Oracle Cloud Infrastructure Documentation

Managing Serial Console Sign-In Attempts

By default, serial console sign-in attempts is set to 10. If an incorrect password is entered 11 times, the unlock key is shredded, preventing any further access to the serial console menu. You can change the number of incorrect password attempts that are allowed on the device.

When you attempt to sign in and provide an incorrect password, a message similar to the following is displayed:
Enter the passphrase to unlock the screen: ****
*** 1 failed attempt out of 4 allowed attempts. Once failed attempt reach 4, data access will be lost. ***
Error: The passphrase is incorrect!
If you reach your final attempt before you exceed the number of attempts allowed, a message similar to the following appears:
*** Next failed attempt will shred the unlock key and data access to this device will be lost. Used 3 attempts out 4 allowed attempts. ***
Error: The passphrase is incorrect!
Note

If the device unlock key is shredded, you can recover the device using the recover key. See Managing Roving Edge Infrastructure Device Master Keys.

  1. Using terminal emulation to display the serial console, select the Advanced Menu > Network Management menu option. The following option appears:

    No. of attempts before key is shredded (Default:10)

  2. Select this option. The following option appears:

    Enter number of unlock attempt allowed (between 3 and 100)

  3. Enter the number of attempts the user can try to unlock the device before they are prevented from any further tries. The number of attempts can be between 3 and 100. If you don't provide a value, the default number 10 is used.
Note

You can test this feature after specifying the number by waiting for the screen timeout (900 seconds) to occur and the screen becomes locked. Try logging in using an incorrect password and view the result. Make sure you don't exceed your number of tries allowed, or you will lose your passphrase.