Oracle^® OpenBoot 4.x Administration Guide

Set the security-mode Variable

The security-mode variable can restrict the set of operations that users are allowed to perform from the OpenBoot CLI.

1. Access the OpenBoot CLI.

   See Accessing the OpenBoot CLI and Getting Help.

2. Set the OpenBoot password before setting the security-mode variable.

   See Set Up the Security Password.

3. At the OpenBoot prompt, type:

   {0} ok setenv security-mode name

   Where name is one of the three security mode values that are listed in this table (from most to least secure).

   For business continuity reasons, consider setting the security-mode parameter to command.

   Name Description full A password is required to perform any action, including the boot and go commands. command Applies these policies: A password is not required if you type the boot command by itself or the go command. However, if you use the boot command with an argument, a password is required. A password is required to execute any other command. none No password is required (default).

4. Obtain the security mode prompt.

   After setting the security mode, there are two ways to obtain the security mode prompt.

   • Use the logout and login words.

     {0} ok logout
     Type boot , go (continue), or login (command mode)
     >
     > login
     Firmware Password: password
     Type help for more information
     {0} ok

     To exit the security mode, use the logout and login names, as shown in the example.

   • Use the reset-all command.

     {0} ok reset-all

     This command resets the virtual machine. When the virtual machine comes back up, OpenBoot goes to the security mode prompt. To log back in to the command prompt (or log out of the security mode), use the logout and login names, and then enter the password, as described above.

Related Information

• Set Up the Security Password

• Disable the security-mode Variable

• Check for Failed Log-Ins

• Configure OpenBoot Keys on an Installation Client