User manual

Software Authentication Manager Commands on Cisco IOS XR Software
sam prompt-interval
SR-212
Cisco IOS XR System Security Command Reference
sam prompt-interval
To set the interval that the Software Authentication Manager (SAM) waits after prompting the user for
input when it detects an abnormal condition at boot time and to determine how the SAM responds when
it does not receive user input within the specified interval, use the sam prompt-interval command in
global configuration mode. To reset the prompt interval and response to their default values, use the no
form of this command.
sam prompt-interval time-interval {proceed | terminate}
no sam prompt-interval time-interval {proceed | terminate}
Syntax Description
Defaults The default response is for the SAM to wait 10 seconds and then terminate the authentication task.
Command Modes Global configuration
Command History
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on
Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
Use the sam prompt-interval command to control the action taken when the system detects an exception
condition, such as an expired certificate during initialization of the SAM at boot time. The following
message appears when the software detects the abnormal condition of a certificate authority (CA)
certificate expired:
SAM detects expired CA certificate. Continue at risk (Y/N):
The SAM waits at the prompt until you respond or the time interval controlled by the sam
prompt-interval command expires, whichever is the earlier event. If you respond “N” to the prompt, the
boot process is allowed to complete, but no packages can be installed.
time-interval Prompt time, in the range from 0 to 300 seconds.
proceed Causes the SAM to respond as if it had received a “yes” when the prompt interval
expires.
terminate Causes the SAM to respond as if it had received a “no” when the prompt interval
expires.
Release Modification
Release 2.0 This command was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 This command was supported on the Cisco XR 12000 Series Router.