Cisco IOS XR

SC-75
Cisco IOS XR System Security Configuration Guide
Implementing Keychain Management on
Cisco IOS XR Software
Keychain management is a common method of authentication to configure shared secrets on all the
entities, which exchange secrets such as keys before establishing trust with each other. Routing protocols
and network management applications on Cisco IOS XR software often use authentication to enhance
security while communicating with peers.
Feature History for Implementing Keychain Management on Cisco IOS XR Software
Contents
• Restrictions for Implementing Keychain Management, page SC-75
• Information About Implementing Keychain Management, page SC-76
• How to Implement Keychain Management, page SC-76
• Configuration Examples for Implementing Keychain Management, page SC-87
• Additional References, page SC-88
Restrictions for Implementing Keychain Management
You must be aware that changing the system clock impacts the validity of the keys in the existing
configuration.
Release Modification
Release 3.3.0 This feature was introduced on Cisco CRS-1 and Cisco XR 12000 Series Router.
Release 3.4.0
• Support for the MAC authentication algorithm was added.
• Support for hitless key rollover and key acceptance tolerance were added.
Release 3.5.0 Support for hitless key rollover for Open Shortest Path First (OSPF) and
Intermediate System-to-Intermediate System (IS-IS) was added.