{"resourceId":"cisa-nsa-bmc-hardening-guidance-newly-relevant-ai-servers-20230614","versions":[{"version":"external-dfac8c4ff9400a7ccc4669beccdf436d264ceecca0c75c6a490dfe8081a24a94","resource":{"id":"cisa-nsa-bmc-hardening-guidance-newly-relevant-ai-servers-20230614","title":"CISA and NSA joint guidance on hardening baseboard management controllers, newly relevant as BMCs become an AI-server attack path","organization":"Cybersecurity and Infrastructure Security Agency (CISA) and National Security Agency (NSA)","sector":"Federal cybersecurity guidance","geography":"United States","publishedAt":"2023-06-14","publicationDate":"2023-06-14","eventDate":null,"sourceName":"CISA","sourceLabel":"CISA and NSA Release Joint Guidance on Hardening Baseboard Management Controllers (BMCs)","sourceUrl":"https://www.cisa.gov/news-events/alerts/2023/06/14/cisa-and-nsa-release-joint-guidance-hardening-baseboard-management-controllers-bmcs","evidenceClass":"standards-guidance","outcomeClass":"effective","topics":["data-security","infrastructure","governance-procurement"],"finding":"This 2023 CISA alert announces joint CISA and NSA guidance on hardening baseboard management controllers. It explains that BMCs run separately from the operating system and allow remote management even when a system is shut down, and that hardened credentials, firmware updates and network segmentation are often overlooked, leaving BMCs vulnerable. It encourages all organizations managing servers to apply the recommended actions. It is newly relevant because the Oct 29 Eclypsium research uses BMC and DPU access as an entry point to alter AI model weights in memory.","sledRelevance":"Gives state and local agencies an existing federal baseline they can apply right away to GPU servers, without waiting for AI-specific guidance. Agencies can cite it in hardening standards and contracts.","evidence":"Federal guidance from CISA and NSA; recommended practices rather than measured outcomes.","architectureImplications":"BMCs on AI servers should sit on dedicated, segmented management networks with hardened credentials and current firmware.","governanceImplications":"Agencies can reference the guidance in security baselines and audits for AI infrastructure.","securityPrivacyImplications":"Compromised BMCs give pre-boot and out-of-band access, which can undermine host and model protections.","caveats":"Published in 2023 and not AI-specific; filed as newly relevant context, not as a new announcement. The linked full guidance document was not retrievable (403).","streamIds":["nvidia"],"roles":{"sales":"Use this as the neutral, government-authored anchor for any conversation about AI hardware security. Agency security teams already respect CISA and NSA guidance, and applying it to GPU servers is a low-controversy step. Position it as the first item in an AI infrastructure hardening plan. Be clear it predates the AI research and is general server guidance, not an AI-specific mandate.","engineering":"Engineering should apply the guidance to GPU servers: move BMCs onto dedicated management networks, replace default and shared credentials, enable secure protocols, and keep BMC firmware current. Record BMC firmware versions in the asset inventory and alert on changes. Check that DPU management interfaces follow the same rules, because the recent research uses either component as an entry point. Test changes on one server before rolling them out.","delivery":"Delivery should map each GPU server against the guidance and record gaps with owners and target dates. Add BMC firmware to the standard patch cycle. Include BMC hardening requirements in server and hosting contracts. Report progress to the CISO as a compliance measure. Schedule a periodic re-check because BMC firmware and network changes can drift over time, and plan replacements for hardware that no longer receives updates."},"roleDetails":{"sales":{"customerProblem":"Agencies need a credible, existing standard to justify hardening AI server management planes.","stakeholders":["CISO","Infrastructure manager","Procurement officer"],"discoveryQuestions":["Are BMCs on dedicated management networks?","Is BMC firmware in the patch cycle?"],"valueHypothesis":"Applying recognized federal guidance is fast and defensible.","potentialEngagement":"BMC hardening gap assessment for GPU servers.","unsupportedClaims":["That the guidance addresses AI-specific threats","That compliance prevents all attacks"]},"engineering":{"fit":"Any agency operating physical servers, including GPU servers.","architectureIntegration":"Dedicated management networks, credential management and firmware inventory for BMCs.","prerequisites":["BMC inventory","Network segmentation capability"],"constraints":["Guidance is general, not AI-specific","Full PDF was not retrievable"],"security":"Segment, harden credentials, patch firmware and monitor BMCs.","proofOfValue":["Gap assessment against the guidance","Firmware currency report"]},"delivery":{"work":"Map GPU servers against BMC hardening guidance and close gaps.","dependencies":["Network operations","Patch management"],"ownership":"Infrastructure operations.","skillsAdoption":"Train administrators on BMC configuration and patching.","governanceCheckpoints":["Gaps recorded with owners","Contracts updated"],"acceptanceCriteria":["Proposed: all BMCs on segmented networks","Proposed: BMC firmware patched within the agency's standard window"],"risks":["Legacy hardware lacking updates","Operational disruption during changes"]}},"retrievedAt":"2026-10-30T03:04:37Z","enrichedAt":"2026-10-30T03:10:14Z","enrichmentBasis":"retrieved source","accessibilityWorkforceImplications":"Requires staff to manage firmware and out-of-band networks, often neglected in small agencies.","procurementImplications":"Contracts for GPU servers can require BMC hardening aligned with the CISA/NSA guidance and firmware update commitments.","operatingModelImplications":"BMC management becomes part of routine patching and network operations.","sourceVerification":{"openedUrl":"https://www.cisa.gov/news-events/alerts/2023/06/14/cisa-and-nsa-release-joint-guidance-hardening-baseboard-management-controllers-bmcs","referenceExcerpt":"Hardened credentials, firmware updates, and network segmentation options are often overlooked, leading to a vulnerable BMC.","promptVersion":"sled-research-v4.0","model":null,"basis":"agent-reported inspection"}}}]}