Cisco NAC3350-PROF-K9 - NAC Profiler Server Installation Manual page 102

Installing the Clean Access Server
Specify whether or not you want the CAS to feature Pre-login Banner Support at the following prompt.
Step 24
Enable Prelogin Banner Support? (y/n)? [n]
For more information and an example of the Pre-login Banner feature, see the
Clean Access Server Configuration Guide, Release
Configure the
Step 25
The
root
Cisco NAC Appliance supports using Strong Passwords for root user login. Passwords must be at least
8 characters long and feature a combination of upper- and lower-case letters, digits, and other characters.
For example, the password
characters from each category, but
"Administering the
Guide, Release
For security reasons, it is highly recommended that you change the password for the root
user.
** Please enter a valid password for root user as per the requirements below! **
Changing password for user root.
You can now choose the new password.
A valid password should be a mix of upper and lower case letters,
digits, and other characters. Minimum of 8 characters and maximum
of 16 characters with characters from all of these classes. Minimum
of 2 characters from each of the four character classes is mandatory.
An upper case letter that begins the password and a digit that ends
it do not count towards the number of character classes used.
Enter new password:
Re-type new password:
passwd: all authentication tokens updated successfully.
Next type the password for the
Step 26
Please enter an appropriately secure password for the web console admin user.
New password for web console admin:
Confirm new password for web console admin:
Web console admin password changed successfully.
The final step in the initial configuration process is to choose whether or not to turn on FIPS mode for
Step 27
your NAC-3315 or NAC-3355 CAS. To enable FIPS operation, enter
Would you like to turn on fips mode? (y/n)? [y]
-- Running startup script 45drivers
-- Running startup script 46exard
-- Running startup script 50hardserver
Security world already exists
If you want to initialize any additional Smart cards at this time, enter
Step 28
Otherwise, enter
Do you want to recreate security world and initialize cards (y/n)? [n]
writing RSA key
Card(s) check passed
Cisco NAC Appliance Hardware Installation Guide
3-32
user password for the installed Linux operating system of the Clean Access Server.
root
user account is used to access the system over a serial connection or through SSH.
10-9=One
1o-9=OnE
CAM" chapter of the
4.8(3).
admin
to complete the FIPS set up process.
n
Chapter 3 Installing the Clean Access Manager and Clean Access Server
4.8(3).
does not satisfy the requirements because it does not contain two
is a valid password. For more details, see the
Cisco NAC Appliance - Clean Access Manager Configuration
user for the CAS direct access web console.
Cisco NAC Appliance -
at the following prompt.
y
at the following prompt.
y
OL-20326-01