Security Administration Utility Command Line

The Security Administration utility (secadm) includes numerous command line options and sub-commands for performing security tasks. These options and sub-commands are described in the tables below. For more information on each sub-command, see the documentation for the security administration task that uses that sub-command or see the Landmark Utilities Reference Guide.

secadm Options

The following table provides a description of options you can use when running secadm.


Option	Description
`m`	Enter interactive menu mode. See Using the Security Administration Menu.
`u -l password`	Upgrades the authen.dat file.
`r`	Reset the password for security administration tools. Password recovery must be turned on. The password recovery key will be sent to the e-mail that was specified when password recovery was set up. You then paste the key from the e-mail as a response and you can reset the security password. (If you have set up `secadm` to require a password, you will be prompted for the current password before you can reset the password. )
`p`	Provide the password for security administration tools (if password checking is turned on). For example, if password checking is turned on, you must enter `secadm -p password -f filename` rather than `secadm -f filename` .
`f file`	Specify a file to use as a command script.
`c`	Continue on error.
`v`	Print version information.
`?`	Print a help message
`--secadm-options`	Print a list of `secadm` options.
`--help-commands`	Print a list of `secadm` commands.
`H command`	Print help for a specific `secadm` command.
`i`	Not implemented.
`q`	Not implemented.
`s`	Not implemented.

secadm Sub-commands

The following sub-commands are available with the secadm utility:


secadm command	Description
`accountlockoutpolicy`	Maintain system account lockout policies. See Adding or Updating Account Lockout Policies.
`actor`	Maintain system actors, including actor contexts and actor context properties. See Creating an Actor Using the secadm Utility
`admin`	Manage security administration configuration. See Controlling User Access to the Security Administration utility.
`agent`	Migrate system agents and actors. See Using Scripts to Migrate Actors and Agents.
`generate`	Generate secadm scripts from data. See Generating Scripts to Load Actor Information.
`httpendpoint`	Maintain system HTTP endpoints and HTTP endpoint assignments. See Adding HTTP Endpoints and Assigning to SSO Domains.
`identity`	Maintain system identities. See Adding or Updating an Identity.
`load`	Load data to security files. See Importing Lawson System Foundation User Definitions into Landmark.
`loginscheme`	Maintain system login schemes. See Adding or Updating Login Schemes.
`migrate`	Used only at installation. Migrate sourcing supplier identities from default primary SSO service to domain primary SSO service.
`passwordpolicy`	Maintain system password policies. See Adding or Updating a Password Policy.
`passwordresetpolicy`	Maintain system password reset policies. See Adding (or updating) a password reset policy.
`provision`	Provision users for Landmark. See Importing Operating System Users Using the Security Administration (secadm) Utility.
`proxy`	Manage user proxies. See User proxies.
`report`	View security reports. See secadm report - Security Administration: View Security Reports.
`role`	Manage system roles. See Creating Roles.
`secanswer`	Maintain system security answers. See Adding or Updating a Security Question.
`secquestion`	Maintain system security questions. See Adding or Updating a Security Question.
`security`	Manage security classes and security system activation (turning security on and off). Assigning Security Classes to Roles Enabling Run-time Authorization
`service`	Maintain system services.
`ssoconfig`	Maintain Single Sign-on configuration.
`ssodomain`	Maintain system SSO domains. See Adding or Updating an SSO Domain.