Disable Device Encryption; Re-Enable Cryptography After It Has Been Disabled - Digi IX20 User Manual

System administration

Disable device encryption

You can disable the cryptography on your IX20 device. This can be used to ship unused devices from
overseas without needing export licenses from the country from which the device is being shipped.
When device encryption is disabled, the following occurs:
n The device is reset to the default configuration and rebooted.
n After the reboot:
Access to the device via the WebUI and SSH are disabled.
l
All internet connectivity is disabled, including WAN and WWAN. Connectivity to central
l
management software is also disabled.
All IP networks and addresses are disabled except for the default 192.168.210.1/24 network
l
on the local LAN Ethernet port. DHCP server is also disabled.
The device can only be accessed by using telnet from a local machine connecting to the
192.168.210.1/24 network.
Disabling device encryption is not available in the WebUI. It can only be performed from the Admin
CLI.

Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the IX20
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. Disable encryption with the following command:
> system disable-cryptography
>
3. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.

Re-enable cryptography after it has been disabled.

To re-enable cryptography:
1. Configure your PCnetwork to connect to the 192.168.210 subnet. For example, on a Windows
PC:
IX20 User Guide
Disable device encryption
1041