Avocent Cyclades ACS Service Manual download pdf (Page 58)

50 Cyclades ACS 5000 Advanced Console Server Command Reference Guide

To generate OTP passwords:

1. Execute the command opiekey to generate passwords for the users.

NOTE: Do not execute the opiekey command through dial-in or an unsecured remote connection such as Telnet.

The following example uses MD5 (-5 option) to verify data integrity. The -n <count> option

followed by the sequence number 498 generates 5 passwords ending with number 498.

# opiekey -5 -n 5 498 KV6178

Using the MD5 algorithm to compute response.

Reminder: Don’t use opiekey from telnet or dial-in sessions.

Enter secret pass phrase: john’s secret pass phrase

494: HOST DRUG CLAN NARY HILT BULB

495: DUG JET CAIN SKIN SIGN BRAE

496: ALOE DUEL HUB SIT AMMO MIN

497: REEK KEN RECK CUT NEWS AMY

498: ALGA DEAD PUN FLUB LYRA LEN

2. Give the OTP username, secret pass phrase and the OTP passwords generated in this procedure

to the user.

Shadow Passwords

The console server has support for shadow passwords, which enhances the security of the system

authentication files. Shadow Passwords are enabled by default.

Digital Certificates

Certificate for HTTP security

The following procedure enables you to obtain a Signed Digital Certificate. A certificate for the

HTTP security is created by a Certification Authority (CA). Certificates are most commonly

obtained through generating public and private keys using a public key algorithm like RSA or

X.509. The keys may be generated by using a key generator software.

To obtain a signed digital certificate:

1. Enter the OpenSSL command. Key generation may be done using the OpenSSL package using

the following command:

# openssl req -new -nodes -keyout private.key -out public.csr

1 2 ... 53 54 55 56 57 58 59 60 61 62 63 ... 151 152

No comments

Avocent Cyclades ACS Service Manual Page 58