To set and change System passphrase on Data Domain system

The system passphrase must be set before the system can support data encryption, request digital certificates and to protect against data shredding.

Please note passphrase must *not* be lost once set as it cannot be recovered by Data Domain support.

By default, system passphrase length is not set.

To determine if a minimum length is configured for the passphrase:

sysadmin@pasha# system passphrase option show min-length
Option       Value
----------   ---------
min-length   (not set)
----------   ---------

Setting the system passphrase from Data Domain web interface

To set system passphrase, It is not required to disable filesystem and does not need a security user.

1. Select Administration > Access > Administrator Access > Set Passphrase:



Setting the system passphrase from Data Domain command line interface

sysadmin@pasha# system passphrase set
Enter new passphrase:
Re-enter new passphrase:
Passphrases matched.
The passphrase is set.

Changing the system passphrase

Changing the passphrase requires admin and security user authentication to protect against data shredding.

If an authorised user with security role does not exist , it is not possible to change the passphrase. 

Create a user with role security:

sysadmin@pasha# user add secuser role security
        Enter new password:
        Re-enter new password:
Passwords matched.
User "secuser" added.

Note: Passphrase can be set without security user but it is not advisable. 

Check if the authority policy is enabled for the security user by logging in DD with the security user.
 
secuser@pasha# authorization policy show

Runtime authorization policy is disabled.

If the authorization policy is not enabled then you will need to enabled it for the security user.

secusr@pasha# authorization policy set security-officer enabled.

Runtime authorization policy has been enabled.

The file system must be disabled to change the passphrase. If the file system is running, you are prompted to disable it.

Changing the system passphrase from Data Domain web interface

1. Select Administration > Access > Administrator Access > CHANGE PASSPHRASE:







Changing the system passphrase from Data Domain command line interface

The file system must be disabled to change the passphrase.
If the file system is running,  disable it.

sysadmin@pasha# filesys disable
sysadmin@pasha# system passphrase change
This command requires authorization by a user having a 'security' role.
Please present credentials for such a user below.
        Username: security
        Password:
Enter current passphrase:
Enter new passphrase:
Re-enter new passphrase:
Passphrases matched.
The system passphrase has changed
sysadmin@pasha# filesys enable

 After following the KB if you still face any issue in changing the passphrase, please check with the Technical support.

This content is translated in different languages: 

https://downloads.dell.com/TranslatedPDF/PT-BR_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/ZH-CN_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/ES_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/DE_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/FR_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/IT_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/JA_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/NL_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/KO_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/RU_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/PT_KB535800.pdf

https://downloads.dell.com/TranslatedPDF/SV_KB535800.pdf