User's Manual

Fortress ES-Series CLI Guide: Network Security, Authentication and Auditing
121
4.1.16 Fortress Access ID
NOTE: Secure Cli-
ent versions ear-
lier than 3.1 support
only 16-digit Access
IDs.
The Access ID is a 16- or 32-digit hexadecimal ID that provides
network authentication for the Fortress Security System. It is
set with the
set accessid command, as follows:
# set accessid <16digithexid> | <32digithexid> |random|default
-confirm
<16digithexid> | <32digithexid> |random|default
NOTE: A 32-digit
Access ID cannot
be configured when
DH-512 key establish-
ment (Section 4.1.5) is
selected.
You can manually enter either a 16-digit or a 32-digit
hexadecimal Access ID of your own composition, or you can
elect to have the Mesh Point randomly generate a 32-digit
Access ID and display the result for you to record.
Regardless of how you establish the Mesh Point’s Access ID,
you must make a record of the Access ID at the same time that
you create it. For security purposes, once you have left the
screen on which it was initially established, the Access ID can
never again be displayed.
CAUTION: The
Access ID is dis-
played exactly once, at
its creation, after which
there is no way—in the
GUI or CLI—to discover
the Access ID config-
ured on the Mesh Point.
All Secure Clients logging on to the Mesh Point must be
configured to use the same Access ID as the Mesh Point. For
information on setting the Access ID on Secure Clients, refer to
the Fortress Mesh Point Software GUI Guide.
The default Access ID is represented by 16 zeros
(
0000000000000000) or the word default, which when used
with the
set accessid command will return to the Mesh Point’s
Access ID to its default setting.
The Mesh Point CLI returns
OK when settings are successfully
changed.
You must be logged on to an
administrator -level account to
change configuration settings (refer to Section 2.2).
4.2 Digital Certificates
The Mesh Point automatically generates a self-signed digital
certificate conforming to the X.509 ITU-T
1
standard for a public
key infrastructure (PKI). This certificate and associated RSA
2048-bit public/private key pair are present in the Mesh Point’s
certificate management configuration and used for the Mesh
Point GUI by default.
4.2.1 Generating CSRs and Key Pairs
The generate csr command allows you to generate a PKCS
(Public Key Cryptography Standards) #10 certificate signing
request (CSR).
# generate csr -name <CSRname> -subject <X.500 DN> -newkey -type rsa2048|ec256|ec384
1. International Telecommunication Union-Telecommunication Standardization Sector;
formerly, CCITT