|
Home > |
|---|
Change Partition User password. Use this command to change the password that authenticates the Crypto Officer or Crypto User and/or the client to the application partition. You, as User (or Crypto Officer), need to know the current password in order to change it.
Contrast this command with the partition resetpw command, used by the SO, where the SO does not need to know the current partition User/Crypto Officer password in order to reset it.
For Password authenticated SafeNet HSM, the partition password needed by the administrator (Partition Owner/User) is also the challenge secret needed by the client.
For PED authenticated SafeNet HSM, the data on the black PED Key is the administrative authentication (used by the Partition Owner/User or Crypto Officer to log in or to activate the partition), and the challenge secret is a separate text secret used by the client before performing cryptographic operations.
If you run the partition changPw command without additional arguments, the HSM offers to change only the black PED Key secret.
To change the challenge secret, you must run the command with the -newpw and -oldpw options - OR use the -p option instead, which tells the HSM to prompt for old and new challenge secrets.
partition changepw [- newpw <new_user_password> -oldpw <old_user_password>] [-prompt]
| Parameter | Shortcut | Description |
|---|---|---|
| -newpw | -n | The new password for the partition User. |
| -oldpw | -o | The old partition User password that is being replaced. |
| -prompt | -p |
The system prompts for old and new passwords (for password-authenticated HSM) or challenge secrets (for PED-authenticated HSM) and obscures your typing with asterisks, so an unauthorized person cannot see the passwords onscreen, and the scroll-back log of your terminal would not show what you had typed. |
lunacm:> partition changePw -newpw <new_user_password> -oldpw <old_user_password>
Command Result : No Error
lunacm:> partition changePw -newpw <new_user_password> -oldpw <old_user_password>
User is not activated, please attend to the PED.
Command Result : No Error
lunacm:> partition changepw -p
Option -oldpw was not supplied. It is required.
Enter the old password: ***********
Option -newpw was not supplied. It is required.
Enter the new password: ***********
Re-enter the new password: ***********
Command Result : No Error
lunacm:> partition changePw -p
Option -oldpw was not supplied. It is required.
Enter the old challenge: ***********
Option -newpw was not supplied. It is required.
Enter the new challenge: ***********
Re-enter the new password: ***********
User is not activated, please attend to the PED.
Command Result : No Error
lunacm:> partition changePw
User is not activated, please attend to the PED.
Command Result : No Error