The following security commands are available to manage remote service access settings: Use the  chaccess  command to change the following settings of an HMC: The  lsaccess  command displays the access settings of an HMC. If you add the  -l parameter, the command also displays the AOS or rsc status. If AOS or rsc is active, an  AOS or rsc connection will show as enabled. An AOS or rsc connection is only used for  remote support purposes. See Example 12-77. The following commands were added in Release 8.2 to enable TLS protocol for secure syslog  traffic. TLS must be enabled before configuring all syslog servers. If you specify TLS, all  Syslog servers configurations use the same protocol and certificates. Example 12-78 shows the new DS CLI command,  mksyslogserver,  for configuring  syslogserver with TLS enabled. The CA Certificate, HMC Certificate, and HMC private key  locations are required when configuring the first syslogserver.  The  lssyslogserver -l displays the list of all Syslog servers and their attributes. See  Example 12-79. 438  IBM DS8880 Architecture and Implementation dscli>  lssyslogserver -l name IP address port state access protocol type HMC ====================================================================== daisy 9.10.100.127 514 active online tls audit,message,event 1 daisy 9.10.100.127 514 active online tls audit,message,event 2 dscli>  mksyslogserver -addr 9.100.10.7 -protocol tls -cacert /Users/heping/ut/syslog/ca.pem  -hmccert /Users/heping/ut/syslog/cert.pem -key /Users/heping/ut/syslog/key.pem test CMUC00508I mksyslogserver: The syslog server machine.example.net has been created. dscli>  lsaccess -l hmc cmdline wui modem cim aos rsc vpn ============================================================ hmc1 enabled enabled - enabled enabled enabled disabled hmc2 enabled enabled - enabled enabled disabled disabled Important: GLYPH<SM590000> lsaccess GLYPH<SM590000> chaccess GLYPH<SM590000> mksyslogserver GLYPH<SM590000> lssyslogserver -l Example 12-79 Display List Syslog Servers Example 12-78 Enable TLS for Secure Syslog Traffic Example 12-77 Use the lsaccess -l command to show the status of AOS and rsc – Enable and disable the command-line shell access to the HMC.  – Enable and disable the WUI access on the HMC.  – Enable and disable Assist On-site (AOS) or Remote Support Center (rsc) access to the  HMC. GLYPH<SM590000> This command affects service access only and does not change access to the  system by using the DS CLI or DS Storage Manager. GLYPH<SM590000> Only users with administrator authority can access this command.