Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 202

Contents
Contents
•
•
•
Prerequisites for Configuring Software Authentication Manager
•
•
Information about Software Authentication Manager
For SAM to verify software during installation, the software to be installed must be in a Packager for
IOS/ENA (PIE) format. PIEs are digitally signed and SAM verifies the digital signature before allowing
bits from that PIE to reside on the router. Each time an installed piece of software is run, SAM ensures
that the integrity of the software is not been compromised since it was installed. SAM also verifies that
software preinstalled on a flash card has not been tampered with while in transit.
When the initial image or a software package update is loaded on the router, SAM verifies the validity
of the image by checking the expiration date of the certificate used to sign the image. If an error message
is displayed indicating that your certificate has expired, check the system clock and verify that it is
accurate. If the system clock is not set correctly, the system does not function properly.
How to set up a Prompt Interval for the Software Authentication
Manager
When the SAM detects an abnormal condition during boot time, it prompts the user to take action and
waits for a certain interval. When the user does not respond within this interval, SAM proceeds with a
predetermined action that can also be configured.
To set up the Prompt Interval, perform the following tasks.
SUMMARY STEPS
1.
2.
3.
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-196
Prerequisites for Configuring Software Authentication Manager, page SC-196
Information about Software Authentication Manager, page SC-196
How to set up a Prompt Interval for the Software Authentication Manager, page SC-196
You must be in a user group associated with a task group that includes the proper task IDs. The
command reference guides include the task IDs required for each command.
If you suspect user group assignment is preventing you from using a command, contact your AAA
administrator for assistance.
configure
sam prompt-interval time-interval {proceed | terminate}
end
or
commit
Configuring Software Authentication Manager on Cisco IOS XR Software
OL-20382-01