Managing system users and groups 215Table 47Managing user accounts and passwords (cont’d.)/cfg/sys/userfollowed by:add Adds a user account to the system. The maximumlength of the user name is 255 characters. No spacesare allowed.After adding a user account, you must also assign theuser account to a group (see “Managing user groups”(page 217)).You must have administrator rights in order to add useraccounts.edit Accesses the User menu, in orderchange user settings (see “Managing user settings”(page 216)).You must have administrator rights in order to changea user’s settings. You must also be a member of thefirst group listed for the other user.caphrase Sets the certificate administrator’s passphrase forencrypted private keys in a configuration backup, if thecertificate administrator role has been separated fromthe administrator role.If the admin user is a member of the certadmin group(the default setting), the admin user is prompted foran export passphrase to protect the private keys inthe configuration dump each time the /cfg/ptcfgcommand is used.Set a certificate administrator export passphraseonly if the admin user has removed himself or herselffrom the certadmin group and added a certificateadministrator user with certadmin group rights.When a configuration backup is performed usingthe /cfg/ptcfg command, the certadmin exportpassphrase is automatically used (without promptingthe user) to protect the encrypted private keys. Whenthe /cfg/gtcfg command is used to restore aconfiguration backup from a file exchange server, theuser is prompted for the correct certadmin passphrase,as defined using the caphrase command.Nortel Secure Network Access SwitchUsing the Command Line InterfaceNN47230-100 03.01 Standard28 July 2008Copyright © 2007, 2008 Nortel Networks.