Access Security Guide K/KA/KB.15.15

Restrictions for the setmib command
Usernames and passwords can be set using the CLI command setmib. They cannot be set using
SNMP.
Quotes are permitted for enclosing other characters, for example, a username or password
of abcd can be enclosed in quotes “abcd” without the quotes becoming part of the username
or password itself. Quotes can also be inserted between other characters of a username or
password, for example, ab”cd. A pair of quotes enclosing characters followed by any
additional characters is invalid, for example, “abc”d.
Spaces are allowed in usernames and passwords. The username or password must be enclosed
in quotes, for example, “one two three. A blank space or spaces between quotes is allowed,
for example, “ ”.
Additional restrictions
Some authentication servers prevent the usage of special symbols such as the backslash (\) and
quotes (“”). The switch allows the use of these symbols in configurable credentials, but using them
can limit access for some users who can use different client software. See the vendor’s documentation
for specific information about these restrictions.
Upgrading or downgrading software versions implications for passwords
When you update software from a version that does not support long passwords to a version that
supports long passwords, the existing usernames and passwords continue to be there and no further
action is required.
Before downgrading to a software version that does not include this feature, use one of the following
procedures:
1. Reset the username and/or password to be no more than 16 characters in length, without
using any special characters, from the CLI command password.
Execute a CLI write memory command (required if the include-credentials
feature has ever been enabled.)
HP Switch(config)# password manager
New password: ********
Please retype new password: *******
HP Switch(config)# write mem
Or
2. Execute the CLI command [no] password all. This clears all the passwords.
Execute a CLI write memory command (required if the include-credentials
feature has ever been enabled.)
HP Switch(config)# no password all
Password protections will be deleted, do you want to
continue [y/n]? y
HP Switch(config)# write mem
Or
3. Clear the password by using the [Clear] button on the switch.
Execute a CLI write memory command (required if the include-credentials
feature has ever been enabled.)
Creating password security 25