5.19
Setting Console Security
The SRM console firmware has console security features intended to prevent
unauthorized personnel from modifying the system parameters or otherwise
tampering with the system from the console. The security features include a secure
mode and commands to set console security.
5.19.1
Overview of Secure Mode
The SRM console has two modes, user mode and secure mode.
•
User mode allows you to use all SRM console commands. User mode is the default
mode.
•
Secure mode allows you to use only the
boot
,
continue
, and
login
commands. The
boot
command cannot take command-line parameters when the console is in secure
mode. The console boots the operating system using the environment variables stored
in NVRAM (
boot_file
,
bootdef_dev
,
boot_osflags
).
Secure Function Commands
•
The
set password
and
set secure
commands are used to set secure mode.
•
The
clear password
command is used to exit secure mode and return to user mode. All
the SRM console commands are available and the console is no longer secure.
•
The
login
command turns off console security for the current console session. Once
you enter the
login
command in secure mode, you can enter any SRM command as
usual. However, the system automatically returns to secure mode when you enter the
boot
or
continue
command or when you reset the system.
NOTE:
The security features work only if access to the system hardware is denied to
unauthorized personnel. Be sure the system is available only to authorized
personnel.
Using Firmware
5-31
