What is anti-theft mode?

NE management using an OS security password

Anti-theft mode can be enabled on compatible devices. Enabling anti-theft mode ensures that if the device is stolen, it cannot be reconfigured and reused.

When anti-theft mode is enabled, after each reboot the device is locked, requiring the OS security password before allowing access to the configuration commands, preventing the device from being used in a new network deployment.

See Network security in the NSP UI in the NSP Security Hardening Guide for information about configuring an OS security password in NSP.

OS security information in the NSP UI

OS security information for each NE is displayed in the Device Management, Managed Network Elements view as described in the following table.

Parameter

Predefined values

Notes

Anti-theft mode

Disabled

Anti-theft is disabled on the NE

Enabled

Anti-theft is enabled on the NE

Not supported

The model-driven NE does not support anti-theft.

— (dash)

Not applicable: the NE is operating in classic mode, or is a third-party NE where NSP cannot verify whether anti-theft is supported

Anti-theft lock status

Not applicable

The NE is operating in classic mode, or is a third-party NE

Locked

This is a transient state: when the discovery and management process is completed the status is updated to Unlocked or Unlock Failed

Unlock failed

The unlock operation failed.

Unlocked

The device is not locked.

OS security password status

Not applicable

The NE is operating in classic mode, or is a third-party NE

Configured

A password has been configured on the NE

Not configured

A password has not been set on the NE.

Push failed

The last attempt to push a password to the NE failed.

Push pending

A push is in progress

Push scheduled

A password push operation has been scheduled to update the password on the NE.

Pushed

The password value defined in the OS security policy has been pushed to the NE successfully

Push rebooting

The NE is rebooting after a password has been pushed. When the reboot is completed, the status will be updated to Pushed or Push failed.