAID 9361-24i card.

Trying to use some Seagate Nytro SAS self encrypting SSD's; in the megaraid setup it identifies the disk as encryption capable, and in the supermicro bios I can tab over to security and see the TPM stuff but that seems to be as far as I can get.

and system will be running RHEL linux, not Windows, if that matters; Am I correct in thinking this self-encryption stuff will be independent of the operating system?

I was running Windows 7 at work; power up the desktop pc and always had to hit Ctrl + Alt + Del before entering your username and password.

I am now running Windows 10 at work, Windows 10 Enterprise if I look on my PC. I no longer have to hit Ctrl + Alt + Del before logging in, and I am pretty sure it is not just me.

Is the existing link with rationale explained no longer relevant with Windows 10? What changed?

Is this no longer relevant? : How does CTRL-ALT-DEL to log in make Windows more secure?

Update:

From Interactive logon: Do not require CTRL+ALT+DEL:

Not having to press CTRL+ALT+DEL leaves users susceptible to attacks that attempt to intercept the users' passwords. Requiring CTRL+ALT+DEL before users log on ensures that users are communicating by means of a trusted path when entering their passwords... A malicious user might install malware that looks like the standard logon dialog box for the Windows operating system, and capture a user's password. The attacker can then log on to the compromised account with whatever level of user rights that user has.

I am having trouble understanding this rationale for Ctrl + Alt + Del I mean if a malicious user installs malware that looks like the standard logon screen shouldn't I first be worried about that having happened where malware got installed? Can someone at least provide examples of those attacks user's are left susceptible to?

For so long we've all be marching to the tune of must do Ctrl + Alt + Del prior to logon, and ironically it is worded "Interactive logon: Do not require CTRL+ALT+DEL = Disabled".

Recently NIST revised their password recommendations, I believe it's publication 800-63B. As such, you can read numerous articles and opinions on the subject. My favorite is Stack Overflow cofounder Jeff Atwood's rage: password rules are b.s.. I don't need to go much further than that title to summarize that topic, basically admission that some password rules were security theater. So now I am sort of questioning the credibility of Ctrl + Alt + Del, because (1) it seems it was suddenly dropped in Windows 10, and (2) to me the [official] wording from Microsoft is quite vague.

If you use any computer you are susceptible to attacks in a variety of ways, so I am looking for technical specifics that I can wrap my head around regarding Ctrl + Alt + Del providing value prior to logon.

have a RAM DIMM, sticker says samsung 32GB 2Rx4 PC4-2400T-RA1-11-DC0 and I believe the model number is M393A4K40BB1-CRC0Q S

The dimm has chips on both sides, and on a given side it is 2 rows with 5 columns of chips on left and 4 columns of chips on the right; so 18 chips on one side and another 18 chips on the other side.

Is this specific dimm single rank, dual rank, or quad rank? And is there a simple way to visually tell?

The server it goes in has a total of 96 DIMM slots, using 32gb dimms it was running 3.0TB of RAM. For these types of servers today how important is single, dual, or quad rank and why?

when you're dealing with 32gb, 64gb, or 128gb DIMM's now with 24, 48, or uo to 96 DIMM slots, how does single/dual/quad rank come into context? I ask because I thought the "memory controller" can only access so many ranks so 96 dimms at quad rank = too many need dual rank or single rank ?

also looking to gain a better understanding putting all this into context with 32gb dimms or larger that is 288 pin DDR4.

I am somewhat familiar with the RAID controller card offerings in Dell servers, such as PERC H730P in their PowerEdge servers. And also some of the LSI 9xxx series RAID controller cards, that allows RAID configuration of 8,16, or 24 SAS/SATA disks.

It was brought to my attention there now exists RAID controller cards that also have hardware encryption

which can then meet encryption requirements where one does not need to set up software encryption from within the operating system or use Self-Encryption Drives (SED's).

can someone point me in the right direction, if such a thing exists?

I am specifically interested in finding RAID controller cards that do hardware encryption, the type of controller card you would commonly find in medium to high end 2U are larger rack servers containing 8,16, or 24 SAS/SATA drives.

I have a 4 socket server, calling for FCLGA 2011-3. It was built using four Intel E5-4667v3 (16 cores).

If one cpu fails, can it be replaced with one E5-4667v4 (18 cores) and still work with the 3 original E5-4667v3 CPU's ?

Or all cpu's required to be the exact same, and if so can someone reference manufacturer documentation?

Sorting through available Intel CPU's that are all FCLGA2011-3 and wondering if I can mix & match any as long as everything is socket=2011-3 and scalability = 4S or S4S ?

I am trying to understand the TPM header on a motherboard I have, which is an Asrock "H170m Pro4" It has a TPMS1 header on the motherboard, and it has 9x2 pins with 1 missing.

In searching the web, I see a 14-1 pin TPM module, other references to 20 pins. what's the deal?

here is a link to the manufacturer's site for the specific mobo I am trying to get a TPM chip for. You can download the manual from here: https://www.asrock.com/mb/Intel/H170M%20Pro4/

in H170M Pro4.pdf on pages 6 & 7 it shows the TPMS1 header location and on page 22 it states 17 pin TPMS1 and what each pin does

1. PCICLK bottom row left most
2. FRAME bottom row going right
3. PCIRST#
4. LAD3
5. +3v
6. LAD0
7. no pin
8. +3VSB
9. GND bottom row right most
10. GND top row left most
11. SMB_CLK_MAIN
12. SMB_DATA_MAIN
13. LAD2
14. LAD1
15. GND
16. S_WRDWN# this is above the empty pin #7
17. SERIRQ
18. GND top row right most

what concerns and confuses me is the use of TPMS1 and here at their site https://www.asrock.com/mb/spec/card.asp?Model=TPM-S%20Module referring to these 3 things:

• TPM-S module (V 1.2)
• TPM-s module (V 2.0)
• TPM2-S module (V 2.0)

can anyone make sense of this?

I am trying to understand what I guess is called a balanced memory configuration. For the newest cpu's from Intel at this point in time, January 2018 which are for example Xeon 8180 and Xeon 6154, how many DIMMS per CPU socket should be used to get the best memory performance?

For a server board having say 4 Intel 6154 cpus, there is a choice of going with either RDIMM or LRDIMM... which I do not know if that warrants extra discussion but for now using RDIMMS because of pricing and I do not need more than 768GB of system RAM,

For the RDIMM choice there is 8gb or 16gb or 32gb per DIMM, there are 12 memory sockets per cpu socket so 48 sockets total on the board allowing for a maximum of 768 GB of RAM for the Xeon 6154 or 8180,

Note: maximum memory supported by 8180 or 6154 is 768gb per intel spec sheet, I am not sure if that is per CPU or total of the system. If more than that is needed then there is Xeon 8180m and 6154m which supports up to 1.5TB and again not sure if that is 1.5tb for just that cpu but anyway that is above and beyond what I need or am asking,

My question is, for the choice I make on getting a server(s) which I want to have N amount of RAM each which would be either at least 192GB, 256gb, 384gb, 512gb, 640gb, or 768gb...

1. how would I know the minimum amount of RAM that should be in the system?
2. choosing either 8gb DIMMs or 16 gb DIMMS affects (1.) obviously but for arguments sake let's say I want the server to have either 256gb or 384gb of system RAM? Why should I choose what size RDIMM and how should I populate the 48 memory slots so I have best memory performance? I have come across articles talking about reduced memory performance of X % and it being really bad if you mess up how you populate the memory slots.
3. for something like the Xeon 6154 or 8180 should there be 6 DIMMS installed per CPU socket for best memory performance, bandwidth... etc. ? Or can there be just 2 DIMMS per CPU socket? I ask because there is mention of something about max # memory channels = 6 and this is the question I am really looking to an answer for. How bad is having 1 or 2 DIMMS per CPU vs 6 DIMMs per CPU?
4. And what affect is there if 2, 3, 4, 6, 8 DIMMS per CPU socket are installed, resulting in whatever multiple of 8 or 16 of total system RAM between 192gb and 768gb?