Enable Enhanced Secure Mode

높음레벨 1수동 검토aruba-cx

설명

This sequence describes enabling enhanced secure mode

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Run 'show secure-mode'. Compliant output is 'Enhanced secure mode is set'; 'Standard secure mode is set' means enhanced secure mode has not been enabled (enabling it zeroizes the switch, so plan it from the serial console).

조치 방법

조치 방식: 가이드 또는 인프라 패치

boot system serviceos One time boot to ServiceOS initiated. Checking if the configuration needs to be saved... This will reboot the system to ServiceOS and render the entire switch unavailable. Access to ServiceOS is only available through the serial console. Continue (y/n)? y Default boot image set to serviceos. The system is going down for reboot. ... ServiceOS login: admin secure-mode enhanced ############################WARNING############################ This will set the switch into enhanced secure mode. Before enhanced secure mode is enabled, the switch must securely erase all customer data and reset the switch to factory defaults. This will initiate a reboot and render the switch unavailable until the zeroization is complete. ############################WARNING############################ Continue (y/n)? y reboot: Restarting system ... 6300 login: admin Password: Please configure the 'admin' user account password. Enter new password: ***** Confirm new password: ***** show secure-mode Enhanced secure mode is set

속성

운영 체제: 모두
태그: aruba-cxhardening
참고 자료: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.1.5 Enable Enhanced Secure Mode