Disabling Password Recovery Capability - HP 10500 Series Configuration Manual

Disabling password recovery capability

Password recovery capability controls console user access to the device configuration and SDRAM from
BootWare menus. This feature also decides the method for handling console login password loss
(see Figure 55).
If password recovery capability is enabled, a console user can access the device configuration without
authentication to configure new passwords.
If password recovery capability is disabled, console users must restore the factory-default configuration
before they can configure new passwords. Restoring the factory-default configuration deletes the
next-startup configuration files.
To enhance system security, disable password recovery capability.
Figure 55 Handling console login password loss
Skip Current System
Configuration
Table 40 summarizes options whose availability depends on the password recovery capability setting.
Table 40 BootWare options and password recovery capability compatibility matrix
BootWare menu
option
Download Image
Program To SDRAM And
Run
Download Files(*.*)
Skip Authentication for
Console Login
Console login password lost
Reboot the switch to access
EXTENDED-BOOTWARE menu
Yes
Password recovery
capability enabled?
Skip Authentication
for Console Login
Reboot the switch
Configure new passwords
in system view
Save the running configuration
Password Password
recovery recovery
enabled disabled
Yes No
Yes No
Yes No
285
No
Restore to Factory Default
Tasks that can be performed
Load and run Comware software images in
SDRAM.
Download a file to the current storage medium.
Enable console login without authentication.
This is a one-time operation and takes effect only
for the first system boot or reboot after you choose
this option.
Configuration