User Account Requirements

User Permissions

The following Settings permissions are available for each role.

People
Setting	Permission	Root	Administrator	User
Users	View, add, edit, and remove users	✓	✓	N/A
Passwords	Reset login passwords	✓	✓	✓
Audit Log	View Audit Log	✓	✓	N/A

Instrument
Setting	Permission	Root	Administrator	User
About	View Instrument Information	N/A	✓	✓
Instrument Settings	Customize the settings of the instrument	N/A	✓	✓
Software Update	Perform SW Updates	N/A	✓	N/A
System Checks	Run System Checks	N/A	✓	✓

Network (OS level)
Setting	Permission	Root	Administrator	User
Network Settings	Configure Network Settings	N/A	✓	N/A
Proxy Settings	Enable a proxy server	N/A	✓	N/A
Firewall Settings	Enable firewall settings	N/A	✓	N/A
External Storage	Mount network	N/A	✓	N/A

Network (CSW)
Setting	Permission	Root	Administrator	User
Cloud Settings	Configure cloud connectivity settings	N/A	✓	✓
External Storage	Configure external storage settings	N/A	✓	✓

Analysis
Setting	Permission	Root	Administrator	User
Applications	Install, uninstall, and edit applications	N/A	✓	N/A
DRAGEN	Install new DRAGEN versions and update license	N/A	✓	N/A
DRAGEN Management	Check for DRAGEN workflows available/installed	N/A	✓	✓
Resource Files	Import reference genomes and resource files	N/A	✓	N/A

Password Requirements

The Illumina Field Service Engineer initiates a password change for all three accounts after completing instrument installation. Update each password every 180 days, when prompted.

Default Password Policies
Policy	Setting
Enforce password history	Five passwords remembered
Lockout threshold	10 invalid login attempts
Minimum password length	10 characters
Minimum character variety	Three each of the following: number, upper case letter, lower case letter, and symbol
Maximum repeating characters	Three characters
Password must meet complexity requirements	Disabled
Store passwords using reversible encryption	Disabled

Add a New User (CentOS 7)

1.

Log in to ilmnadmin.

2.

Select the power button, and then expand the ilmnadmin drop-down list.

3.

Select Account Settings.

4.

Select Unlock, and then enter the ilmnadmin password.

5.

Select Add User.

6.

Select the Standard account type, and then enter a new user name.

7.

Select Set password now, and then enter a password.

8.

Select Add.

The new user is added to the Users list.

9.

Grant the user access to the NextSeq 1000/2000 Control Software as follows.

a.

Open terminal.

b.

Enter the following:

$ sudo usermod -a -G ilmnusers <new user name>

c.

If prompted, enter the ilmnadmin password.

10.

To confirm that the user permissions were set successfully, do as follows.

a.

Log in to the new user account.

b.

Navigate to the NextSeq 1000/2000 Control Software.

c.

From the control software menu, select Settings.

d.

Under Default Output Folder, make sure you can select and save the output folder path.

If you can select and save the output folder path without any errors, the permissions are successfully set.

Add a New User (Oracle Linux 9)

1.

Log in to ilmnadmin.

2.

Select the power button, and then select Settings.

3.

Select Users.

4.

Select Unlock, and then enter the ilmnadmin password.

5.

Select Add User.

6.

Select the Standard account type, and then enter a new user name.

7.

Select Set password now, and then enter a password.

8.

Select Add.

The new user is added to the Users list.

9.

Grant the user access to the NextSeq 1000/2000 Control Software as follows.

a.

Open terminal.

b.

Enter the following:

$ sudo usermod -a -G ilmnusers <new user name>

c.

If prompted, enter the ilmnadmin password.

10.

To confirm that the user permissions were set successfully, do as follows.

a.

Log in to the new user account.

b.

Navigate to the NextSeq 1000/2000 Control Software.

c.

From the control software menu, select Settings.

d.

Under Default Output Folder, make sure you can select and save the output folder path.

If you can select and save the output folder path without any errors, the permissions are successfully set.

Reset Password

This section describes how to reset the ilmnuser, ilmnadmin, and root passwords. Password recovery is not available. Resetting your password does not bypass account lockout after 10 incorrect password attempts. You must wait 10 minutes before you can reset your password or try to log in.

Reset ilmnuser Password

If you know the ilmnadmin or root password, you can reset the ilmnuser password.

1.

Log in to ilmnadmin.

2.

Open terminal.

3.

Enter sudo passwd ilmnuser.

4.

Enter the ilmnadmin password at the prompt.

5.

Enter a new ilmnuser password at the prompt.

6.

Retype the new ilmnuser password at the prompt to confirm the new password.

Reset ilmnadmin Password

If you know the root password, you can reset the ilmnadmin password.

1.

Log in to root.

2.

Open terminal.

3.

Enter passwd ilmnadmin to change the ilmadmin password, or enter passwd ilmnuser to change the ilmnuser password.

4.

Enter the new password at the prompt.

5.

Retype the new password at the prompt to confirm the new password.

Reset Root Password

To reset the root password, use one of the following options:

•

If you know the password from the time the last OS image was captured, restore to that saved image.

•

If you do not remember the password, contact Illumina Technical Support.

Audit Log

Introduced with control software v2.1, the system includes audit log functionality that records actions a user performs on the system. The audit log can only be accessed by the root or administrator account.

Logs will be archived once the current log file exceeds 31 MB in size. Archived logs are retained for 90 days minimum. The system deletes logs older than 90 days due to space constraints. Root and administrator accounts have permissions to view and edit the archive and rotation settings of the audit log.

The Audit Log can be accessed in the Terminal to navigate to the appropriate directory to view the audit logs.

Function

Filename

Permission to view and edit

Log Audit events

/var/log/ssi_audit_log_csw.log

/var/log/ssi_audit_log_ssw.log

Administrator and Root User

Archive audit log

/var/log/ssi_audit_log_archive/ssi_audit_log_csw.log-20251112.gz

Administrator and Root User

The Audit Log includes the following information:

•

Component

•

Event Identifier

•

User GUID

•

Date and Time of the activity in YYYY-MM-DD Z (UTC time)

•