EnerSys Alpha Cordex CXC HP - Remote Authentication

Cordex®CXCHPControllerSoftwareManual|20-Maintainingthecontroller
20.6.9.1. Overriding the remote configuration lockout from the LCD
AftertheRemote Configuration Lockout featurehasbeenenabled,itispossibletooverridethelockout
forauser-specifiedamountoftime.Thiswillallowatechnicianon-sitetooverridethelockouttemporarily
toallowforauseroff-sitetoperformsomeconfigurationviathewebinterface.
To override the remote configuration lockout from the LCD:
1. OntheLCD,gotoMaintenance > Remote Configuration Lockout.
2. SelectOverride Remote Configuration Lockout,thenselectExecute.
Theconfigurationlockoutwillbeoverriddenfortheamountoftimethathasbeenconfigured.Thetime
remainingintheoverridecanbeenseenviaLockout Override Time Remaining.
20.6.9.2. Overriding the remote configuration lockout from the OLED display
To override the remote configuration lockout from the OLED display:
1. OntheOLEDdisplay,gotothemenubyselectingtheSelect button.
2. ScrolldownandselecttheRemCfg button.
YouwillbeshownaLockout Overridden success confirmationmessage,andtheconfigurationlockout
willbeoverriddenfortheamountoftimethathasbeenconfigured.
20.7. Remote authentication
Thecontrollerisconfiguredwithlocaluseraccountsbydefault,wherelogincredentialsareverified
againstencrypteddataonthecontroller.Remoteauthenticationprovidesanadditionalabilitytoverify
logincredentialsfromaremoteserver.Thiscanbeanadvantagefromanetworksecuritystandpoint,as
logincredentialscanbeupdatedfromonecentralserverratherthanbeingupdatedindividuallyoneach
controller.EnablingRemoteauthenticationhasnoeffectonthealreadyconfigureddefaultuseraccounts
storedlocallyonthecontroller.
Thecontrollersupportscredentialcaching.Inthecasethatthecontrollerisnotabletocontactthe
specifiedremoteserver,thecontrollerwillverifytheuser’scredentialsagainstthelasttenauthenticated
credentialsencryptedandstoredlocallyonthedevice.
ThecontrollercansupportremoteauthenticationthrougheithertheRADIUSorTACACS+protocol..
Notice: Login access to the default user accounts are unaffected when a remote authentication
server is inaccessible.
Notice: Remote Authentication passwords are limited to 32 characters. Shared Secrets and
Secret Keys are limited to 52 characters. The User Roles Configuration fields are case-sensitive
when matched against the values stored on the remote server.
Page 214 0350058-J0 Rev AL