No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Installation Guide

OceanStor 5000, 5000F, 6000, and 6000F V5 Series V500R007

This document is applicable to OceanStor 5110 V5, 5110F V5, 5300 V5, 5300F V5, 5500 V5, 5500F V5, 5600 V5, 5600F V5, 5800 V5, 5800F V5, 6800 V5, and 6800F V5 storage systems. It describes hardware installation of those storage systems for helping you easily and quickly finish the installation.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Management Accounts and Other Accounts

Management Accounts and Other Accounts

The storage system defines different management accounts and other accounts as well as allocates different configuration and maintenance permissions to these accounts.

Management Accounts

Table 2-13 lists the management accounts and password policies supported by the storage system.

Table 2-13 Management accounts and password policies

Account Category

User Level

Usage

Default User Name

Default Password

Password Changing Methoda

Built-in controller enclosure user

Root administrator

Used to initialize the passwords of super administrators when the super administrators forget their passwords (the old passwords are required when the super administrators want to set a new password) and to change the password of the root administrator. You can log in to the storage system using this account through a serial port only.

_super_admin

Admin@revive

Run the chgsuperpasswd command. For details about how to change a password, see OceanStor 5000, 5000F, 6000, and 6000F V5 Series V500R007 Advanced O&M Command Reference. Contact Huawei technical support to obtain the document.

NOTICE:

After changing the password of user _super_admin, you must remember the new password. If not, you cannot perform any operations that require this user right. To retrieve the new password, you need to return the storage device to the factory for handling.

Super administrator

Used to transmit files between internal controllers through the SFTP protocol

ibc_os_hs

Storage@21st

Run the chgibcpasswd command. For details about how to change a password, see OceanStor 5000, 5000F, 6000, and 6000F V5 Series V500R007 Advanced O&M Command Reference. Contact Huawei technical support to obtain the document.

Super administrator

The user has full control over the storage system. It can manage users of the same or a lower level and initialize the passwords of lower-level users.

admin

Admin@storage

Method for changing the password:

  1. Log in to DeviceManager.
  2. Choose Settings > Permission Settings > User Management.
  3. Select the user whose password you want to change and click Modify.
  4. In the Modify User dialog box that is displayed, change the password of the user.
  5. Click OK.

Machine-machine account

Used to initialize resource files when DeviceManager is started and implement some functions of CLI or other tool software

mm_user

mm_user@storage

Run the change mm_user password command. For details about how to change a password, see OceanStor 5000, 5000F, 6000, and 6000F V5 Series V500R007 Command Reference.

Super administrator

Used to access the BMC system using a serial port

NOTE:

This account is applicable only to 3 U or 6 U controller enclosures.

administrator

Huawei12#$

Run the password command. For details about how to change a password, see OceanStor 5000, 5000F, 6000, and 6000F V5 Series V500R007 Advanced O&M Command Reference. Contact Huawei technical support to obtain the document.

Super administrator

Built-in account in the SES system of controller and disk enclosures

Used to log in to disk enclosures and 2 U controller enclosures using a serial port

admin

Admin@storage

Method for changing the password:

  1. Log in to DeviceManager.
  2. Choose Settings > Permission Settings > User Management.
  3. Select the user whose password you want to change and click Modify.
  4. In the Modify User dialog box that is displayed, change the password of the user.
  5. Click OK.

File system NDMP account

Machine-machine account

Used to manage the NDMP service of the storage system on a client

ndmpadmin

Ndmp@storage

Method for changing the password:

  1. Log in to DeviceManager.
  2. Choose Settings > Storage Settings.
  3. In the navigation tree, choose File Storage Service > NDMP Settings.
  4. Click Modify next to Password.
  5. In New Password, Confirm Password, and Old Password, enter related information as prompted.
  6. Click OK.

Built-in SystemReporter user

Super administrator

Used to log in to OceanStor SystemReporter

admin

Admin@storage

For details about how to change a password, see the SystemReporter user guide of the corresponding product version.

a: You are advised to change the default login password immediately after you log in to the storage system for the first time and to periodically change your login password in the future. This reduces password leakage risks.

(Optional) Table 2-14 shows the management accounts and password policies supported by Thales keyAuthority, and Table 2-15 shows those supported by SafeNet KeySecure.

Table 2-14 Management accounts and password policies

User Level

Usage

Default User Name

Default Password

Password Changing Methoda

Administrator

This user is responsible for configuring the system network, adding or deleting users, enabling the maintenance mode, shutting down the system, and restoring the system to factory settings.

admin

password123

Method for changing the password:

  1. Log in to the web management page as the user whose password you want to change.
  2. Click the Users tab.
  3. Find the name of the user that has logged in and click next to it.
  4. In Old Password, enter the current password. In New Password and Confirm Password, enter the new password. Click Change Password.

The password is changed.

NOTE:

The new password cannot be the same as any of the previous ten passwords.

A password must meet the following requirements:

  • The password is 8 to 32 characters in length and must contain at least two of the following character types: letters, digits, and special characters.
  • At least 60% of characters are unique (not repeated elsewhere in the password).

For details about how to modify a password, see the OceanStor V5 Series V500R007 Disk Encryption User Guide.

Security Officer

This user is responsible for allocating user roles and permissions, creating and maintaining system keys, backing up system data, erasing and initializing Smart Card on the console end, managing domains and KMIP groups, generating and maintaining CA and SSL certificates, and maintaining system licenses.

NOTE:

Operations, including resetting user passwords and enabling the maintenance mode, must be completed under the cooperation of Administrator and Security Officer. One of them applies for an operation, and the other approves it. Neither role can complete such operations alone.

officer

Recovery Officer

This user is responsible for exporting and restoring the backup of system keys, as well as restoring system data.

  • recovery1
  • recovery2

Auditor

This user is responsible for auditing all operation logs of all users. You are advised to allocate this role to maintenance personnel.

auditor

Group Manager

This user is responsible for managing KMIP and P1619 clients that save AKs for self-encrypting disks.

username

Random password

NOTE:
  • This user is not created by default. It is an unassigned user manually created after domains and groups are created.
  • When this user is created, a random password for this user is generated on the web page of the key management server. Record this password and keep it safe.

a: You are advised to change the default login password immediately after you log in to the storage system for the first time and to periodically change your login password in the future. This reduces password leakage risks.

Table 2-15 Management accounts and password policies

User Level

Usage

Default User Name

Default Password

Password Changing Methoda

High Access Administrator

This user has complete control permissions over SafeNet KeySecure and can create and delete users, modify passwords, as well as allocate and revoke access permissions.

admin

Method for changing the password:

  1. Log in to the web management page of the key management server.
  2. Choose Device > Administrators > Password Management.
  3. In the Change Your Password area, enter the current password and new password (twice) and click Change Password.
  4. Log in using the new password.
NOTE:

The administrator needs to create a password when creating a user.

A password must meet the following requirements:

  • Contains a maximum of 256 characters.
  • Contains at least five different characters.
  • Cannot contain *, <, or tabs.
  • Cannot consist of phone numbers or words.
  • Cannot contain consecutive characters, such as 12, 21, ab, and ba.

For details about how to modify a password, see the OceanStor V5 Series V500R007 Disk Encryption User Guide.

Local user

This user is used to connect the storage system and the key management server.

-

NOTE:

The user name must be the same as the OU field on the certificate exported from DeviceManager. The default value is Storage.

-

a: You are advised to change the default login password immediately after you log in to the storage system for the first time and to periodically change your login password in the future. This reduces password leakage risks.

(Optional) Table 2-16 shows the management accounts and password policies supported by a quorum server.

Table 2-16 Management accounts and password policies

User Level

Usage

Default User Name

Default Password

Password Changing Methoda

Administrator of the quorum server

Default account of the quorum server

quorumAdmin

Huawei@SYS3

Run the passwd quorumAdmin command.

Basic Input/Output System (BIOS) super administrator

Used to perform operations on BIOS that provides hardware setting and control functions

None

  • The default BIOS password is Huawei12#$ for the American keyboard.
  • The default BIOS password is Huqzei&é34 for the French keyboard.
  • The default BIOS password is Huawei12£$ for the English keyboard.

For details about how to change a password, see OceanStor V5 Series V500R007 Security Configuration Guide. Contact Huawei technical support to obtain related documents.

Intelligent Baseboard Management Controller (iBMC) super administrator

Used to access all iBMC resources and perform all operations

root

Huawei12#$

For details about how to change a password, see OceanStor V5 Series V500R007 Security Configuration Guide. Contact Huawei technical support to obtain the document.

Super administrator

Used to start, stop, and run core processes that require the root permission in the operating system

root

Huawei@SYS3

Run the passwd root command.

a: You are advised to change the default login password immediately after you log in to the storage system for the first time and to periodically change your login password in the future. This reduces password leakage risks.

Translation
Download
Updated: 2019-07-11

Document ID: EDOC1000181531

Views: 92581

Downloads: 855

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next