Goal

Solution

There are 4 basic passwords associated with the arrays :

1. Local Array password
2. Management Login password
3. Service Interface Menu password ( 06.16.81.xx or later firmware )
4. Debug/Engineering password

This document will discuss the different functionality of each of these passwords

Local Array password

This password controls the ability of the Management Host to alter the configuration of the Sun Storage[TM] RAID Arrays. By default from the factory it is blank (no password). The password is stored in two locations. One copy is stored on the array itself, in it's configuration region (DACstore). The other is stored encrypted on the Management Host, either in :

/var/opt/SUNWsefms/store/Devices/devicesX

when Common Array Management (CAM) software is used

or in :

/opt/SUNWstade/DATA/rasagent.conf

when the older Configuration Services management software is used

Note: Upgrade to CAM is highly recommended for any management hosts still using Configuration Services

Each Array and installed Management Host must agree on this password in order for the Management Host to be able to make configuration changes on the Array.

Changing the Local Array password can be done via the "Manage Passwords..." button on the "Administration" page for the array in the CAM GUI, or using "sscs modify" command in the CAM CLI. This has two options :

1. "Change Array Password" which updates both the DACStore of the array and the CAM software configuration file with a new password. In order to use this option the current password must be entered first.
   
2. "Update Array Password in Array Registration Database" which updates only the CAM software configuration file with a new password, for use then the software is out of sync with the array password.
   Note: <Document 1011201.1> references how to use this option to reset the array password.

Management Login password

This password guards against unauthorized access to the CAM Management Software GUI and CLI. After the initial installation of the Management Software the only login password combination that will work is the root/administrator user password for that Management Host. Additional users can then manually added, provided that the user is already setup for login to the OS. Additional users are also assigned a role (storage or guest) depending on the desired access level (storage is full access, guest is view-only).

Service Interface Main Menu

This password is used to login to the Service Interface Main Menu accessed via the serial port of the array controller. It is used during initial configuration of the array to define the controller's network interface settings directly, e.g. it's IP address. It can also be used to review the controller's existing network interface settings and to reset the Local Array password in the array's DACstore only. Note: <Document 1011201.1> references how to use this option to reset the array password

The password to access the Service Interface Main Menu is defined in the Hardware Installation Guide of each product, e.g  Sun StorageTek[TM] 6140 Array Hardware Installation Guide

Note : For the StorEdge[TM] 6130 Array this menu is only available with firmware 06.19.23.10 or higher, the password is the same as the Sun StorageTek[TM] 6140 Array

Debug/Engineering password

This password is only for trained support engineers. It allow access to the array shell on the controllers in order to do deep troubleshooting or carry out recovery action plan provided by engineering.

Note :
The passwords for both the 'Service Interface Main Menu' and 'Debug/Engineering' are hard coded in the array firmware and so are not user modifiable.

This solution has no attachment