HP Systems Insight Manager 5.3 Command Line Interface reference guide

The add option lets you add a default or node credential. You can specify an input XML file that describes
credentials for one or more target nodes, or you can declare credentials and (optionally) a node name
on the command line.
If you specify a file name on the command line, the file must be an XML file. See XML file support section
and the mxnodesecurity(4) manpage for details on the required XML file format. You can also
specify the credential characteristics on the command line with the node name. If the node name is
omitted, the default credentials are changed to the new credential characteristics.
If the node name is included on the command line, mxnodesecurity tries to get the fully-qualified
name for the node. If the fully-qualified name is not available, the IP address is requested. If an IP
address is not available, the name supplied on the command line is used. The mxnodesecurity
application then searches for the node in the database. If the node exists, the credentials for that node
are updated. If the node is not found, a new line item is added for the node with the credential
characteristics.
• mxnodesecurity -r -p protocol -n nodename
mxnodesecurity -r -p wbem -n nodename [:Port#]
mxnodesecurity -r -p protocol -n @defaultN [-x fd or fcd ]
mxnodesecurity -r -p protocol [-x fd or fcd ]
mxnodesecurity -r -f filename
The remove option lets you delete a default or node credential. Like the add option, the remove option
allows you to supply a file name with the credentials and node name for deletion. The remove option
allows you to remove one credential at a time based on the node name, or to remove all credentials
of a specified protocol type.
If you enter a protocol and a node name on the command line, the remove option attempts to resolve
the node name to its fully-qualified name. If the fully-qualified name is not available, the IP address is
requested. If an IP address is not available, the name supplied on the command line is used. After the
node name is determined, the remove option scans for a matching credential in HP SIM database. If
the credential exists in the database, the credential is deleted.
If you attempt to remove a global credential that is currently in use, the CLI displays an error message,
indicating that the credential was not removed. You can use [-x fd] to forcefully remove an in use
credential. However, removing an in use credential might interrupt communications between the node
or system and HP SIM. To prevent issues, you can copy the credential as a node/system credential to
the node/system using the credential preserving communication to HP SIM.
• To forcefully remove a global credential without copying the credential, use the -x option with
the following argument:
mxnodesecurity -r -p protoName [-x {forceDelete | fd}]
mxnodesecurity -r -p protoName -n @default1 [-x {forceDelete | fd}]
• To first copy the credential, then forcefully remove the global credential, use the -x option with
the following argument:
mxnodesecurity -r -p protoName [-x {forceCopyDelete | fd}]
mxnodesecurity -r -p protoName -n @default1 [-x {forceCopyDelete | fd}]
If you omit the node name during a remove operation, all default/global credentials for the supplied
protocol are removed from the HP SIM credentials database.
• mxnodesecurity -l [-p protocol ] [-n nodename ]
The list option allows you to list both default or global and node or system type credentials stored in
the HP SIM credentials database. You can specify a protocol or a node name to filter the list results.
If the list option is used with the protocol option, all nodes with credentials of the specified protocol are
listed. If the list option is used with the node option, the node is located, and all credentials for that
node, regardless of protocol, are listed. If the node and protocol options are used together, the node
will be displayed only if credentials for the specified protocol exist.
64 Command descriptions