White Papers
The system continues to display a message stating that startup conguration verication failed. You can disable the startup conguration
feature either by disabling startup conguration verication or save the running conguration to the startup conguration and update the
hash for the startup conguration.
Enabling and Conguring Startup Conguration Hash Verication
To enable and congure startup conguration hash verication, follow these steps:
1 Enable the startup conguration hash verication feature.
CONFIGURATION mode
verified boot
2 Generate the hash checksum for your startup conguration le.
EXEC Privilege
generate hash {md5 | sha1 | sha256} {flash://filename | startup-config}
3 Verify the hash checksum of the current startup conguration on the local le system.
EXEC Privilege
verified boot hash startup—config hash-value
NOTE: The verified boot hash command is only applicable for the startup conguration le in the local le
system.
After enabling and conguring startup conguration verication, the device veries the hash checksum of the startup conguration during
every reload.
DellEMC# verified boot hash startup—config 619A8C1B7A2BC9692A221E2151B9DA9E
Conguring the root User Password
For added security, you can change the root user password.
If you congure the secure-cli command on the system, the Dell EMC Networking OS resets any previously-congured root access
password without displaying any warning message. With the secure-cli command enabled on the system, the CONFIGURATION mode
does not display the
root access password option.
To change the default root user password, follow these steps:
• Change the default root user password.
CONFIGURATION mode
root-access password [encryption-type] root-password
Enter an encryption type for the root password.
• 0 directs the system to store the password as clear text.
• 7 directs the system to store the password with a dynamic salt.
When you congure the root access password, ensure that your password meets the following criteria:
• A minimum of eight characters in length
• A minimum of one lower case letter (a to z)
• A minimum of one upper case letter (A to Z)
• A minimum of one numeric character (0 to 9)
926
Security