System layer commands

Last Updated : Jun 10, 2026 |

The sys command line alias facilitates the use and discovery of system layer commands. Typing this command without arguments provides syntax help, and a list of supported system layer commands. The following is an example:

[admin@server-dev ~]$ sys

Execute system layer commands.

    -h, --help
        Command syntax (this help)

    -hh, --hhelp
        Verbose help

Available commands:

    secconfig            [Manage security settings]
    versions             [Query version information]
    smcvemgt             [Manage Spectre/Meltdown patches]
    ipv6config           [Manage server IPv6 configuration]
    extension            [Manage system layer extensions]
    passwdrules          [Manage password rules]
    encryptionStatus     [Show disk encryption status]
    encryptionPassphrase [Manage disk encryption passphrases]
    encryptionLocalKey   [Manage disk encryption local key]
    encryptionRemoteKey  [Manage disk encryption remote keys]

    Command invocation syntax:
        sys <command> <arguments>

    Command syntax:
        sys <command> -h

[admin@server-dev ~]$
Important:

For software-deployments, only the following system layer commands are available:

  • sys versions

  • sys passwdrules

Other system layer commands are unavailable.

Verbose help information

-hh is used for verbose help information, which provides a brief description of each available system layer command. The following is an example:

[admin@server-dev ~]$ sys -hh

The "sys" command line alias facilitates access to the following commands
related to the system layer of UCApp appliances. To obtain help with
each of these commands, use the "-h" (or "--help") argument for help
with command line syntax, and "-hh" (or "--hhelp") for verbose help.

secconfig
    Manages security-related settings.

versions
    Queries the version information of various elements of the system
    layer.

smcvemgt
    Manages the enablement status of Linux kernel patches for the
    Spectre and Meltdown vulnerabilities.

ipv6config
    Manages configuration of server-level IPv6.

extension
    Manages the extensions for the system layer. Supported extensions
    are currently limited to the enablement of JAR files in the
    JRE library's extensions directory to support newer application
    loads.

passwdrules
    Manages the configuration of password rules.

encryptionStatus
    Show the status of disk encryption.

encryptionPassphrase
    Adds, changes, and removes disk encryption passphrases, and
    lists the configuration of disk encryption keys.

encryptionLocalKey
    Enables and disables disk encryption local key.

encryptionRemoteKey
    Adds and removes remote key servers (tang servers), and
    list the configuration of disk encryption keys.

[admin@server-dev ~]$

Any arguments provided after the name of the system layer command are passed through to that command.