Users Guide

Bootloader protection
To prevent unauthorised users with malicious intent from accessing your switch, protect the bootloader using a GRUB password. OS10
allows you to enable, disable, and view bootloader protection.
This feature is available only for the sysadmin and secadmin roles.
WARNING: When you enable bootloader protection, keep a copy of a congured user name and password. You cannot access
the switch without congured credentials.
• Enable bootloader protection in EXEC mode. Use the boot protect enable command to congure a username and password.
You can congure up to three users per switch.
OS10# boot protect enable username root password calvin
Disable disable bootloader protection for a specied user by using the boot protect disable command.
Enable bootloader protection
OS10# boot protect enable username root password calvin
Disable bootloader protection
OS10# boot protect disable username root
Display bootloader protectection
OS10# show boot protect
Boot protection enabled
Authorized users: root linuxadmin admin
Linuxadmin user conguration
OS10 supports two factory-default users: admin and linuxadmin. Use the admin user name to log in to the command-line interface.
Use the
linuxadmin user name to access the Linux shell.
To manage the default linuxadmin user from the CLI, you can:
• Congure a lost or forgotten linuxadmin password.
• Disable the linuxadmin user.
NOTE
: These tasks allow you to manage only the default linuxadmin user, not other Linux users created at the root level.
Congure linuxadmin password from CLI
To congure a password for the linuxadmin user, use the system-user linuxadmin password {clear-text-password |
hashed-password} command in CONFIGURATION mode. Save the new password using the write memory command. For example:
OS10(config)# system-user linuxadmin password Dell@admin10!@
OS10(config)# exit
OS10# write memory
OS10(config)# system-user linuxadmin password $6$3M55wOYy
$Sw1V9Ok3GE4Hmf6h1ARH.dBHy9gpEFYUvdu15ZpnCYzt.nJjFm0VIz/rQvvJeX6krRtfYs2ZqBl6TkmLGAwtM
OS10(config)# exit
OS10# write memory
The linuxadmin password congured from the CLI takes precedence across reboots over the password congured from the Linux shell.
Verify the linuxadmin password using the show running-configuration command.
OS10# show running-configuration
system-user linuxadmin password
934
Security