HP Systems Insight Manager 6.0 Command Line Interface Guide

Description
The mxnodesecurity command enables a CMS user to add, list, or remove default/global and node/system
credentials in the CMS. All credentials are stored in the HP SIM database. The difference between default
and node type credentials are:
• Default (or Global) Credentials that apply to all managed systems.
• Node (or System) Credentials that apply to specific managed systems.
• mxnodesecurity -a -p protocol -c username:password [-t on or off ] [-n nodename ]
mxnodesecurity -a -p wbem -c username:password [-t on or off ] -n nodename [ :Port#
]
mxnodesecurity -a -p snmp -c username:password [-t on or off ] -n nodename
mxnodesecurity -a -p signin -c username:password [-t onoroff ] [-n nodename ]
mxnodesecurity -a -p protocol -c username:password
mxnodesecurity -a -p protocol -c username:password -n @defaultN
mxnodesecurity -a -f filename
The add option lets you add a default or node credential. You can specify an input XML file that describes
credentials for one or more target nodes, or you can declare credentials and (optionally) a node name
on the command line.
If you specify a file name on the command line, the file must be an XML file. See XML file support section
and the mxnodesecurity(4) manpage for details on the required XML file format. You can also
specify the credential characteristics on the command line with the node name. If the node name is
omitted, the default credentials are changed to the new credential characteristics.
If the node name is included on the command line, mxnodesecurity tries to get the fully-qualified
name for the node. If the fully-qualified name is not available, the IP address is requested. If an IP
address is not available, the name supplied on the command line is used. The mxnodesecurity
application then searches for the node in the database. If the node exists, the credentials for that node
are updated. If the node is not found, a new line item is added for the node with the credential
characteristics.
• mxnodesecurity -r -p protocol -n nodename
mxnodesecurity -r -p wbem -n nodename [:Port#]
mxnodesecurity -r -p protocol -n @defaultN [-x fd or fcd ]
mxnodesecurity -r -p protocol [-x fd or fcd ]
mxnodesecurity -r -f filename
The remove option lets you delete a default or node credential. Like the add option, the remove option
enables you to supply a file name with the credentials and node name for deletion. The remove option
enables you to remove one credential at a time based on the node name, or to remove all credentials
of a specified protocol type.
If you enter a protocol and a node name on the command line, the remove option attempts to resolve
the node name to its fully-qualified name. If the fully-qualified name is not available, the IP address is
requested. If an IP address is not available, the name supplied on the command line is used. After the
node name is determined, the remove option scans for a matching credential in HP SIM database. If
the credential exists in the database, the credential is deleted.
If you attempt to remove a global credential that is currently in use, the CLI displays an error message,
indicating that the credential was not removed. You can use [-x fd] to forcefully remove an in use
credential. However, removing an in use credential might interrupt communications between the node
or system and HP SIM. To prevent issues, you can copy the credential as a node/system credential to
the node/system using the credential preserving communication to HP SIM.
• To forcefully remove a global credential without copying the credential, use the -x option with
the following argument:
mxnodesecurity -r -p protoName [-x {forceDelete | fd}]
mxnodesecurity 67