role changepw
Change the password
Syntax
role changepw -name <role> [-oldpw <oldpassword>] [-newpw <newpassword>] [-prompt] [-force]
Argument(s) | Shortcut | Description |
---|---|---|
-name <role> | -n | Role to change password for. |
-oldpw <oldpassword> | -old |
Current password
|
-newpw <newpassword> | -new |
New password Required if you have already provided an -oldpw. |
-prompt | -p | Prompt for challenges (challenges will be hidden by *) |
-force | -f | Force the action. Use this option to bypass the warning about primary/secondary credentials on a PED-authenticated HSM, as shown in the example. |
Examples
Change credential on the HSM's Admin partition
lunacm:> role login -name SO Please attend to the PED. Command Result : No Error
lunacm:> role changepw -name SO -prompt Warning: this role has no secondary credentials. -prompt parameter will be ignored. Type 'proceed' to continue, or 'quit' to quit now -> proceed Please attend to the PED. Command Result : No Error
Change the Crypto Officer's primary credential (PED Key secret)
lunacm:> role changepw -name co This role has secondary credentials. You are about to change the primary credentials. Are you sure you wish to continue? Type 'proceed' to continue, or 'quit' to quit now -> proceed Command Result : No Error
Change Crypto Officer's secondary credential (challenge secret)
lunacm:> role changepw -name co -oldpw PASSWORD -newpw userpin This role has secondary credentials. You are about to change the secondary credentials. Are you sure you wish to continue? Type 'proceed' to continue, or 'quit' to quit now -> proceed Command Result : No Error