Manuals / Cisco Systems / Household Appliance / Home Security System

Cisco Systems OL-5742-01 manual Managing SSL Support in SGM, Disabling SSL Support in SGM, 18-39

Models: OL-5742-01

1 42

Download 42 pages 34.07 Kb

Page 39

Chapter 18 Configuring SGM Security

Implementing SSL Support in SGM

Managing SSL Support in SGM

SGM enables you to perform the following tasks to make it easier to manage SSL support in SGM:

•To display the current status of SSL support in SGM, including whether SSL support is enabled or disabled and which SSL keys and certificates exist, use either the sgm ssl status or sgm sslstatus command.

•To print the SGM server’s SSL certificate in X.509 format, use the sgm keytool print_crt command.

•To list the SSL key/certificate pair on the SGM server, use the sgm keytool list command.

•To list all SSL certificates on the SGM client, launch the SGM SSL Certificate Tool. SGM lists each imported certificate, including to whom the certificate was issued, who issued the certificate, and when the certificate expires.

See the “SGM Command Reference” section on page C-1for more information on the use of these commands.

See the “Importing an SSL Certificate to an SGM Client” section on page 18-33for more information on launching the SGM SSL Certificate Tool.

Disabling SSL Support in SGM

SGM enables you to disable SSL support in SGM, and to remove SSL keys and certificates from the SGM server and clients:

•To disable SSL support in SGM, use the sgm ssl disable command. See the “sgm ssl” section on page C-98for more information.

•To remove all SSL keys and certificates from the SGM server, use the

sgm keytool clear command. SGM stops the SGM server, if necessary, and removes the keys and certificates. Before restarting the server, you must either generate new SSL keys using the sgm keytool genkey command, or you must completely disable SSL using the sgm ssl disable command.

See the “SGM Command Reference” section on page C-1for more information on the use of these commands.

		Cisco Signaling Gateway Manager User Guide
		Cisco Signaling Gateway Manager User Guide
	OL-5742-01			18-39
	OL-5742-01			18-39

Image 39

Cisco Systems OL-5742-01 manual Managing SSL Support in SGM, Disabling SSL Support in SGM, 18-39

Contents

Implementing SSL Support in SGM, page Configuring SGM User-BasedAccessConfiguring SGM User-BasedAccess, page Creating Secure Passwords, page 18-5 RequiredImplementing SGM User-BasedAccess Solaris Only #cd /opt/CSCOsgm/bin #./sgm useraccess enable18-2 #./sgm authtype local sgm disablepass -sgm passwordage -sgm userpasssgm adduser -sgm disableuser -sgm enableuser sgm updateuser# ./sgm authtype solaris # ./sgm sgm adduser username18-4 18-5 Creating Secure PasswordsNetwork Administrator Level 4 Access, page Basic User Level 1 Access, pagePower User Level 2 Access, page Network Operator Level 3 Access, page18-7 Basic User Level 1 AccessPower User Level 2 Access Network Operator Level 3 Access18-8 Network Administrator Level 4 Access System Administrator Level 5 Access18-9 System Messages and Logs 18-10# ./sgm badlogindisable clear # ./sgm badloginalarm number-of-attempts# ./sgm badloginalarm clear # ./sgm badlogindisable number-of-attempts18-12 # ./sgm passwordage number-of-days# ./sgm inactiveuserdays number-of-days # ./sgm inactiveuserdays clear18-13 # ./sgm passwordage clear#./sgm clitimeout number-of-minutes # ./sgm clitimeout clear# cd /opt/CSCOsgm/bin # ./sgm disablepass username# ./sgm deluser username 18-1418-15 # ./sgm disableuser username18-16 # ./sgm enableuser username# ./sgm userpass username page18-17 # ./sgm updateuser usernameDisplaying a Message of the Day # ./sgm newlevel username18-18 Message of the Day Last UpdatedField or Button Description18-20 #cd /opt/CSCOsgm/bin #./sgm motd enableDecline # ./sgm motd edit# ./sgm motd cat Manually Synchronizing Local SGM Passwords# ./sgm motd disable Listing All Currently Defined Users18-22 Disabled# ./sgm listusers username #cd /opt/CSCOsgm/bin #./sgm seclog18-23 #cd /opt/CSCOsgm/bin #./sgm restore securityRestoring Security-RelatedSGM Data # ./sgm seclog clear# ./sgm restart Disabling SGM User-BasesAccess#cd /opt/CSCOsgm/bin #./sgm useraccess disable Specifying a Super User Solaris Onlysgm reboot -sgm restore -sgm restoreprops sgm backup -sgm browserpath -sgm certguisgm certtool -sgm clean -sgm cleanall sgm cleandb -sgm cw2ksetup -sgm evilstopLaunching the SGM Certificate Tool for SSL, page Implementing SSL Support in SGMsgm webport -sgm xtermpath Enabling SSL Support in SGM, pageDisabling SSL Support in SGM, page Enabling SSL Support in SGMExporting an SSL Certificate, page Managing SSL Support in SGM, pageopt/CSCOsgm/etc/ssl/server.csr is a CSR # ./sgm keytool import cert cert filename18-28 Step 5 Restart the SGM client 18-29SGM displays the SGM Server Home page 18-30Launching the SGM Certificate Tool for SSL #cd /opt/CSCOsgm/bin #./sgm certgui18-31 Import Issued toIssued by Expiration DateHelp Importing an SSL Certificate to an SGM ClientDetails ExitFile Name CancelExporting an SSL Certificate Look InDescription Save In18-35 Field or ButtonField or Button Save18-36 CancelFigure 18-5Certificate Information Dialog 18-37Chapter 18 Configuring SGM Security Cisco Signaling Gateway Manager User GuideSerial number IssuerSubject VersionManaging SSL Support in SGM Disabling SSL Support in SGM18-39 18-40 Step 2 Enter the following command# cd /opt/CSCOsgm/bin #./sgm ipaccess add #./sgm ipaccess edit18-41 Any changes you make to the ipaccess.conf file take effect when you restart the SGM server 18-42