> Security Management
> This chapter identifies additions and changes made to security features in Release 12.x.
> Topics covered in this chapter are:

> l | Security Configuration

> l | Security Enhancements

> Security Configuration
> This section identifies additions and changes made to the security features in Release 12.x.

> l | Security Configuration Changes in Release 12.2

> Security Configuration Changes in Release 12.2
> This section identifies additions and changes made to security features in Release 12.2.
> New Commands
> The following new commands were added for Release 12.2.
> authorized-key
> This command allows an operator to specify a username associated with SSHv2 DSA and/or RSA authorization keys. This user can access the sshd server to gain access to the ASR 5000.
> CLI (SSH Configuration Mode)
> [ default ] authorized-key username user_name host host_name [ type { v2-dsa | v2-rsa } ]
> Modified Commands
> None for this release.
> Obsoleted Commands
> None for this release.
> Web Element Manager Security Configuration Changes in Release 12.0
> This section identifies additions and changes made to security features in Release 12.0.
> Secure Java Policy File Support
> WEM now offers system administrators the option to use a secure java policy file to limit users’ access to WEM servers’ directory structure. Once the IP addresses of the WEM servers available are specified in the file, administrators can then set the allowed read/write/execute access permitted to users for each of those WEM servers.
> For details on configuring and using the secure java policy file, refer to the Web Element Manager Installation and Administration Guide.
> Apache Server Upgrade to Address Security Concerns
> Certain security concerns due to issues with Apache Server 2.2.14 may be experienced.
> Apache 2.2.14 is upgraded to Apache 2.2.21 for all new Solaris and RHEL WEM installations. Apache 2.2.21 is compiled with openSSL 0.9.8s version.
> Web Element Manager Security Configuration Changes in Release 12.2
> This section identifies additions and changes made to security features in Release 12.2.
> None for this release.
> Security Enhancements
> This section identifies additions and changes made to the security features in Release 12.x.

> l | Security Enhancements in Release 12.0

> l | Security Enhancements in Release 12.1

> Security Enhancements in Release 12.0
> This section identifies additions and changes made to security features in Release 12.0.
> None for this release
> New Commands
> None for this release.
> Modified Commands
> None for this release.
> Obsoleted Commands
> None for this release.
> Security Enhancements in Release 12.1
> This section identifies additions and changes made to the security features in Release 12.1.
> None for this release.
> New Commands
> None for this release.
> Modified Commands
> None for this release.
> Obsoleted Commands
> None for this release.

Cisco Systems Inc.
Tel: 408-526-4000
Fax: 408-527-0883