Managing lockdown mode at the appliance level
You can manage the appliance lockdown mode from the Flex Appliance Console. You can either enable lockdown mode or disable lockdown mode by opting out of it.
If lockdown mode is enabled on appliance, storage reset is disabled. To reset the storage, the appliance lockdown mode must be disabled after deleting all the WORM instances.
Cohesity strongly recommends that you enable lockdown mode to prevent unauthorized access to the OS, even if you do not plan to create WORM storage instances.
Note:
If you have a multi-node appliance, make sure that all nodes are configured before you enable lockdown mode.
To enforce the lockdown mode
- Sign in to the Flex Appliance Console as a security administrator and click Settings (gear icon) in the upper-right corner of the page. Under Security and compliance, click Lockdown mode.
- On the Edit page, select Enable and click Save.
- The Enable lockdown mode popup appears. Click Enable lockdown mode.
The lockdown mode is updated.
To opt-out of lockdown mode
- Sign in to the Flex Appliance Console as a security administrator and click Settings (gear icon) in the upper-right corner of the page. Under Security and compliance, click Lockdown mode.
- On the Edit page, select Disable and click Save.
- The Opt out of lockdown mode popup appears. The popup will walk you through the liability agreement. Read and accept the liability agreement. Click Next.
- Select the reason for opting out of lockdown mode. You can choose any of the listed options or choose Custom and specify the reason for opting out.
- Click Opt out.