Is Your e3000 Environment Secure? - by Mark Bixby

Is Your e3000 Environment Secure? - HPWorld 2003 page 40August 14, 2003
Unencrypted passwords in the
system directory
§Passwords are stored in the system directory as
cleartext by default
§:STORE ;DIRECTORY copies these cleartext
passwords to your backup, so control who has access
to your backups
§OP users can do :STORE ;DIRECTORY, so control
who has access to OP capability
§Purchase HP Security Monitor/iX and enable encrypted
passwords
– one-way encryption is used, so not even SM users can
reveal passwords