Sun Oracle Crypto Accelerator 6000 Board, User Manual

Page: 94 / 266

72 Sun Crypto Accelerator 6000 Board User’s Guide for Version 1.1 • February 2013
2. Type
set multiadmin timeout
minutes.
The minutes value must be between 1 and 1440 minutes (1 day). If a value larger
than 1440 is specified, the value will be set to 1440. If executed in Multi-Admin
mode, this command requires authentication by multiple security officers
assigned the Multi-Admin role.
For example, the following command changes the timeout for commands that
require Multi-Admin mode authentication.
▼
Enable Multi-Admin Mode
1. Start the
scamgr
utility.
2. Type
enable multiadmin
.
When enabled, certain commands require multiple security officers to
authenticate before the command can complete successfully. When this command
is executed, the security officer is presented with the current Multi-Admin mode
settings and is given the opportunity to change these settings before the
command completes. This command does not accept the
-y
(yes to all) flag.
For example, the following command enables Multi-Admin mode.
▼
Disable Multi-Admin Mode
1. Start the
scamgr
utility.
scamgr{mca
N
@
hostname
,
sec-officer
}> set multiadmin timeout
3
New multi-admin timeout value is 3 minutes.
scamgr{mca
N
@
hostname
,
sec-officer
}> enable multiadmin
WARNING: This command will place the device in multi-
admin mode. This mode will require multiple
security officers to authenticate for certain
commands to be executed.
Enable Multi-Admin Mode? (Y/Yes/N/No) [No]: y
Multi-Admin mode parameters:
----------------------------------------------------------------
Minimum number of admins: 3
Multi-Admin command timeout: 3 minutes
----------------------------------------------------------------
Is this correct? (Y/Yes/N/No) [No]: y
The board is now in multi-admin mode.