“Once the templates are produced correctly, though, implementing a profile is pretty simple.”
Just make sure your “Gold Image” is well documented and scanned for vulnerabilities. And anytime you make a change, before loading, do a scan and fix the issues until the scan is clean.
Got bitten that way. Learned a valuable lesson.
Cisco UCS domains are a hybrid environment where the hardware itself is about half-virtualized. Those are the templates I'm talking about.