Manual Chapter :
Master Key
Applies To:
Show Versions
ARX
- 6.3.0
The master key encrypts and decrypts all of the Critical-Security Parameters (CSPs), such as passwords, on the ARX. You can use the master key in conjunction with the show running-config and show global-config commands to backup and restore the full switch configuration, including passwords.
| The ARX supports a single master key that encrypts and decrypts all of its CSPs (such as passwords). You generate the master key as part of the switchs initial boot process; use the show master-key command to get an encrypted copy of the master key. | |||||||||
This command outputs a base64-encoded string that is the encrypted master key. Save this string and the wrapping password that you set in the command. You can use these pieces of information to duplicate the master key later on a redundant switch; both switches in a redundant pair must share the same master key. If you set up two redundant pairs in a disaster-recovery configuration, where one pair is an active cluster (see cluster-name) and the other is a backup cluster, all four switches must share the same master key. For maximum security, the encrypted master key and its wrapping password must be saved separately. | |||||||||
| |||||||||
| bstnA(cfg)# show master-key System Password: Sup3r$ecretpw Wrapping Password: An0ther$ecretpw Validate Wrapping Password: An0ther$ecretpw | |||||||||
