6.2
Setting NVRAM Security Mode
The NVRAM has the ability to restrict the set of operations that users can perform.
When the security-mode parameter is set to either full or command, only users
with the security-password may bypass the enforcement policy.
the different security modes and their conditions.
TABLE 6-3
Value
full
command
none
Caution – You must set the security password before setting the security mode.
Forgetting the password or configuring security mode before the password requires
a call to customer support to make the system bootable.
To configure security mode:
1. Obtain the ok prompt.
See
"Obtaining the ok Prompt for Testing" on page
2. Set the security password.
Type:
■
ok password
New password (8 characters max)
Retype new password:
ok
Or, type:
■
ok setenv security-password password
security-password =
ok
This is the only instance in which the security password is ever displayed.
security-mode Values and Their Enforcement Policy
Enforcement Policy
All commands except go require the security-password.
All commands except boot (without arguments) and go require the
security-password.
All commands are available, no password is required.
TABLE 6-3
5-2.
Chapter 6 NVRAM
lists
6-7