users command

This command displays and configures user accounts, also called user profiles, of the primary CMM.

Important: Users and permission groups for the Flex System Enterprise Chassis are controlled by the CMM in each Flex System Enterprise Chassis, using the CMM CLI users command and the permgroups command or the CMM web interface. If your Flex System configuration includes optional Flex System Manager hardware, users and permission groups for each optional Flex System Manager installation are controlled by the optional Flex System Manager software (see Flex System Manager for information).
Note:
  • Permission groups are viewed and modified using the permgroups command.
  • Users can be backed up as part of the CMM configuration using the write command.
  • Users are restored as part of a backed up CMM configuration using the read command.
  • When the CMM is set to "Secure" security mode, only secure file transfer methods, such as HTTPS and SFTP, can be used for tasks involving file transfer when the CMM is acting as a server. Unsecure file transfer protocols, such as HTTP, FTP, and TFTP, are disabled when the CMM is acting as a server when the security mode is set to "Secure". Unsecure file transfer protocols remain available for a CMM acting as a client for all commands when the security mode is set to "Secure".
  • For information about how to specify a URL for file transfer, see Specifying a URL for file transfer.
  • Before you update the firmware for Power Systems compute nodes using the optional Flex System Manager management software, make sure that the passwords for the Power Systems compute node accounts on the CMM will not expire before the update is complete. If the passwords expire during a code update, the compute nodes might not reconnect to the management software, and each Power Systems compute node might have to be updated with a new password.
  • The user accounts set up in the CMM are used to log in to the service processor interfaces of the compute nodes.

If command syntax is not correctly entered, or if a command fails to run, an error message is returned. See Common errors for a list of error messages that apply to all commands or users command errors for a list of error messages that are specific to the users command.

Table 1. users (CMM users) command.

The command table is a multi-row, four-column table where each row describes a CMM CLI command option: column one lists command function, column two provides a detailed command description, column three shows command-option syntax, and column four lists valid command targets.

Function What it does Command Target (see paths in Command targets)
Display all user profiles Displays all 84 (maximum) CMM user profiles. Returned user values are:
  • User name
  • Permission groups
  • Current number of active sessions
  • Maximum sessions allowed
  • State of account (active or inactive)
  • Password state (expired or not expired)

A list of current user permission groups displays after the list of user profiles.

users
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Display active users Displays all users that are currently logged in to the CMM. Returned values include:
  • User name
  • Session ID
  • Inactive time for each connection
  • User IP address
  • Connection type
users -curr
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Terminate user session Terminates the specified user login session.
Note: The session ID is found by running the users -curr command.
users -ts sessionID

where sessionID is a number that corresponds to the user session ID.

This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Display single user profile Displays the specified CMM user profile. Returned values are:
  • Permission groups
  • Current number of active sessions
  • Maximum sessions allowed
  • State of account (active or inactive)
  • Password state (expired or not expired)
Note: User names are not case sensitive.
users -n user_name

where user_name is a user name assigned in the "Display all user profiles" list.

Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Disable user profile Disables the specified CMM user profile.
Note: User names are not case sensitive.
users -disable -n user_name

where user_name is a user name assigned in the "Display all user profiles" list.

This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Enable user profile Enables a specified CMM user profile that is disabled.
Note: User names are not case sensitive.
users -enable -n user_name

where user_name is a user name assigned in the "Display all user profiles" list.

This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Unlock user profile Unlocks a specified CMM user profile that is locked.
Note: User names are not case sensitive.
users -unlock -n user_name

where user_name is a user name assigned in the "Display all user profiles" list.

This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Delete user profile Delete the specified CMM user profile.
Note: User names are not case sensitive.
users -clear -n user_name

where user_name is a user name assigned in the "Display all user profiles" list.

This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Add user Create the specified CMM user.

The following user-profile fields are required:

  • -n user_name
  • -p user_password
  • -g permission_group
  • -ms max_sessions
Note:
  • User names and group names are not case sensitive.
  • Passwords are case sensitive.
users -add -n user_name -p user_password -g permission_group -ms max_sessions

where:

  • user_name is an alphanumeric string up to 32 characters in length that can include periods ( . ), underscores ( _ ), and hyphens ( - ). Each of the 84 (maximum) user names must be unique. User names are not case sensitive.
  • user_password is an alphanumeric string between 5 and 32 characters in length that can include special characters and must include at least one alphabetic and one numeric character, but no white space. Passwords are case sensitive.
  • permission_group are one or more of the user permission groups listed in the "Display all user profiles" list, separated by a vertical bar ( | ). One default permission group (supervisor or operator), or one or more custom permission groups can be specified. Group names are not case sensitive.
  • max-session is a number from 0 to 20 that sets the maximum number of simultaneous sessions for the user. A value of 0 means that there is no session limit for the user.

(continued on next page)

Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Add user

(continued)

 
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
 
Change user password (own password) Allows a user to change the user password in their own CMM user profile.
Note:
  • Users can change their own password even if they do not have authority to manage accounts. The -op option is only used when changing your own password.
  • User names are not case sensitive.
  • Passwords are case sensitive.
users -n user_name -op old_password -p new_password

where:

  • user_name is your own user name assigned in the "Display all user profiles" list.
  • old_password is your current user password. Passwords are case sensitive.
  • new_password is an alphanumeric string between 5 and 32 characters in length that can include special characters and must include at least one alphabetic and one numeric character, but no white space. Passwords are case sensitive.

Users who do not have authority to manage accounts can change their own password using the -op option.

Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Change user password (other user) Forces a password change in the specified CMM user profile.
Note:
  • User names are not case sensitive.
  • Passwords are case sensitive.
  • Users can change their own password, even if they do not have authority to manage accounts, by specifying the -op option (see the users -op command description for information.
users -n user_name -p new_password

where:

  • user_name is a user name assigned in the "Display all user profiles" list.
  • new_password is an alphanumeric string between 5 and 32 characters in length that can include special characters and must include at least one alphabetic and one numeric character, but no white space. Passwords are case sensitive.
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.

Set user permission groups

Sets the user permission groups in the specified CMM user profile.
Note: User names and group names are not case sensitive.
users -n user_name -g permission_group

where:

  • user_name is a user name assigned in the "Display all user profiles" list.
  • permission_group are one or more of the user permission groups listed in the "Display all user profiles" list, separated by a vertical bar ( | ). One default permission group (supervisor or operator), or one or more custom permission groups can be specified. Group names are not case sensitive.
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Set maximum number of simultaneous sessions for user Sets the maximum number of simultaneous login sessions for the specified user.
Note: User names are not case sensitive.
users -n user_name-ms max-session

where:

  • user_name is a user name assigned in the "Display all user profiles" list.
  • max-session is a number from 0 to 20 that sets the maximum number of simultaneous sessions for the user. A value of 0 means that there is no session limit for the user.
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Add SSH public key to user Adds an SSH public key to the specified user.

The following user-profile fields are required:

  • -n user_name
  • -kf key_format
  • -key key
users -add -n user_name -kf key_format -key " key"
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • key_format is openssh
  • key is an SSH public key, up to 6000 characters in length, enclosed in double-quotes.
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Remove SSH public key from user Removes one or all SSH public keys associated with the specified user. users -remove -n user_name -ki key_index
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • key_index is
    • an integer between 1 and 20 that identifies a key for the specified user.
    • all to remove all keys associated with the specified user
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Import (upload) and add new SSH public key Import (upload) and add a new SSH public key for user.

The upload location of the key file, including IP address and filename, an must be set using the -u command option.

users -upld -n user_name -kf key_format -u URL
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • key_format is openssh
  • URL is fully qualified uniform resource locator, including file name, of the tftp, ftp, http, https, or sftp server where the key file is located.
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Import (upload) and update existing SSH public key Import (upload) and update existing SSH public key for user.

The upload location of the key file, including IP address and filename, an must be set using the -u command option.

users -upld -n user_name -ki key_index -kf key_format -u URL
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • key_index is an integer between 1 and 20 that identifies a key for the specified user.
  • key_format is openssh
  • URL is fully qualified uniform resource locator, including file name, of the tftp, ftp, http, https, or sftp server where the key file is located.
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Export (download) SSH public key Export (download) the specified SSH public key.

The download location of the key file, including IP address and filename, and must be set using the -u command option.

users -dnld -n user_name -ki key_index -kf key_format -u URL
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • key_index is an integer between 1 and 20 that identifies a key for the specified user.
  • key_format is openssh
  • URL is fully qualified uniform resource locator, including file name, of the tftp, ftp, http, https, or sftp server where the key file is located.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Display SSH public key information (summary) Displays SSH public key information summary for the specified user. users -u user_name -ki key_index
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • key_index is
    • an integer between 1 and 20 that identifies a key for the specified user.
    • all to display all keys associated with the specified user
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Display complete SSH public key information Displays complete SSH public key information for the specified user.
Note: When displaying complete key information, you can only specify one key index each time you run the command.
users -u user_name -ki key_index -kf key_format -e
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • key_index is
    • an integer between 1 and 20 that identifies a key for the specified user.
  • key_format is openssh
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Update SSH public key Updates the information for the specified SSH public key for the specified user. Information that can be updated includes:
  • The list of hosts from which the specified user will accept connections.
  • Comments.
users -n user_name -ki key_index -kf key_format -key " key" -af " host_list" -cm " comment"
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • key_index is an integer between 1 and 20 that identifies a key for the specified user.
  • key_format is openssh
  • key is an SSH public key, up to 6000 characters in length, enclosed in double-quotes.
  • host_list a list of hosts that the specified user will accept connections from, in the format: from="list" where list is a comma-separated list, enclosed in double-quotes, of hostnames and IP addresses. The list is limited to 511 characters, with valid characters including: letters, numbers, commas ( , ), asterisks ( * ), question marks ( ? ), exclamation points ( ! ), periods ( . ), hyphens ( - ), colon ( : ), and percent signs ( % ).
  • comment is a string of up to 255 characters in length, enclosed in double-quotes.

(continued on next page)

Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Update SSH public key

(continued)

 
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
 
Update user SNMPv3 information Updates the SNMPv3 information for the specified user. Information that can be updated includes:
  • Context name
  • Authentication protocol
  • Privacy protocol
  • Privacy password
  • Access type
  • IP address of the SNMPv3 server
Note: SNMPv3 related command options can also be modified singly for each specified user.
users -n user_name -cn " context_name" -ap authentication_protocol -pp privacy_proto -ppw privacy_pwd -at access_type -i hostname/ip_address
where:
  • user_name is a user name assigned in the "Display all user profiles" list.
  • context_name is a unique string up to 32 characters in length, enclosed in double-quotes.
  • authentication_protocol is md5 or sha .
  • privacy_proto is des , aes , or none .
  • privacy_pwd is an alphanumeric string between 5 and 32 characters in length that can include special characters and must include at least one alphabetic and one numeric character, but no white space. The privacy_pwd can be cleared by setting its value to null.
  • access_type is get , set , or trap .
  • hostname/ip_address is the host name or IP address of the SNMPv3 server. The hostname/ip_address can be cleared by setting its value to null.
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Enable compute node account management by CMM Enables management of compute node IPMI and SNMPv3 user accounts by the CMM.

This command option allows the CMM user accounts to be used for managing most compute nodes in the chassis instead of having the Flex System Manager user accounts used to manage the compute nodes.

Important: Management of compute node IPMI and SNMPv3 user accounts is not supported by POWER-based compute nodes.
Note:
  • Enabling CMM management of IPMI/SNMPv3 user accounts causes all existing IPMI/SNMPv3 user accounts on compute nodes to be overwritten. Save existing compute node IPMI/SNMPv3 user account information before enabling compute node account management by the CMM.
  • Once enabled, the only way to disable the users -am enabled command option is to reset the CMM to manufacturing defaults using the clear command or using the fsmcm -off command (see fsmcm command).
users -am enabled
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Enable / disable IPMI and SNMPv3 centralized management Enables or disables centralized management of IPMI and SNMPv3 user accounts, including user provisioning.

This command enables you to control whether or not specific CMM user accounts can be used to manage chassis components (including provisioning). Remember that enabling a user account will not actually allow local management of chassis components unless you have enabled compute node management by the CMM using the users -am enabled command option.

Note: Disabling centralized IPMI and SNMPv3 management (provisioning) of a user account deletes the centrally managed user account. If there is a corresponding local account for this user on the CMM, it will remain functional.
users -ipmisnmpv3 state -n user_name

where:

  • state is enabled or disabled .
  • user_name is a user name assigned in the "Display all user profiles" list.
This command can only be run by users who have one or more of the following command authorities:
  • Supervisor
  • Chassis account management
See Commands and user authority for additional information.
Primary CMM:
  • mm[p]
  • mm[P]
  • mm[x]
  • where x is the primary CMM bay number.
Example: To create a user with a user name of user3, with a password of passw0rd, who is a member of the super permission group (supervisor rights to all Flex System components, as defined by the permgroups command), and a maximum number of user sessions of 10, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -add -n user3 -p passw0rd -g super -ms 10
To display all users, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users
To display information for the user named test, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test
To add a public key of the type openssh to the user named test, with a key value of ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvfnTUzRF7pdBuaBy4dO/ aIFasa/Gtc+o/wlZnuC4aDHMA1UmnMyLOCiIaNOy4OOICEKCqjKEhrYymtAo VtfKApvY39GpnSGRC/qcLGWLM4cmirKL5kxHNOqIcwbT1NPceoKHj46X7E+ mqlfWnAhhjDpcVFjagM3Ek2y7w/tBGrwGgN7DPHJU1tzcJy68mEAnIrzjUoR98Q3/ B9cJD77ydGKe8rPdI2hIEpXR5dNUiupA1Yd8PSSMgdukASKEd3eRRZTBl3SAt MucUsTkYjlXcqex1OQz4+N50R6MbNcwlsx+mTEAvvcpJhuga70UNPGhLJMl6k7 jeJiQ8Xd2pXbOZQ==, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test -add -kf openssh -key "ssh-rsa AAAAB3NzaC1yc2EAAAA
BIwAAAQEAvfnTUzRF7pdBuaBy4dO/aIFasa/Gtc+o/wlZnuC4aDHMA1UmnMyLOCiIaNOy4OOICEKCq
jKEhrYymtAoVtfKApvY39GpnSGRC/qcLGWLM4cmirKL5kxHNOqIcwbT1NPceoKHj46X7E+mqlfWnAh
hjDpcVFjagM3Ek2y7w/tBGrwGgN7DPHJU1tzcJy68mEAnIrzjUoR98Q3/B9cJD77ydGKe8rPdI2hIE
pXR5dNUiupA1Yd8PSSMgdukASKEd3eRRZTBl3SAtMucUsTkYjlXcqex1OQz4+N50R6MbNcwlsx+mTE
AvvcpJhuga70UNPGhLJMl6k7jeJiQ8Xd2pXbOZQ=="
To display the key with an index of 1 for the user named test, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test -ki 1
To display all keys for the user named test, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test -ki all
To display full key information for the key with an index of 1, of type openssh, for the user named test, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test -ki 1 -kf openssh -e
To download a key with an index of 1, of type openssh, for the user named test, from tftp://9.72.216.40/file.key, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test -dnld -ki 1 -kf openssh -u tftp://9.72.216.40/file.key
To upload a key with an index of 1, of type openssh, for the user named test, from tftp://9.72.216.40/file.key, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test -upld -ki 1 -kf openssh -u tftp://9.72.216.40/file.key
To remove a key with an index of 1 for the user named test, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test -ki 1 -remove
To remove all keys for the user named test, while the primary CMM in bay 2 is set as the persistent command environment, at the system:mm[2]> prompt, type
users -n test -ki all -remove

The following example shows the information that is returned from these commands:

system:mm[2]> users -add -n user3 -p passw0rd -g super -ms 10
OK
system:mm[2]> users

-am enabled

Users
=====

USERID
   Group(s): supervisor
   1 active session(s)
   Max 0 session(s) allowed
   Account is active
   Password is not expired
   Password is compliant
   There is no SSH public key installed for this user
   IPMI and SNMPv3 user provisioning is disabled

user3
   Group(s): super
   0 active session(s)
   Max 10 session(s) allowed
   Account is active
   Password is not expired
   Password is compliant
   There is no SSH public key installed for this user
   IPMI and SNMPv3 user provisioning is disabled

test
   Group(s): opmin
   0 active session(s)
   Max 2 session(s) allowed
   Account is active
   Password is not expired
   Password is compliant
   Number of SSH public keys installed for this user: 2
   IPMI and SNMPv3 user provisioning is disabled

User Permission Groups
======================

supervisor
   Role:supervisor
   Blades:1|2|3|4|5|6|7|8|9|10|11|12|13|14
   Chassis:1
   Modules:1|2|3|4|5|6|7|8|9|10

operator
   Role:operator
   Blades:1|2|3|4|5|6|7|8|9|10|11|12|13|14
   Chassis:1
   Modules:1|2|3|4|5|6|7|8|9|10

opmin
   Role:operator
   Blades:n/a
   Chassis:n/a
   Modules:n/a


system:mm[2]> users -n test

-g opmin
-ms 5
-cn admin
-ap sha
-pp des
-at set
-i 0.0.0.0
-ipmisnmpv3 disabled
0 active session(s)
Max 2 session(s) allowed
Account is active
Password is not expired
Password is compliant
Number of SSH public keys installed for this user: 2
Last login: Never


system:mm[2]> users -n test -add -kf openssh -key "ssh-rsa AAAAB3NzaC1yc2EAAAA
BIwAAAQEAvfnTUzRF7pdBuaBy4dO/aIFasa/Gtc+o/wlZnuC4aDHMA1UmnMyLOCiIaNOy4OOICEKCq
jKEhrYymtAoVtfKApvY39GpnSGRC/qcLGWLM4cmirKL5kxHNOqIcwbT1NPceoKHj46X7E+mqlfWnAh
hjDpcVFjagM3Ek2y7w/tBGrwGgN7DPHJU1tzcJy68mEAnIrzjUoR98Q3/B9cJD77ydGKe8rPdI2hIE
pXR5dNUiupA1Yd8PSSMgdukASKEd3eRRZTBl3SAtMucUsTkYjlXcqex1OQz4+N50R6MbNcwlsx+mTE
AvvcpJhuga70UNPGhLJMl6k7jeJiQ8Xd2pXbOZQ=="
OK


system:mm[2]> users -n test
-g opmin
-ms 5
-cn admin
-ap sha
-pp des
-at set
-i 0.0.0.0
-ipmisnmpv3 disabled
0 active session(s)
Max 2 session(s) allowed
Account is active
Password is not expired
Password is compliant
Number of SSH public keys installed for this user: 3
Last login: Never


system:mm[2]> users -n test -ki 1
ssh-rsa 2048 bits 69:d0:2d:4e:72:09:88:0d:ff:63:87:2c:26:5d:f6:f2
-af
-cm
system:mm[2]> users -n test -ki all

Key 1
ssh-rsa 2048 bits 69:d0:2d:4e:72:09:88:0d:ff:63:87:2c:26:5d:f6:f2
-af
-cm

Key 2
ssh-rsa 2048 bits 69:d0:2d:4e:72:09:88:0d:ff:63:87:2c:26:5d:f6:f2
-af
-cm

Key 3
ssh-rsa 2048 bits 69:d0:2d:4e:72:09:88:0d:ff:63:87:2c:26:5d:f6:f2
-af
-cm


system:mm[2]> users -n test -ki 1 -kf openssh -e
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvfnTUzRF7pdBuaBy4dO/aIFasa/Gtc+o/wlZnuC4aD
HMA1UmnMyLOCiIaNOy4OOICEKCqjKEhrYymtAoVtfKApvY39GpnSGRC/qcLGWLM4cmirKL5kxHNOqI
cwbT1NPceoKHj46X7E+mqlfWnAhhjDpcVFjagM3Ek2y7w/tBGrwGgN7DPHJU1tzcJy68mEAnIrzjUo
R98Q3/B9cJD77ydGKe8rPdI2hIEpXR5dNUiupA1Yd8PSSMgdukASKEd3eRRZTBl3SAtMucUsTkYjlX
cqex1OQz4+N50R6MbNcwlsx+mTEAvvcpJhuga70UNPGhLJMl6k7jeJiQ8Xd2pXbOZQ==


system:mm[2]> users -n test -dnld -ki 1 -kf openssh -u tftp://9.72.216.40/file.key
OK


system:mm[2]> users -n test -upld -ki 1 -kf openssh -u tftp://9.72.216.40/file.key
OK


system:mm[2]> users -n test -ki 1 -remove
OK


system:mm[2]> users -n test -ki all -remove
OK