Juniper J-Series Administration Manual page 226

J-series Services Router Administration Guide
Encrypting Configuration Files
To encrypt configuration files on a Services Router:
1.
2.
Table 103: request system set-encryption-key Commands
CLI Command
request system set-encryption-key
request system set-encryption-key
algorithm des
request system set-encryption-key
unique
request system set-encryption-key des
unique
3.
4.
5.
6.
204
Encrypting and Decrypting Configuration Files
Enter operational mode in the CLI.
To configure an encryption key in EEPROM and determine the encryption
process, enter one of the
request system set-encryption-key
in Table 103 on page 204.
Description
Sets the encryption key and enables default configuration file encryption as follows:
AES encryption for the Canada and U.S. version of the JUNOS software
DES encryption for the international version of the JUNOS software
Sets the encryption key and specifies configuration file encryption by DES.
Sets the encryption key and enables default configuration file encryption with a unique
encryption key that includes the chassis serial number of the Services Router.
Configuration files encrypted with the unique key can be decrypted only on the current
router. You cannot copy such configuration files to another router and decrypt them.
Sets the encryption key and specifies configuration file encryption by DES with a
unique encryption key.
For example:
user@host> request system set-encryption-key
Enter EEPROM stored encryption key:
At the prompt, enter the encryption key. The encryption key must have at least
6 characters.
Enter EEPROM stored encryption key:juniper1
Verifying EEPROM stored encryption key:
At the second prompt, reenter the encryption key.
Enter configuration mode in the CLI.
To enable configuration file encryption to take place, enter the following
commands:
user@host# edit system
commands described