HP ProCurve 3500yl Release Notes page 56

Enhancements
Release K.12.06 Enhancements
In software release K.12.06 and greater, you cannot view the configured local password settings in
plain text. However, by entering the include-credentials command described later, you can view a
hash of the local password settings in the running-config file, in the format:
password manager [user-name <name>] <hash-type> <pass-hash>
password operator [user-name <name>] <hash-type> <pass-hash>
Where:
<name> is an alphanumeric string for the user name assigned to the manager or operator.
<hash-type> indicates the type of hash algorithm used: SHA-1.
<pass-hash> is the SHA-1 authentication protocol's hash of the password.
For example, a manager username and password may be stored in a running-config file as follows:
password manager user-name Spock SHA1
2fd4e1c67a2d28fced849ee1bb76e7391b93eb12
If you permanently save password configurations in the startup-config file by entering the write
memory command, the passwords take effect when a switch boots with the software version
associated with the configuration file.
C a u t i o n
If a startup configuration file does not contain a manager or operator password, the switch will not
have password protection and can be accessed through Telnet, the serial port, or Web interface with
full manager privileges.
Password Command
In software release K.12.06 and greater, the password command in the CLI is enhanced to support the
following syntax:
Syntax: [no] password <manager | operator | port-access> [user-name <name>] <hash-type> <password>
Where:
manager configures access to the switch with manager-level privileges.
■
operator configures access to the switch with operator-level privileges.
■
port-access configures access to the switch through 802.1X authentication with
■
operator-level privileges.
user-name <name> is the (optional) text string of the user name associated with the password.
■
45