How to disable USB Thumbdrive on CA API Hardware Appliance Gateway 9.x
Article ID: 110259
CA API Gateway (Layer 7)SA94 to API SECURITYSTARTER PACK-7CA Rapid App SecurityMOBILE API GATEWAYCA Mobile - API GatewayCA API Gateway
Customers might like to disable the USB thumbdrive on the CA API Gateway hardware appliance for security reason but would like to keep the USB connectivity for Keyboard/Mouse.
CA API Gateway hardware appliance 9.x running on Oracle Server X5-2.
The following solution involves blacklisting a kernel module and unloading it upon boot. This is the safest solution that we are aware of as it can be reversed, quickly, with no negative effects. Some instructions say to move the kernel module file but this creates additional problems. Even-though this is generally unsupported thing to do, but it would not be dangerous.
These instructions are RHEL/CentOS6 specific: Instructions
The following instructions will disable usb storage but will not affect simple devices such as keyboards and mouse. Please note that a reimage of a hardware appliance may modify these settings. This is the safest method possible as it is not possible to only disable USB Storage on a BIOS level and you do not want to do this via GRUB during boot.