Patton electronic SmartNode 4110 Series manual Use Cases, Install a custom encryption key optional

SmartWare Software Configuration Guide 6 • Configuration file handling

enctool decrypt <enc-config-file> <plain-config-file> [<key>]

A log file lists the last up/downloads:

show log file-transfer

Use Cases

Install a custom encryption key (optional)

You can install a custom encryption key with the SmartNode. The encryption key is used to automatically decrypt an encrypted configuration file that is downloaded later. A default encryption key is already installed on the SmartNode.

To install an encryption key you have to create a file on your TFTP server that contains the key. Then you have to download this key file to the SmartNode using the copy command of the SmartNode.

The key file shall contain a key string of at most 24 characters on a single line. Spaces, tabs and LF/CR charac- ters are trimmed. The key must not contain LF/CR or the null character and must not start or end with a space or tab. If the key contains more than 24 characters, only the first 24 characters are considered.

The key may contain variables that are resolved when the key file is downloaded to a SmartNode. Using this mechanism you can specify device-specific encryption keys. We currently support the following variables:

•$(system.mac): The MAC address of the first ethernet port. Execute the show port ethernet command on a SmartNode to display the MAC address of a SmartNode. This value without the colon separators and with all lower-case hexadecimal letters is used instead of the variable on the SmartNode.

•$(system.serial): The serial number of the SmartNode. Execute the show version command on the Smart- Node to display the serial number.

When your key file contains the following line:

123$(system.serial)abc$(system.mac)XYZ

The command show port ethernet shows the following:

Ethernet Configuration

-------------------------------------

Port	: ethernet 0 0 0
State	: OPENED
MAC Address	: 00:0C:F1:87:D9:09
Speed	: 10MBit/s
Duplex	: Half
Encapsulation	: ip
Binding	: interface eth0 router

The command show version displays the following:

[...]

Serial number : 100000020002

[...]

The encryption key on this SmartNode will be interpreted as:

Configuration file handling task list 88