Exam DES-DD23 topic 1 question 34 discussion

1. Add one or more security officer users 2. Enable the security officer authorization 3. Configure the system to use DD Retention Lock Compliance 4. Create iDRAC users 5. Enable DD Retention Lock Compliance on the system DD OS Administration Guide 7.2 S.345

1. Add one or more security officer users 2. Enable the security officer authorization 3. Configure the system to use DD Retention Lock Compliance 4. Create iDRAC users 5. Enable DD Retention Lock Compliance on the system

1- (ADMIN USER) # user add [username] role security --create idrac user 2- SECURITY USER): # authorization policy set security-officer enabled -- Enable the security officer authorization 3- Add one or more security officer users 4-(ADMIN USER) # system retention-lock compliance configure 5-(ADMIN USER) # system retention-lock compliance enable ---Enable DD Retention Lock Compliance on the system 6- (ADMIN USER) # mtree retention-lock enable mode compliance mtree [mtree]

actually step 4 and 5 need to be switched. From :https://www.delltechnologies.com/asset/en-us/products/data-protection/technical-support/docu97051.pdf Do not use the iDRAC interfaces to create additional iDRAC users because DD OS automatically disables those new users and reboots the system. Use the user idrac create command to create new iDRAC users AFTER enabling Retention Lock Compliance