47-13
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter47 Configuring Device Administration Policies on Firewall Devices
Configuring Device Credentials
Configuring Device Credentials
Use the Credentials page to specify the user credentials Security Manager will use when contacting this
device. You can also change the Enable password and the Telnet/SSH password on the device.
This user name-password combination lets you log into the device (in EXEC mode) if you connect to
the security appliance using an HTTP, HTTPS, Telnet, or SSH session. You also can specify a separate
password specifically for Telnet and SSH sessions. (Further, you can define separate credentials for
HTTP/HTTPS connections on the Device Credentials Page, page 3-44 in the Device Properties window.)
The Enable password lets you access privileged EXEC mode after you log in.
Tip The Username, Password, and Enable Password on this page are linked to the Credentials settings in the
Device Properties window. When you update these parameters and then deploy the changes to the device,
Security Manager uses the existing credentials defined in the Device Properties to log into the device
and deploy changes. After successful deployment, the Device Properties credentials are updated to
match these settings. For more information about Credentials in Device Properties, see Device
Credentials Page, page 3-44.
Navigation Path
•(Device view) Select Platform > Device Admin > Credentials from the Device Policy selector.
•(Policy view) Select PIX/ASA/FWSM Platform > Device Admin > Credentials from the Policy
Type selector. Select an existing policy from the Shared Policy selector, or create a new one.
Warning
Since several user accounts may exist on each device, applying a shared Credentials policy to
multiple devices will update only the Enable Password on each device; the Username and Password
provided in the shared policy are not applied (nor is the Telnet/SSH password). The Enable Password
is sufficient for subsequent access to PIX/ASA/FWSM devices, unless external authentication such
as AAA or TACACS+ is configured, in which case the Enable Password alone is not sufficient. In this
situation, you must manually update the Username, Password and Enable Password on each device
that uses external authentication.
Related Topics
•Configuring User Accounts, page 50-6
Weekday Choose the day of the week on which daylight savings time begins or
ends.
Hour Choose the hour, from 0 to 23, in which daylight savings time begins or
ends.
Minute Choose the minute, from 00 to 59, at which daylight savings time
begins or ends.
Table47-7 Clock Page (Continued)
Element Description