xcmHrDevMgmtOperatorPassword 1.3.6.1.4.1.253.8.53.5.2.1.6

A protected system operator password for this device. Usage: Conformant implementations MUST encrypt passwords, keys, and other security information stored in this string object. Usage: All XCMI conforming management agents: a) SHOULD always return a zero length string in response to an SNMP GetRequest of this object; b) SHALL NOT return the contents of this object in cleartext (ie, unencrypted) in response to an SNMP GetRequest; c) SHOULD support (ie, accept) an authenticated SNMP SetRequest changing the system 'operator password' in this object. Usage: Conforming management stations and management agents SHOULD support authentication of SNMP SetRequests via values of 'xcmHrDevMgmt[User|Operator|Admin]Password' in ciphertext (ie, encrypted) written in 'xcmHrDevMgmtCommandData'. Usage: Conforming management stations MAY support client-side authentication of user roles and rights via checking values of 'xcmHrDevMgmt[User|Operator|Admin]Password' presented in client applications (eg, install tools). WARNING: Such authentication mechanisms do NOT protect managed systems from attack by other SNMP client applications that do NOT perform such client-side authentication and are thus inherently weak.