Siemens SX Series User's Guide download pdf (Page 19)

U41272-J-Z385-3-76 19

Operating concept of the SX servers Notes on security

● Separate server administration and partition administration

Each partition on the SX server can have its own partition administrator. The partition

administrator possesses the rights necessary to switch the partition on and off and

access the partition's hardware console.

For information on setting up a login for a partition administrator, refer to section “User

groups and logins” on page 44. This login is a member of the clmon group and a partition

administrator group that you will need to create.

● Administration of operating systems in partitions without partition administration rights

If necessary for the purposes of operating system administration and operation, it is

possible to create logins which do not possess any extended rights for the adminis-

tration of the server or the partitions. These logins should be members of the clmon

group in order to ensure that the SCS read access functions are available at the

partition's hardware console. For more information, see section “User groups and

logins” on page 44.

The following logins have already been created as supplied to manage the server

on the SMC:

– A server administrator login sxadmin

– A partition administrator login bs2admin for the BS2000 partition

– A partition administrator login soladmin for any Solaris partitions present

It is recommended that you use these logins to administer the server.

2.4.5 Security when accessing BS2000 operation functions

The following protective mechanisms can be set up when configuring BS2000 console

access:

BS2000 operation is performed via a login in X2000 for which a separate password is

required. This password must be subject to the usual password maintenance rules. The

logins from cons0 to cons7 are provided as default for this purpose. The administrator

defines any additional logins via PRIMEPOWER ServerView.

Running operator terminals (BS2000 consoles) can be secured via the main KVP function

menu (see the section “The Main KVP Function Menu” on page 164) by locking the inputs

on the BS2000 system. To reset this lock, it is necessary to enter the password. This does

not affect message output.

1 2 ... 14 15 16 17 18 19 20 21 22 23 24 ... 452 453

No comments

Siemens SX Series User's Guide Page 19