Password administration

Edit online

You can use the setup_<type>.sh script or the fcmcli -f password command to change the IBM® Storage Protect Snapshot passwords.

The fcmcli -f password command supports an interactive and a non-interactive mode. To use the interactive mode, do not enter a password when you issue the command and you are prompted to enter the following passwords:
  • The master password, which is the password of the acsd management agent. By default, a 32 character password is automatically generated. However, you can enter an alternative password.
  • The password for the ORACLE section if defined in the specified profile.
  • The passwords for the disk storage subsystems that are referenced by the DEVICE_CLASS sections in the specified profile.

    If the specified profile contains multiple DEVICE_CLASS sections that reference the same physical disk storage subsystem, the password is queried one time by combining these DEVICE_CLASS sections.

The interactive mode is the preferred method for setting passwords. Using this method, the passwords are verified by testing the connections to the corresponding storage devices, management agent, or database. For the non-interactive mode, the command syntax is verified but no additional validations are performed.

Note: The minimum length of the master password is 8 characters. The password must contain at least one number and one letter. The use of special symbols increases the strength of the password.
Tip: To ensure that backup servers are also updated by SSH if applicable, use the setup scripts to modify any passwords.

Use the following syntax to change the passwords for intercommunication between IBM Storage Protect Snapshot components, and communication to Oracle databases and to storage devices.

Figure 1. fcmcli command: -f password

1  fcmcli  -f password
1     -p profile
2.1 + , section : password
2.1 :master-password
1    -b password-file + , section : password  master-password

Parameters

-p profile
Specify the full path and name of the profile that is used. If the path is not specified, the profile file in the current working path is used.

In interactive mode, the command searches the profile for the ORACLE, and DEVICE_CLASS sections and then requests you to enter the relevant passwords.

-b password-file
Specify the password file to be created or updated. By default, the shared/acsd.pwd password file is in the directory that is specified by the ACS_DIR parameter. This parameter is included in the GLOBAL section of the profile file. This information is read from one of the following profiles:
  • When the -p option is not specified, the profile file in the current working directory is used.
  • When the -p option is specified, the profile file that is specified by this option is used.
sectionname:password
Specify the password for the user account that is referenced by the ORACLE, and DEVICE_CLASS sections of the profile. To specify the password for the DEVICE_CLASS section, replace the sectionname variable with the DEVICE_CLASS:device class name variable for example, DEVICE_CLASS:STANDARD. Use this syntax when you specify the password: DEVICE_CLASS:device class name:password.

No spaces are allowed between the sectionname:password syntax.

:masterpassword
Specify the master password that is used to authenticate a library or agent to the acsd management agent. Alternatively, enter the value auto to enable IBM Storage Protect Snapshot to auto-generate a password. For example, issue the following command to auto-generate the master password: 
 ./fcmcli -f password :auto