When sealed mode is enabled, the following settings are automatically applied:

• One Identity Safeguard for Privileged Sessions (SPS) cannot be accessed remotely via SSH for maintenance.

• The root password of SPS cannot be changed in sealed mode.

• It is not possible to upload or delete plugins in sealed mode.

• Sealed mode can be disabled only from the local console. For details, see Disabling sealed mode.

To enable sealed mode use one of the following methods:

• Select the Sealed mode option during the Welcome Wizard.

• Select Basic Settings > System > Sealed mode > Activate sealed mode on the SPS web interface.

• Log in to SPS as root using SSH or the local console, and select Sealed mode > Enable from the console menu.