Secmodeenable - HP StorageWorks 2/64 - Core Switch Command Reference Manual

secModeEnable

Enables secure mode.
Synopsis
secmodeenable [--quickmode] | [[--currentpwd] [--lockdown[=scc |=dcc]]
[--fcs list_of_switches | list_of_switches]]
Availability
admin
Description
Use this command to enable secure mode on all switches in the fabric. This command fails if any switch
in the fabric is not capable of enforcing the security policies defined in the security database. If no
operand is specified, the command becomes interactive.
NOTE: This command must be issued from a sectelnet or SSH session.
This command sets up security in the fabric by:
• Activating security mode on all switches in the fabric.
• Creating the security database, populated with a list of FCS switches in the FCS_POLICY.
• Distributing the security database to all switches in the fabric.
• Resetting the root, factory, admin, and user account passwords on all FCS switches.
• Resetting the admin and user account passwords on all non-FCS switches.
• Disabling the root and factory accounts on all non-FCS switches in the fabric.
The administrator is prompted to enter new passwords for the following accounts:
• factory
root
•
• admin
user
•
• non-FCS admin
The prompts do not appear if the administrator chooses to use the passwords on the primary FCS with the
--currentpwd option. With this option, the admin password is used for non-FCS admin as well.
If the fabric is not in secure mode and one or more specified FCS switches is present in the fabric, the
command must be issued on the first active FCS in the list.
If the fabric is not in secure mode and no specified FCS switches are present in the fabric, the command
can be issued on any switch. Only the --fcs option can be used in this case.
If the fabric is not in secure mode and this command is issued, the switches in the fabric with Fabric OS
versions previous to v4.4.0 or v3.2.0 reboots automatically.
Fabric OS 5.x command reference guide 571