Manually locking a superuser account

The system allows to lock or disable the superuser account by using both the management GUI and the command-line interface.

Note: Superuser locking must be enabled before the system-wide automatic locking settings are applied to the superuser account.

Using the management GUI

To lock or disable the superuser account using the management GUI, complete the following steps:
  1. Log into the management GUI as a user with the Security Administrator role.
  2. Select Settings > Security > Password Policies.
  3. Select Password expiration and account lockout and then select Allow locking of the superuser account.
  4. Click Save to enable superuser locking.
  5. Select Access > Users by Group.
  6. Right-click the superuser account under All Users.
  7. Click Lock to manually lock the superuser account.

Using the command-line interface

To lock or disable the superuser account by using the command-line interface (CLI), complete the following steps:
  1. Log in to the CLI as a user with the Security Administrator role.
  2. To enable superuser locking, run the following command:
    svctask chsecurity -superuserlocking enable
  3. To manually lock the superuser account, run the following command:
    svctask chuser -lock superuser