IBM Security Identity Governance and Intelligence, Version 5.2.3.1

IBM Security Identity Governance and Intelligence virtual appliance current mode commands

The IBM® Security Identity Governance and Intelligence virtual appliance CLI commands are broadly divided into the two sections such as current mode commands and global commands. The topic provides information about the IBM Security Identity Governance and Intelligence virtual appliance current mode commands for the following functions.

The following list gives a high-level overview of the functions available from the command line interface.

cli

The function works with the command line interface.

ssh_timeout: Includes an option to view the current timeout value for the local SSH session and an option to set a new value in minutes.

fips

The function shows FIPS 140-2 state and events. The function is available only if the virtual appliance is configured in FIPS mode.

status

Replies if FIPS mode is enabled and if there are any errors.

If there are no errors, the reply is:

igiva.example.com>fips status
FIPS 140-2 Status:OK
Appliance has enabled FIPS mode successfully.
igiva.example.com>

If there are errors, the reply is:

igiva.example.com>fips status
FIPS 140-2 Status:Error
Appliance has entered FIPS error state.
igiva.example.com>

view_log

Displays the FIPS log in the console.

firmware

The function provides options to work with the firmware images.

backup: Backs up firmware on the active partition to the inactive partition.
get_comment: Shows the comment that is associated with a firmware image.
get_info: Shows the version information that is associated with a firmware image.
list: Lists information about the installed firmware images. Firmware information includes the active firmware image, a description of the firmware, the date the firmware was installed and optional backup information.
set_comment: Replaces the comment that is associated with a firmware image.
swap_active: Swaps the active firmware image. The appliance restarts the system with the inactive firmware image.

fixpacks

The function works with fix packs. The corresponding task can be completed by using the graphical user interface. Go to Manage > Updates and Licensing > Fix Packs.

install: Installs the available fix packs on the inserted USB device.
list: Lists the available fix packs on the inserted USB device.
rollback: Uninstalls the most recently installed fix pack.
view_history: Shows the installation history for all fix packs.

igi

The function manages IBM Security Identity Governance and Intelligence settings.

jvm_property: Provides options to work with the application server JVM properties.
logs: Provides options to work with the IBM Security Identity Governance and Intelligence log files.
upgrade: Provides options to work with IBM Security Identity Governance and Intelligence firmware updates.
utilities: Provides options to work with IBM Security Identity Governance and Intelligence utilities.

license

The function provides options to work with the licenses.

install: Installs a license file from an inserted USB device.
list: Lists the available license files on the inserted USB device.
show: Displays the current active license information.

lmi

The function provides options to work with the local management interface.

reset_lmi_cert

Restarts the server certificate for the local management interface to a self-signed certificate.

restart

Restarts the local management interface.

security

The function provides options to work with security settings for the local management interface.

clear_cipher_suites: Clears all the enabled security cipher suites for the local management interface.
reset_all: Resets the security protocol and security cipher suites to the default value for the local management interface.

trace

Provides options to work with the trace settings for the local management interface.

management

dns: Provides options to work with the virtual appliance DNS settings.
hostname: Provides options to work with the virtual appliance host name.
interfaces: Provides options to work with the management interface settings.
set_password: Sets the virtual appliance password.

snapshots

The function provides options to work with the snapshots. The corresponding task can be completed by using the graphical user interface. Go to Manage > System Settings > Snapshots.

Note: You must restart the virtual appliance after you apply the snapshot.

apply: Applies a policy snapshot file to the system.
create: Creates a snapshot of current policy files.
delete: Deletes a policy snapshot file.
download: Downloads a policy snapshot file to a USB flash drive.
get_comment: Shows the comment that is associated with a policy snapshot file.
list: Lists the policy snapshot files.
set_comment: Replaces the comment that is associated with a policy snapshot file.
upload: Uploads a policy snapshot file from a USB flash drive.

support

The function generates the support files. The corresponding task can be completed by using the graphical user interface. Go to Manage > System Settings > Support Files.

create: Creates a support information file.
delete: Deletes a support information file.
download: Downloads a support information file to a USB flash drive.
get_comment: Shows the comment that is associated with a support information file.
list: Lists the support information files.
set_comment: Replaces the comment that is associated with a support information file.

tools

connect: Tests the network connection to a certain port on a specified host.
connections: Displays the network connections for the appliance.
nslookup: Queries internet domain name servers.
ping: Sends an ICMP ECHO_REQUEST to network hosts.
traceroute: Traces a packet from a computer to a remote destination. Shows the required number of hops for a packet that is required to reach the destination and the duration of each hop.

More information can be obtained by entering help on any of the sub-commands.