Install Guide

After enabling and configuring startup configuration verification, the device verifies the hash checksum of the startup
configuration during every reload.
DellEMC# verified boot hash startup—config 619A8C1B7A2BC9692A221E2151B9DA9E
Configuring the root User Password
For added security, you can change the root user password.
If you configure the secure-cli command on the system, the Dell EMC Networking OS resets any previously-configured
root access password without displaying any warning message. With the secure-cli command enabled on the system, the
CONFIGURATION mode does not display the root access password option.
To change the default root user password, follow these steps:
● Change the default root user password.
CONFIGURATION mode
root-access password [encryption-type] root-password
Enter an encryption type for the root password.
○ 0 directs the system to store the password as clear text.
○ 7 directs the system to store the password with a dynamic salt.
○ 9 directs the system to encrypt the clear text password and store the encrypted password in an inaccessible location.
When you configure the root access password, ensure that your password meets the following criteria:
○ A minimum of eight characters in length
○ A minimum of one lower case letter (a to z)
○ A minimum of one upper case letter (A to Z)
○ A minimum of one numeric character (0 to 9)
○ A minimum of one special character including a space (" !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~")
DellEMC)# show running-config | g root
root-access password 7 f4dc0cb9787722dd1084d17f417f164cc7f730d4f03d4f0215294cbd899614e3
Locking Access to GRUB Interface
You can configure the Dell EMC Networking OS to lock the GRUB interface using a password. If you configure a GRUB
password, the system prompts for the password when you try to access the GRUB interface.
CAUTION:
After configuring the boot access password, save it to a secure location. If you forget it, you will not
be able to access the options in the startup menu. If you forget both the boot access password and the enable
password, the system may become inaccessible.
To lock the GRUB interface using a password, use the following procedure:
● Configure a GRUB password.
CONFIGURATION mode
boot-access password [encryption-type] boot-password
Enter an encryption type for the boot password.
○ 0 directs the system to store the password as clear text.
○ 7 directs the system to store the password with a dynamic salt.
When you configure the root access password, ensure that your password meets the following criteria:
○ A minimum of eight characters in length
○ A minimum of one lower case letter (a to z)
○ A minimum of one upper case letter (A to Z)
○ A minimum of one numeric character (0 to 9)
○ A minimum of one special character including a space (" !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~")
Security
831