Cisco IOS XR User Manual

SC-75
Cisco IOS XR System Security Configuration Guide
Implementing Keychain Management on
Cisco IOS XR Software
Keychain management is a common method of authentication to configure shared secrets on all the
entities, which exchange secrets such as keys before establishing trust with each other. Routing protocols
and network management applications on Cisco IOS XR software often use authentication to enhance
security while communicating with peers.
Feature History for Implementing Keychain Management on Cisco IOS XR Software
Contents
• Restrictions for Implementing Keychain Management, page SC-75
• Information About Implementing Keychain Management, page SC-76
• How to Implement Keychain Management, page SC-76
• Configuration Examples for Implementing Keychain Management, page SC-87
• Additional References, page SC-88
Restrictions for Implementing Keychain Management
You must be aware that changing the system clock impacts the validity of the keys in the existing
configuration.
Release Modification
Release 3.3.0 This feature was introduced on Cisco CRS-1 and Cisco XR 12000 Series Router.
Release 3.4.0
• Support for the MAC authentication algorithm was added.
• Support for hitless key rollover and key acceptance tolerance were added.
Release 3.5.0 Support for hitless key rollover for Open Shortest Path First (OSPF) and
Intermediate System-to-Intermediate System (IS-IS) was added.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.