The following security commands are available to manage remote service access settings: 

## GLYPH<SM590000> chaccess 

Use the chaccess  command to change the following settings of an HMC: 

– Enable and disable the command-line shell access to the HMC. 

– Enable and disable the WUI access on the HMC. 

– Enable and disable Assist On-site (AOS) or Remote Support Center (rsc) access to the HMC. 

## Important: 

GLYPH<SM590000> This command affects service access only and does not change access to the system by using the DS CLI or DS Storage Manager. 

GLYPH<SM590000> Only users with administrator authority can access this command. 

## GLYPH<SM590000> lsaccess 

The lsaccess  command displays the access settings of an HMC. If you add the  -l parameter, the command also displays the AOS or rsc status. If AOS or rsc is active, an AOS or rsc connection will show as enabled. An AOS or rsc connection is only used for remote support purposes. See Example 12-77. 

dscli> lsaccess -l hmc cmdline wui modem cim aos rsc vpn ============================================================ hmc1 enabled enabled - enabled enabled enabled disabled hmc2 enabled enabled - enabled enabled disabled disabled 

The following commands were added in Release 8.2 to enable TLS protocol for secure syslog traffic. TLS must be enabled before configuring all syslog servers. If you specify TLS, all Syslog servers configurations use the same protocol and certificates. 

## GLYPH<SM590000> mksyslogserver 

Example 12-78 shows the new DS CLI command, mksyslogserver, for configuring syslogserver with TLS enabled. The CA Certificate, HMC Certificate, and HMC private key locations are required when configuring the first syslogserver. 

dscli> mksyslogserver -addr 9.100.10.7 -protocol tls -cacert /Users/heping/ut/syslog/ca.pem -hmccert /Users/heping/ut/syslog/cert.pem -key /Users/heping/ut/syslog/key.pem test CMUC00508I mksyslogserver: The syslog server machine.example.net has been created. 

## GLYPH<SM590000> lssyslogserver -l 

The lssyslogserver -l displays the list of all Syslog servers and their attributes. See Example 12-79. 

dscli> lssyslogserver -l name IP address port state access protocol type HMC ====================================================================== daisy 9.10.100.127 514 active online tls audit,message,event 1 daisy 9.10.100.127 514 active online tls audit,message,event 2 

