PowerProtect DD: How To Set and Change the System Passphrase

sysadmin@datadomain# system passphrase option show min-length
Option       Value
----------   ---------
min-length   (not set)
----------   ---------

Setting the passphrase from the command line (CLI):

sysadmin@datadomain# system passphrase set
Enter new passphrase:
Re-enter new passphrase:
Passphrases matched.
The passphrase is set.

Setting the passphrase from the DD web interface (GUI):

 

Changing the system passphrase

Prerequisites for changing the passphrase:

• An account with security permissions must exist for two-user authentication
• Enable the security authorization policy
• Disable the file system

If there is no security officer:

1. Create a security officer

   sysadmin@datadomain# user add secuser role security
           Enter new password:
           Re-enter new password:
   Passwords matched.
   User "secuser" added.

2. Log in as the security officer and check if the security authorization policy is enabled.

   secuser@datadomain# authorization policy show
   Runtime authorization policy is disabled.

3. Enable the authorization policy if it is disabled.

   secusr@datadomain# authorization policy set security-officer enabled
   Runtime authorization policy has been enabled.

From the CLI:

The file system must be disabled to change the passphrase. The passphrase change fails if the file system is enabled when the command is run.

sysadmin@datadomain# filesys disable

This action will disable the file system.
Applications may experience interruptions
while the file system is disabled.
        Are you sure? (yes|no) [no]: yes

ok, proceeding.

Please wait........
The filesystem is now disabled.
sysadmin@datadomain# system passphrase change
This command requires authorization by a user having a 'security' role.
Please present credentials for such a user below.
        Username: secuser
        Password:
Enter current passphrase:
Enter new passphrase:
Re-enter new passphrase:
Passphrases matched.
The system passphrase has changed
sysadmin@datadomain# filesys enable
Please wait..........
The filesystem is now enabled.

From the GUI:

Select Administration > Access > Administrator Access > Change Passphrase:

 

 

Enter security officer credentials, the current passphrase, and the new passphrase. Check the "Restart file system now" box: