Storage system accounts with HPE 3PAR OS 3.3.1 and 3.2.2 for service and upgrade
Account PW options Interface access Permissions
3paradm Static password
Administrator sets/changes
through the Administrator
console
• Main console
• Administrator console
• Interactive CLI
• Only the administrator
• Create new CLI user
accounts
• Service and diagnostic
functions
• Super rights
console Time-based or encrypted-
based password
• Administrator sets the
password option through
CLI commands
• For encrypted-based
password, administrator
retrieves/exports the
ciphertext (blob) through
CLI commands
• Main console
• Administrator console
• Only HPE Support and
authorized service providers
• Service and diagnostic
functions
root Time-based or encrypted-
based password
• Administrator sets the
password option through
CLI commands
• For encrypted-based
password, administrator
retrieves/exports the
ciphertext (blob) through
CLI commands
Linux Shell on the storage
system
• Only HPE Support and
authorized service providers
• Service and diagnostic
functions
Setting time-based or encryption-based password option for a storage system account
Procedure
1. Connect and log in to the HPE 3PAR Service Processor (SP) and access the interactive CLI interface.
2. Query the current mode by using the HPE 3PAR CLI controlrecoveryauth status command.
3. To change the mode, use the controlrecoveryauth setmethod <totp|ciphertext>
command, where <totp|ciphertext> is either totp or ciphertext.
Generating the encryption-based ciphertext for a storage system account
In advance or at the time of a support session, the administrator can generate the ciphertext (blob) and
provide it to Hewlett Packard Enterprise Support to be deciphered. Before or upon arriving at the site, the
50 Setting time-based or encryption-based password option for a storage system account