nsx_60_cli

2
Securing CLI User Accounts 2
Each NSX virtual appliance comes with a default user account and password.
NOTE User account management in the CLI is separate from user account management in the NSX Manager
user interface.
This chapter includes the following topics:
• “CLI User Account Management” on page 15
• “Hardening the CLI of an NSX Virtual Appliance” on page 15
• “Add a CLI User Account” on page 16
• “Delete the admin User Account from the CLI” on page 17
CLI User Account Management
You must manage CLI user accounts separately on each NSX virtual appliance. By default, you use the admin
user account to log in to the CLI of each NSX virtual appliance.
The Privileged mode password is managed separately from the admin user account password. The default
Privileged mode password is the same for each CLI user account.
IMPORTANT Each NSX virtual appliance has a built‐in CLI user account (nobody) for system use. Do not delete
or modify this account. If this account is deleted or modified, the virtual machine will not work.
You can create new CLI user accounts. Each created user account has administrator‐level access to the CLI.
Hardening the CLI of an NSX Virtual Appliance
To harden access to the CLI of an NSX virtual appliance, you must change the admin user account and
Privileged mode passwords after initial login.
Change the admin User Account Password
To change the admin user account password
1 Log in to the vSphere Client and select an NSX virtual appliance from the inventory.
2 Click the Console tab to open a CLI session.
3 Log in to the CLI and switch to Privileged mode.
manager> enable
password:
manager#
4 Switch to Configuration mode.
VMware, Inc. 15