18 Using the CLIFILE LOCATION: C:\Users\gina\Desktop\Checkout_new\Maintenance Projects\DellPlasma\GSG\Plasma_UGUsing_CLI.fmD E L L C O N F I D E N T I A L – P R E L I M I N A R Y 3 / 6 / 1 3 - F O R P R O O F O N LYSecurity Management and PasswordConfigurationSystem security is handled through the Authentication, Authorization, andAccounting (AAA) mechanism that manages user access rights, privileges,and management methods. AAA uses both local and remote user databases.Data encryption is handled through the SSH mechanism.Passwords can be configured for the following services:• Terminal• Telnet• SSH• HTTP• HTTPSNOTE: When creating a user name, the default priority is 14, which providesaccess but not configuration rights. A priority of 15 must be set to enable accessand configuration rights to the device. Although user names can be assignedprivilege level 15 without a password, it is recommended to always assign apassword. If there is no specified password, privileged users can access the Webinterface with any password.NOTE: Passwords can be secured by using password management commands toforce aging out of passwords, or expiration of passwords. For more information, see"Management Security" on page 134.Initial Configuration and Password RecoveryThe system is delivered with a default username/password (root/calvin). If auser-defined password is lost, a password recovery procedure can be invokedfrom the Startup menu. This procedure is applicable for the local terminalonly and enables a single access to the device from the local terminal with nopassword entered.The full mode of password recovery mechanism can be enabled/disabledthrough the CLI (service password-recovery command).This affects password recovery in the following way:• Enabled: When the password-recovery mechanism is invoked, one-timeaccess to the device without a password is enabled and all configurationand user files are retained.