A systems administrator is preparing a new DGX server for deployment.

The Baseboard Management Controller (BMC) is a powerful tool that allows for total control over the DGX system, including the ability to flash firmware, cycle power, and access the serial console. Because of this, it is a high-value target for security threats. The " 100% verified " secure approach (Option D) involves two critical layers:

Network Isolation: The BMC port should never be exposed to the public internet (Option A) or even the general production network (Option B). It must reside on a dedicated Out-of-Band (OOB) network that is firewalled and accessible only to authorized administrators.

Credential Management: Standard NVIDIA factory defaults (like admin/admin) must be changed immediately upon first access. As part of the DGX first-boot wizard, the system prompts the administrator to create a strong, unique password for the primary user, which is then synchronized to the BMC.

Leaving the port disconnected (Option C) is unfeasible for modern data center operations, as the BMC is required for remote monitoring and " headless " deployment. Following the isolated/firewalled approach ensures the AI Factory remains resilient against both external attacks and internal lateral movement.