Dell SmartFabric OS10 and SmartFabric Services Security Configuration Guide June 2023

Preloaded accounts

The following accounts are initialized during the installation of SmartFabric OS10:

• Sysadmin account: admin
• Linux shell user: linuxadmin

Default credentials

The following are the default credentials for the preloaded accounts.

Managing credentials

Change the default CLI password

When you log in to the switch for the first time, the system prompts you to enter a username to enter the command-line interface. To log in to OS10 for the first time, enter admin as the username and the password. Change the default admin password after your first login to something secure or create at least one OS10 user with the sysadmin role and delete the default admin username. The system saves the new password for future logins. After you change the password using the CLI, use the write memory command to save the configuration.

OS10# configure terminal
% Error: ZTD is in progress(configuration is locked).
OS10# ztd cancel
OS10# configure terminal
OS10(config)# username admin password new-password role sysadmin
OS10(config)# exit
OS10# write memory

To delete the default admin username, log in to a different account with the sysadmin role, and do the following:

OS10(config)# no username admin

Use the following command to view the details of all users configured on the system:

OS10# show running-configuration users

Change the default linuxadmin password

You use the Linux shell for troubleshooting and diagnostic purposes. After the first OS10 login, enter linuxadmin for both the default Linux shell username and password and change the default linuxadmin password. The system saves the new password for future logins. After you change the password using the CLI, use the write memory command to save the configuration.

OS10# configure terminal
OS10(config)# system-user linuxadmin password {clear-text-password | hashed-password}
OS10(config)# exit
OS10# write memory

Disable the linuxadmin account

If you do not want your users to access the Linux shell, disable the linuxadmin account.

OS10(config)# system-user linuxadmin disable
OS10(config)# exit
OS10# write memory

Disable access to Linux commands

Even if you disable the linuxadmin user, users can access Linux commands using the system command. To disable access to Linux commands completely, use the system-cli command.

OS10(config)# system-cli disable
OS10(config)# exit
OS10# write memory

Securing credentials

When the user views the running configuration, the password is displayed in an encrypted format. You can obscure passwords in show command outputs so that text characters do not display.

OS10(config)# service obscure-password
OS10(config)# exit
OS10# write memory
OS10# show running-configuration users
username admin password **** role sysadmin priv-lvl 15
username desk1 password **** role sysadmin priv-lvl 15

Password complexity

Strict password rules ensure better security of the device.

Enable strong passwords

Strong passwords make it difficult to guess your passwords. By default, a strong password check is enabled on the system which checks if the password contains at least alphanumeric and special characters. If a strong password check is disabled, enable it.

OS10(config)# no service simple-password
OS10(config)# exit
OS10# write memory

Check if strong password check is enabled

By default, a strong password check is enabled on the system and the no service simple-password command is implicit in the running configuration. To verify if a strong password check is enabled, use the following command:

OS10(config)# do show running-configuration | grep simple
service simple-password

Enforce custom password complexity

By default, the password you configure must have at least nine characters with alphanumeric and special characters. To increase the password strength further, you can enforce a custom password complexity.

OS10(config)# password-attributes {[min-length number] [character-restriction {[upper number] [lower number][numeric number] [special-char number]}}
OS10(config)# exit
OS10# write memory

• min-length number—(Optional) Sets the minimum number of required alphanumeric characters, from 6 to 32; default 9.
• character-restriction:
  • upper number—(Optional) Sets the minimum number of uppercase characters that are required, from 0 to 31; default 0.
  • lower number—(Optional) Sets the minimum number of lowercase characters that are required, from 0 to 31; default 0.
  • numeric number—(Optional) Sets the minimum number of numeric characters that are required, from 0 to 31; default 0.
  • special-char number—(Optional) Sets the minimum number of special characters that are required, from 0 to 31; default 0.

When choosing your password, Dell Technologies recommends that you use multiple and easy-to-remember common words in your password instead of using complex passwords which you may not remember. Combine multiple words that you can remember and modify the passphrase using special characters and numbers to get a final password. For example, instead of correcthorsebatterystaple, you can use C0rr3c+h0r5e8atTerystapl3.