Hardware BTI Mitigation. When enabled, some applications might experience lower performance ILOM 4.0.x
(Doc ID 2711614.1)
Last updated on SEPTEMBER 20, 2020
Applies to:Oracle SuperCluster T5-8 Full Rack - Version All Versions to All Versions [Release All Releases]
MiniCluster S7-2 Hardware - Version All Versions to All Versions [Release All Releases]
SPARC T7-4 - Version All Versions to All Versions [Release All Releases]
SPARC T8-4 - Version All Versions to All Versions [Release All Releases]
Oracle SuperCluster T5-8 Half Rack - Version All Versions to All Versions [Release All Releases]
Information in this document applies to any platform.
The Hardware BTI Mitigation property is available for configuration as of Oracle ILOM firmware version 4.0.2.x on SPARC T5 servers, M-Series servers, or later SPARC platforms.
When the HOST hw_bti_mitigation is enabled this property provides a secure configuration option, but some applications might experience lower performance. This situation can occur after upgrading the system FW
The setting is related to the Spectre security vulnerability fix. If it is disabled, the system is not specifically protected from the Spectre vulnerability. Since the Production systems are deployed behind firewalls and run known trusted software's this will not be a concern. This setting is on by default and as stated above the system administrator has the ability to disable this mitigation if the bank administrator determines the system is not at risk to this type of attack. Disabling this setting will not have a negative impact & will only disable the spectre vulnerability fix. Oracle recommends that you prevent execution of any untrusted code to avoid exploitation of any vulnerabilities CVE-2017-5753 (Spectre v1) and CVE-2017-5715 (Spectre v2). Oracle recommends that you review the privileges associated with your systems, and periodically review your security logs in light of these vulnerabilities (e.g., to identify newly-created accounts or newly-installed applications).
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document