Brocade Secure Fabric OS Administrator's Guide - Supporting Fabric OS v3.2.0, v4.4.0, v5.0.1, v5.1.0, 5.2.0, and 5.3.0 (53-1000244-02, June 2007)

68 Secure Fabric OS Administrator’s Guide

53-1000244-02

USING TEMPORARY PASSWORDS

Create temporary passwords for default accounts to grant temporary access to a specific switch

and login account without compromising the confidentiality of the permanent passwords; the

permanent passwords also remain in effect. Temporary passwords can be removed; they are also

automatically removed after a switch reboot.

NOTE

If a temporary password is set on a backup FCS switch, and the backup FCS switch then becomes

the primary FCS switch, the temporary password remains in effect on that switch until the

secTempPasswdReset command is entered.

Creating a Temporary Password for a Switch

Use the secTempPasswdSet command to create a temporary password. You must specify a login

account and a switch domain ID.

To create a temporary admin password on a non-FCS switch

1. From a sectelnet or SSH session, log in to the primary FCS switch as admin.

2. Type secTempPasswdSet domain, “login_name”.

domain is the domain ID of the switch for which you want to set a temporary password.

login_name is the login account for which you want to set the temporary password.

3. Type the admin password at the prompt.

Type an alphanumeric password between 8 and 40 characters in length.

4. Reenter the password exactly as entered the first time.

For example, to create a temporary password for the admin account on a switch that has a

domain ID of 2:

primaryfcs:admin> sectemppasswdset 2, ”admin”

Set remote switch admin password: swimming

Re-enter remote switch admin password: swimming

Committing configuration........done

Password successfully set for domain 2 for admin.

Removing a Temporary Password from a Switch

Use the secTempPasswdReset command to remove the temporary password. The permanent

password remains in effect.

To remove the temporary password from a switch

1. From a sectelnet or SSH session, log in to the primary FCS switch as admin.

2. Type secTempPasswdReset domain, “login_name”.

domain is the domain ID of the switch for which you want to remove the temporary password.

login_name is the login account to which the temporary password applies.