Objective

Secure Sensitive Data (SSD) Management is used to manage sensitive data such as passwords and keys securely on the switch. This information should be secured when it is sent from one device to another device. The access level of the user determines how the sensitive data can be viewed, either as plaintext or encrypted data. SSD properties are a set of parameters in conjunction with SSD rules which control settings such as how sensitive data is encrypted, the strength of security on configuration files, and how the sensitive data is viewed within the current session.

The objective of this document is to help configure Secure Sensitive Data (SSD) Properties on Sx500 Series Stackable Switches.

Applicable Devices

• Sx500 Series Stackable Switches

Software Version

• 1.3.0.62

SSD Properties

Step 1. Log in to the web configuration utility and choose Security > Secure Sensitive Data Management > Properties. The Properties page opens:

Note: The Current Local Passphrase Type field displays the type of local passphrase initially set.

Step 2. In the Configuration File Passphrase Control field, click the radio button of the desired type of passphrase control. File passphrase control gives extra protection to the user defined passphrase and the data encrypted with the user defined passphrase.

• Unrestricted — The user defined passphrase is included in the configuration file that is sent from one device to another.

• Restricted — The user defined passphrase is not included in the configuration file.

Step 3. (Optional) To enable file integrity control, check the Enable check box in the Configuration File Integrity Control field. This option protects the configuration file from modification.

Step 4. In the Read Mode field, click the desired radio button. The available options are:

• Plaintext — The sensitive data is displayed as plaintext.

• Encrypted — The data is displayed in encrypted form.

Step 5. Click Apply.

Change Local Passphrase

Step 1. Log in to the web configuration utility and choose Security > Secure Sensitive Data Management > Properties. The Properties page opens:

Step 2. Click Change Local Passphrase to change the current local passphrase. The Change Local Passphrase page opens:

Note: The Current Local Passphrase Type field displays the current local passphrase.

Step 3. In the Local Passphrase field, click the radio button of the desired local passphrase:

• Default — This assigns the default passphrase.

• User Defined (Plaintext) — Enter the desired passphrase. It should be between 8 and 16 characters and include uppercase and lowercase characters, a number, and a special character.

– Confirm Passphrase — Re-enter the user defined passphrase.

Step 4. Click Apply.