To support STIG compliance, Address Manager and DNS/DHCP Servers support
vlock
for the root shell. vlock
allows users to
lock one or more sessions on the console, retaining the user session lock until the user
re-authenticates.
To lock a root shell user session (for example, the bluecat account accessing the root
shell) on the Address Manager or DNS/DHCP Server console, simply enter the command
vlock
to lock the current session. To resume the session, follow
the console prompts to enter the password and re-authenticate.
Note: To lock all console sessions and disable VC switching, use the command
vlock -a
. Exercise caution if using this option, as a failure to
remember the password will require a hard reset to bypass the lock.