Home » HP Manuals » Storage Devices » HP StorageWorks 2/16V » Manual Viewer

HP StorageWorks 2/16V Brocade Secure Fabric OS Administrator's Guide (53-10002 - Page 89

Table 4-3, Account Role, Secure Mode Disabled, passwd, secNonFCSPasswd

View all HP StorageWorks 2/16V manuals

Add to My Manuals
Save this manual to your list of manuals

Page 89 highlights

4 Table 4-3 Login Account Behavior with Secure Mode Disabled and Enabled (Continued) Account Role Secure Mode Disabled Secure Mode Enabled admin Can use to modify admin and user passwords. Available on all switches. Password is specific to each switch; can modify using the passwd command. Available on all switches. Can create temporary passwords. Two passwords: • One for all FCS switches; can modify using passwd command on the primary FCS switch. • One for all non-FCS switches; can modify using secNonFCSPasswd command on the primary FCS switch. switchAdmin, Operator, ZoneAdmin, FabricAdmin Available on all switches. Password is specific to each switch; can modify using the passwd command. Available on all switches. Note: The switchAdmin, Operator, ZoneAdmin, FabricAdmin role accounts can log in to a switch running Fabric OS v3.2.0 or v4.4.0 but it depreciates to a user-level role permissions. factory Available on all switches. Created for switch initialization Password is specific to each purposes; not recommended for switch; can modify using the administrative operations. passwd command. Can use to modify factory, admin, and user passwords. Available on FCS switches only. However, can temporarily enable root and factory accounts on nonFCS switches by creating a temporary password. Password is common to all FCS switches; can modify using passwd command on the primary FCS switch. root Available on all switches. Created for debugging Password is specific to each purposes; not recommended for switch; can modify using the administrative operations. passwd command. Can use to modify root, factory, admin, and user passwords. Available on FCS switches only. However, can temporarily enable root and factory accounts on nonFCS switches by creating a temporary password. Password is common to all FCS switches; can modify using passwd command on the primary FCS switch. Secure Fabric OS Administrator's Guide 4-9 Publication Number: 53-1000244-01

Section	Page
About This Document	5
Chapter 1 Introducing Secure Fabric OS	5
Chapter 2 Preparing the Fabric for Secure Fabric OS	5
Chapter 3 Enabling Secure Fabric OS and Creating Policies	6
Chapter 4 Managing Secure Fabric OS	7
Appendix A Removing Secure Fabric OS Capability	7
Appendix B Secure Fabric OS Commands and Secure Mode Restrictions	7
Index	7
About This Document	9
How This Document Is Organized	9
Supported Hardware and Software	10
What’s New in This Document	10
Document Conventions	11
Text Formatting	11
Notes, Cautions, and Warnings	11
Key Terms	12
Additional Information	12
Brocade Resources	12
Other Industry Resources	14
Getting Technical Help	15
Document Feedback	16
Introducing Secure Fabric OS	17
Management Channel Security	18
Switch-to-Switch Authentication	19
Using PKI	19
Using DH-CHAP	20
Fabric Configuration Server Switches	20
Fabric Management Policy Set	21
Preparing the Fabric for Secure Fabric OS	23
Prerequisites for a Secure Fabric Environment	23
Verifying Compatible Fabric OS Version	24
Verifying or Activating Secure Fabric OS and Advanced Zoning Licenses	25
Verifying the Digital Certificate	26
Displaying the Digital Certificate Status	26
Creating PKI Objects	27
Removing PKI Objects	28
Obtaining the Digital Certificate File	29
Configuring Switch-to-Switch Authentication	44
Selecting Authentication Protocols	45
Managing Shared Secrets	46
Preparing SilkWorm 24000 for Secure Fabric OS	48
Installing a Supported CLI Client on a Workstation	50
Enabling Secure Fabric OS and Creating Policies	51
Prerequisites to Enabling Secure Mode	51
Default Fabric and Switch Accessibility	52
Enabling Secure Mode	52
Modifying the FCS Policy	58
Changing the Position of a Switch Within the FCS Policy	59
Failing Over the Primary FCS Switch	60
Creating Secure Fabric OS Policies Other Than the FCS Policy	61
Creating a MAC Policy	62
Creating an Options Policy	70
Creating a DCC Policy	71
Creating an SCC Policy	74
Managing Secure Fabric OS Policies	75
Saving Changes to Secure Fabric OS Policies	76
Activating Changes to Secure Fabric OS Policies	77
Adding a Member to an Existing Policy	77
Removing a Member from a Policy	78
Deleting a Policy	78
Aborting All Uncommitted Changes	79
Aborting a Secure Fabric OS Transaction	79
Managing Secure Fabric OS	81
Viewing Secure Fabric OS Information	81
Displaying General Secure Fabric OS Information	82
Viewing the Secure Fabric OS Policy Database	82
Displaying Individual Secure Fabric OS Policies	83
Displaying Status of Secure Mode	84
Displaying and Resetting Secure Fabric OS Statistics	85
Displaying Secure Fabric OS Statistics	86
Resetting Secure Fabric OS Statistics	87
Managing Passwords	88
Modifying Passwords in Secure Mode	90
Using Temporary Passwords	91
Resetting the Version Number and Time Stamp	92
Adding Switches and Merging Fabrics with Secure Mode Enabled	93
Preventing a LUN Connection	97
Troubleshooting	97
Removing Secure Fabric OS Capability	103
Preparing the Fabric for Removal of Secure Fabric OS Policies	103
Disabling Secure Mode	104
Deactivating the Secure Fabric OS License on Each Switch	105
Uninstalling Related Items from the Host	105
Secure Fabric OS Commands and Secure Mode Restrictions	107
Secure Fabric OS Commands	107
Command Restrictions in Secure Mode	112
Zoning Commands	112
Miscellaneous Commands	113
Index	115
A	115
C	115
D	116
E	116
F	116
H	116
I	116
J	116
L	116
M	116
N	116
O	117
P	117
R	117
S	117
T	118
U	118
V	118
W	118

Match case Limit results 1 per page

Secure Fabric OS Administrator’s Guide

4-9

Publication Number: 53-1000244-01

admin

Can use to modify admin and

user passwords.

Available on all switches.

Password is specific to each

switch; can modify using the

passwd

command.

Available on all switches. Can

create temporary passwords.

Two passwords:

•

One for all FCS switches;

can modify using

passwd

command on the primary

FCS switch.

•

One for all non-FCS

switches; can modify using

secNonFCSPasswd

command on the primary

FCS switch.

switchAdmin, Operator,

ZoneAdmin, FabricAdmin

Available on all switches.

Password is specific to each

switch; can modify using the

passwd

command.

Available on all switches.

Note:

The switchAdmin,

Operator, ZoneAdmin,

FabricAdmin role accounts

can

OS v3.2.0 or v4.4.0 but it

depreciates to a user-level role

permissions.

factory

Created for switch initialization

purposes; not recommended for

administrative operations.

Can use to modify factory,

admin, and user passwords.

Available on all switches.

Password is specific to each

switch; can modify using the

passwd

command.

Available on FCS switches only.

However, can temporarily enable

root and factory accounts on non-

FCS switches by creating a

temporary password.

Password is common to all FCS

switches; can modify using

passwd

command on the primary

FCS switch.

root

Created for debugging

purposes; not recommended for

administrative operations.

Can use to modify root, factory,

admin, and user passwords.

Available on all switches.

Password is specific to each

switch; can modify using the

passwd

command.

Available on FCS switches only.

However, can temporarily enable

root and factory accounts on non-

FCS switches by creating a

temporary password.

Password is common to all FCS

switches; can modify using

passwd

command on the primary

FCS switch.

Table 4-3

(Continued)

Account Role

Secure Mode Disabled

Secure Mode Enabled