HP 3PAR OS 3.1.3 CLI Administrator's Manual

NOTE: Environment variables can only be used if the CLI is set up remotely. Environment variables
cannot be used if you are accessing the CLI through SSH.
Table 3 Global CLI Options and Environment Variables
Specifies...Environment VariableGlobal Option
that the connection between the client and server
is secure. This is the default setting. For additional
information, see “Using SSL” (page 47).
TPDSOCKSSL–sockssl
the TCP port of the CLI server to which the CLI client
connects. The default SSL port number is 5783 and
the default unsecured port number is 5782.
---tpdportnum <portnum>
the system name of the system you are accessing.
For additional information, see “Setting the
TPDSYSNAME Environment Variable” (page 48).
TPDSYSNAME–sys <system_name>
the encrypted password. This value should be
protected for security purposes. For additional
–––password <encrypw>
information, see “Setting Your Name and Password”
(page 49).
the password file the system references upon starting
the CLI. This value should be protected for security
TPDPWFILE–pwf <password_file>
purposes. For additional information, see “Setting
Your Name and Password” (page 49).
your user name. For additional information, see
“Setting Your Name and Password” (page 49).
–––user <user_name>
Specifying the -user option also requires specifying
the -password option. These options override the
-pwf option.
CAUTION: By setting the system name, user name, and password using environment variables, you are not prompted
for this information when running the CLI, which can be useful for scripting. However, passwords must be kept secure.
Using encrypted passwords in scripts, using an encrypted pwfile, or the encrypted password on the command line
raises the risk of password exposure. It is imperative that the script, pwfile, or command line history file be strictly
maintained to avoid compromise of the encrypted password. Failure to do so can leave the user open to impersonation
by anyone with access to the encrypted string.
that the CLI client should attempt to connect to the
storage server on port 5782, without using SSL.
TPDNOSOCKSSL-nosockssl
This makes the connection insecure, and all data
including authentication data passes in plain text
packets.
the certificate file which is used to validate the
authenticity of the CLI server. The certificate must
TPDCERTFILE-certfile <certfile>
be in a (PEM) Privacy Enhanced Mail format. The
default file is <certdir>/cert. See the -certdir
option.
the directory in which to save the certificate
exception (“excp”) file. When the CLI server
TPDCERTDIR-certdir <certdir>
certificate is not verified by the certificate file (“cert”)
then the CLI looks for the information in the
certificate exception file. If not found then the CLI
prompts the user to accept and save it in this file.
Next time the CLI connects to the same CLI server
without a prompt. The default is $HOME/ .hp3par
on UNIX based systems and
%USERPROFILE%\.hp3par on Windows.
that if set then the common name (CN) in the
certificate subject must match the host name.
TPDCERTHOSTCHECK-certhostcheck
Global Options and Environment Variables 45