Chapter 4 Administering the Sun Crypto Accelerator 4000 Board With the vcaadm andvcadiag Utilities 73
Enabling or Disabling Users
Note – Security officers cannot be disabled. Once a security officeris created, it is
enabled until it is deleted.
By default each user is created in the enabled state. Users may be disabled. Disabled
users cannot access their key material with the PKCS#11 interface. Enabling a
disabled user will restore access to all of that user’s key material.
When enabling or disabling a user,the user name is an optional parameter on the
command line. If the user name is omitted, vcaadm will prompt you for the user
name. Todisable a user account, enter the disable user command.
Toenable an account, enter the enable user command.
vcaadm{vcaN@hostname,sec_officer}> disable user Tom
User Tom disabled.
vcaadm{vcaN@hostname,sec_officer}> disable user
User name: web_admin
User web_admin disabled.
vcaadm{vcaN@hostname,sec_officer}> enable user Tom
User Tom enabled.
vcaadm{vcaN@hostname,sec_officer}> enable user
User name: web_admin
User web_admin enabled.