Configuring Software Authentication Manager on Cisco IOS XR Software
Contents
SC-196
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
Contents
• Prerequisites for Configuring Software Authentication Manager, page SC-196
• Information about Software Authentication Manager, page SC-196
• How to set up a Prompt Interval for the Software Authentication Manager, page SC-196
Prerequisites for Configuring Software Authentication Manager
• You must be in a user group associated with a task group that includes the proper task IDs. The
command reference guides include the task IDs required for each command.
• If you suspect user group assignment is preventing you from using a command, contact your AAA
administrator for assistance.
Information about Software Authentication Manager
For SAM to verify software during installation, the software to be installed must be in a Packager for
IOS/ENA (PIE) format. PIEs are digitally signed and SAM verifies the digital signature before allowing
bits from that PIE to reside on the router. Each time an installed piece of software is run, SAM ensures
that the integrity of the software is not been compromised since it was installed. SAM also verifies that
software preinstalled on a flash card has not been tampered with while in transit.
When the initial image or a software package update is loaded on the router, SAM verifies the validity
of the image by checking the expiration date of the certificate used to sign the image. If an error message
is displayed indicating that your certificate has expired, check the system clock and verify that it is
accurate. If the system clock is not set correctly, the system does not function properly.
How to set up a Prompt Interval for the Software Authentication
Manager
When the SAM detects an abnormal condition during boot time, it prompts the user to take action and
waits for a certain interval. When the user does not respond within this interval, SAM proceeds with a
predetermined action that can also be configured.
To set up the Prompt Interval, perform the following tasks.
SUMMARY STEPS
1. configure
2. sam prompt-interval time-interval {proceed | terminate}
3. end
or
commit
To Next Page
Loading...
