User`s guide

Configuration through the web interface
166
Change the password for administrative user
To increase security, change the password for the administrative user from its default. By default,
the administrative username is root.
Note Record the new password. If the changed password is lost, the Digi device must be
reset to the default firmware settings.
In Digi devices with a single-user model, changing the root password also changes the password
for Advanced Digi Discovery Protocol (ADDP). In Digi devices with the multi-user model,
changing the root password has no effect on ADDP. To change the ADDP password, enter
newpass name=addp from the command line.
In the web interface:
1 On the Main menu, click Security.
2 On the Security Configuration page, enter the new password in the New Password and
Confirm Password edit boxes. The password can be from 4 through 16 characters long and
is case-sensitive. Click Apply.
3 A logoff is forced immediately. Log in to the web interface using the new values.
From the command line:
Issue the newpass command.
Upload an SSH public key
SSH can be configured to log into to servers without having to provide a password. This is called
“public key authentication” and is more secure than using a normal password.
You generate a public/private key using a program called ssh-keygen, and store a copy of the
public key on the server(s) that you wish to use for authentication. When you attempt to log in, the
server sends you a message encrypted with your public key. Your machine decrypts it and sends
back the original message, proving your identity.
To upload an SSH public key:
1 On the Main menu, click Security.
2 On the Security Configuration page, check the Enable SSH public key authentication
check box.
3 Type or paste the SSH public key in the edit box.
4 Click Apply.
Depending on your mobile service provider, other users can access your Digi device device over
the Internet, through various network services enabled on your Digi device. To further secure the
Digi device, network services not necessary to the device, particularly non-secure or un-encrypted
network services such as Telnet, can be disabled. See "Network services settings" on page 68.