Cisco Cisco Firepower Management Center 4000

Series 3

Series 3

You must explicitly grant Lights-Out Management permissions to users who will use the feature. You 
configure LOM and LOM users on a per-appliance basis using each appliance’s local web interface. That 
is, you cannot use the Defense Center to configure LOM on a managed device. Similarly, because users 
are managed independently per appliance, enabling or creating a LOM-enabled user on the Defense 
Center does not transfer that capability to users on managed devices.

LOM users also have the following restrictions:

You must assign the Administrator role to the user.

The password may have up to 20 alphanumeric characters, except for 3D71xx Family devices. If 
LOM is enabled on a 3D7150, 3D7115, 3D7120, or 3D7125 device, the password may have up to 
16 alphanumeric characters. Passwords longer than 20 or 16 characters, respectively, are not 
supported for LOM users. A user’s LOM password is the same as that user’s system password. Cisco 
recommends that you use a complex, non-dictionary-based password of the maximum supported 
length for you appliance and change it every three months.

Series  3 Defense Centers and 8000  Series devices can have up to 13 LOM users. 7000  Series devices 
can have up to eight LOM users.

Note that if you deactivate, then reactivate, a role with LOM while a user with that role is logged in, or 
restore a user or user role from a backup during that user’s login session, that user must log back into 
the web interface to regain access to IPMItool commands. For more information, see 

Admin

Select 

The User Management page appears.

You have the following options:

To grant LOM user access to an existing user, click the edit icon (

) next to a user name in the list.

To grant LOM user access to a new user, click 

.

Under 

, enable the Administrator role.

Administrator Options appear.

Select the 

check box.

Click 

.

The user has LOM access for this appliance.

Any

Series 3

Series 3