Web Interface
Note: Disregard the "Unable to Open Key File" message while the Current Keys field is
empty.
RESTART Button
After changing the NTP configuration, click the RESTART button to put the new configuration
into effect. While the NTP daemon restarts, its services are temporarily unavailable, and it
generates the following alarm events: NTP Stratum Change, NTP System Peer Change,
NTP Leap Change.
NTP - Autokey
Use this page to:
n Enable autokey authentication.
n Generate and download autokey keyfiles and certificates.
n Create peer, broadcast, and multicast associations that are configured for autokey.
Also see Using NTP Authentication (on page 160).
Note: MD5 and Autokey cannot be used on the SyncServer concurrently. Configuring one
method erases the keys or certificates of the other.
Configuration of SyncServer as Autokey Server
Key Generation/Deletion
Identity Scheme: Select the scheme to be used on the SyncServer and the client.
n
PC: Private Certificate
n
IFF: Identification Friend or Foe
n
GQ: Guillow-Quisquate
Note: The PC scheme does not have a group key file. The user installs the IFF and GQ
group key file on the Autokey client.
Server Password: Enter an alphanumeric string to serve as an autokey password. Cryp-
tographically, a string of random ASCII characters would be the strongest password. This is
equivalent to the "crypto pw <server-password>" line in ntp.conf on a generic NTP device.
Client Password: When the IFF Identity Scheme is selected, enter a client password to be
used by all of the Autokey clients associated with this server. When configuring the Autokey
client, the user enters the client password on the NTP - Autokey Client page.
Use the GENERATE button to create the key file and/or certificate file. After the keys and/or
certificates have been generated, Auto (autokey) becomes available in the MD5 Keys menu
on the NTP - Config page. Use this field to apply autokey authentication to NTP associations.
Use the DELETE button to clear previous keys and certificates. This is a required step before
generating new ones.
Key File Download
Page 48..........................................................................997-01520-02 Rev. F1
To Next Page
Loading...
