Sun Oracle Crypto Accelerator 6000 Board, User Manual, Page: 75 / 266

Chapter 3 Administering the Sun Crypto Accelerator 6000 Board 53
rekey remote-access
(DSO only) Rekeys the remote access key. This command logs
the security officer out of the existing session when
successful.
reset
(DSO only) Resets the board. This command logs the security
officer out from the board and closes the session.
set audit-level
log-
level
(KSO only) Sets the keystore audit log level. The log level is
an integer value from zero to seven, with each successive log
level being incremented. The description of the log levels are
as follows:
•
0 – Keystore auditing is disabled
• 1 – Notices
• 2 – Administration
• 3 – Logins (Security officers and Users)
• 4 – User (creation, deletion, or password changes)
• 5 – PKCS#11 (session creation, deletion, etc.)
• 6 – Token Objects (key creation, deletion, etc.)
• 7 – Session Objects (key creation, deletion, etc.)
set lock
This command is deprecated. Please use the
lock master-
key
command instead.
set multiadmin
minauth
number-of-
minimum-admin-role-sec-
officers
This command sets the quorum of security officers required
for the successful completion of a Multi-Admin mode
command. This value must be at least 2 and less than or
equal to the total number of security officers on the system.
In addition, if Multi-Admin mode is already enabled, the
new value cannot exceed the number of security officers in
the Multi-Admin role. If the board is in Multi-Admin mode
then the command will require authentication by multiple
security officers with the Multi-Admin role.
set multiadmin
timeout
number-of-
minutes
Changes the timeout for commands requiring Multi-Admin
mode authentication. This value is in minutes and must be
between 1 and 1440 (1 day). If a value larger than 1440 is
specified, the value will be set to 1440. If the board is already
in Multi-Admin mode, it requires authentication by multiple
security officers with the Multi-Admin role.
set password
Changes the password for the currently logged in security
officer. To change passwords for keystore users, the PKCS#11
interface must be used. See
Appendix E .
TABLE 3-4
scamgr
Commands (Continued)
Command Description