10.6 Boot Loader (GRUB) Password
The vRealize Business Standard appliance has the ability to protect the appliance with a password for modification of the default boot settings. GRUB boot loader settings can be viewed and modified in the following configuration file:
/boot/grub/menu.lst
To change or add a password for GRUB, run the following procedure as root:
1. Open a command shell session and start a GRUB shell by entering the command grub. The grub shell will appear.
2. Run the md5crypt command to create the hashed password. After the password is entered, this command returns a hash.
3. Copy the password and enter the quit command to exit the GRUB shell.
4. Edit /boot/grub/menu.lst and add the following entry, where <md5hash> is the hash copied to the clipboard:
password --md5 <md5hash>
5. Save the file and exit.
Design Considerations
• Consider setting a password on the GRUB boot loader so that the vRealize Business Standard appliance cannot be tampered with from the console.
• Store the boot loader password in a secure place as recovering access is a complex process.