HP StorageWorks Secure Fabric OS 5.0.0 User Guide (AA-RW1UA-TE, May 2005)

Integrating Secure Fabric OS52
Managing shared secrets
When you configure the switches at both ends of a link to use DH-CHAP for authentication,
you must also define a pair of shared secrets—one for each end of the link. Use the
secAuthSecret command to
• View the WWN of switches with shared secrets
• Set the shared secrets for switches
• Remove the shared secret for one or more switches
This section illustrates using the secAuthSecret command to display the list of switches in
the current switch’s shared secret database and to set the pair of shared secrets for the current
switch and a connected switch. Refer to the HP StorageWorks
Fabric OS 4.x command
reference guide
for more details on the secAuthSecret command.
NOTE: A Secure Fabric OS license is required to use the secAuthSecret command.
When setting shared secrets, note that you are entering the shared secrets in plain text. Use a
secure channel (for example, SSH or the serial console), to connect to the switch on which you
are setting the secrets.
To view the list of switches with shared secrets in the current switches database:
1. Log in to the switch as admin.
2. On a switch running Fabric OS v4.x, type secAuthSecret --show; on a switch
running Fabric OS v3.x, type secAuthSecret "--show".
The output displays the WWN, domain ID and name (if known) of the switches with
defined shared secrets, for example:
To set shared secrets:
1. Login to the switch as admin
2. On a switch running Fabric OS v4.x, type secAuthSecret --set; on a switch running
Fabric OS v3.x, type secAuthSecret "--set".
WWN DId Name
-----------------------------------------------
10:00:00:60:69:80:07:52 Unknown
10:00:00:60:69:80:07:5c 1 switchA