Table of Contents
Advertisement
password-map
Creates a Password map, a which associates an alias with an encrypted password.
Syntax
password-map
no password-map
Guidelines
password-map interactively prompts for alias:password pairs.
alias
password
Each plaintext password is 3DES encrypted using a locally generated host key,
with the final encrypted password mapped to alias-name in a password map file.
The password map and the host key are saved to separate files on the appliance.
The plaintext passwords are not stored in memory or committed to the flash.
You must ensure that synchronization is maintained between the startup
configuration and the password map file. You must use the password-map
command to generate aliases for, and encrypt, certificate or key passwords before
using the certificate or key commands to access files protected by an encrypted
password. An attempt to reference an encrypted password not found in the
Password map results in command failure.
Deletion of the Password map and host key file has no immediate effect on keys
and certificates already loaded into memory. At system restart, however, key and
certificate commands that contain references to aliases contained in the deleted
Password map will fail unless a new Password map has been created with the
same aliases.
Note: The password-map command cannot be used in a configuration script.
Use the no password-map command to delete the Password map and host key
files
Related Commands
certificate, key, keygen
230
Command Reference
Alias-name:
SSL: password-map saved
# keygen C au
L "South Melbourne" ST Victoria
O "DataPower Australia, Ltd." OU "Customer Support"
CN www.bob.datapower.com.au rsa 2048 out bob
password-alias WaltzingMatilda
#
Specifies the name of the alias. This name must consist of alphanumeric
characters, and cannot contain white space; its length is limited to 127
characters.
Specifies the plaintext password. This password must also consist of
alphanumeric characters, and may contain white space (spaces or tabs),
although leading and trailing white space is ignored; its length is limited to
127 characters.
When found, the command is ignored.
Advertisement
Table of Contents
