Cisco Crosswork AI Administration, Release 2.0

Choose Administration > System Details.

In Summary, review the overall status of the system.

Figure 1. System details - summary

Review the system information:

In Resources, review the overall resource status and current usage:

Select View details to review additional resource information.

Resource metrics are retained for up to two days. Data outside this period is not available.

Choose Actions to access related administration tasks:

Choose Administration > System Details and select Applications.

Figure 2. System details - applications

Review the overall status of Platform Infrastructure and cisco-crosswork-ai.

For each application, the system displays the total number of microservices and the number reported as Healthy, Critical, or Degraded.

Select an application to review more information.

Choose Administration > System Details.

Choose Actions > Request all.

The system creates a Showtech job and opens Showtech. The job can take several minutes to complete while the system collects logs and diagnostic information.

Figure 3. System details - showtech

Monitor the job status.

After the job is complete, download the Showtech archive.

Share the archive file with Cisco Support for further troubleshooting.

Choose Administration > System Details and select Pods.

Figure 4. System details - pods

Review the name, type, and current status, creation time, and uptime of each pod.

The creation time and uptime indicate when the pod was created and how long it has been running.

Use Search to locate a specific pod, or use Status to display pods with a particular status.

Choose Administration > Software Management.

Figure 5. Software management

Review the installed Crosswork AI release, installation date, and build version.

The Installed applications list also displays the installed version and status of each application.

Select Installation status to review the status of the installed image.

The installation status includes the system name, version, overall status, and the checks completed during installation.

Use Search or filter by installed version and status to narrow the results.

To review additional system information, select View system details.

Choose Administration > Software Management, and then select Add new image.

Figure 6. Add new image

Select the image source:

Select Add.

The system transfers the image from the selected source. After the image is added successfully, it becomes available for installation.

Choose Administration > Backup and Restore and then select Create backup.

Figure 8. Create backup

Enter a name for the backup.

For Backup type, select one of the following:

For Source, select Local download or Remote location as the backup destination.

Enter an encryption key.

Store the encryption key securely. You must provide it as the decryption key when restoring the backup.

Select Backup now.

The system creates a backup job and adds it to the job list with the current status.

Monitor the backup progress under Job details.

While the backup is running, some operations may be temporarily unavailable or may respond more slowly than usual.

Choose Administration > Backup and Restore, and then select Schedule backup.

Figure 9. Schedule backup

Enter a unique name for the schedule.

For Backup type, select one of the following:

Specify the date and time when the schedule should begin.

For Frequency, select how often the backup should run.

For Remote location, select a configured SCP server or select Create remote storage location.

To create a remote storage location, refer to Configure remote storage.

Enter an encryption key to secure the backup files.

Store the encryption key securely. You must provide it as the decryption key when restoring a backup created by this schedule.

Select Save.

Choose Administration > Backup and Restore, and then select Restore.

Figure 10. Restore backup

From Source, select the location of the backup:

Enter the decryption key associated with the backup.

Select Validate to validate the backup file.

After validation completes successfully, select Restore.

Choose Administration > Backup and Restore.

In Backup jobs, review active and completed backup jobs.

Review the start and end times, status, backup type, destination, and the user who started the backup. Use Search, Status, and Type to narrow the results.

Select History to review details of previously started backup and restore operations.

Review the operation, start and end times, status, type, details, and the user who started the operation. Use search or filter by status to narrow the results.

Choose Administration > Certificate Management, and then select Add certificate.

Figure 11. Add certificate

Enter a certificate name.

Select Trusted CA certificate.

To associate the certificate with specific features, select Manage feature attachments.

Select one or more of the following feature attachments, and then select Save:

Under CA certificate, select Upload and choose the trusted CA certificate.

Select Add certificate.

Choose Administration > Certificate Management, and then select Add certificate.

Enter a certificate name.

Select System certificates.

Figure 12. Add system certificate

Select Manage feature attachments.

Select one or more of the following feature attachments, and then select Save:

Under Certificate, select Upload and choose the system certificate.

If the certificate requires intermediate CA certificates, select Upload under Intermediate CA certificates and choose the applicable certificate files.

Under Private key, select Upload and choose the private key that corresponds to the system certificate.

Enter the private-key passphrase.

Select Add certificate.

Choose Administration > Certificate Management, and then select Certificate signing request (CSR).

Select Generate CSR.

Enter a certificate name.

For Certificate role, choose System.

For Subject details, enter the FQDN of the server or a unique name, along with other details such as the country, state, locality, organization, and organizational unit.

Under Subject alternate names (SAN), enter the IP address and FQDN used to access the Crosswork AI deployment.

Add any additional IP addresses or FQDNs if they are required for certificate validation.

For Key, choose the key type, key size, and digest required by your organization’s certificate policy.

Select Generate CSR.

Choose Administration > Users and Roles, select Roles, and then select Add role.

Figure 13. Add a new role

Enter a name and, optionally, a description for the role.

Select Next.

Figure 14. Select access profiles

For each access profile required for the role, assign the appropriate access level:

The available access levels can vary by access profile. Use Search or filter by category to locate specific access profiles.

Select Next.

Review the role details and selected access levels.

Select Confirm.

Choose Administration > Users and Roles, and then select Add user.

Figure 15. Add a new user

Enter the user details.

Select Next.

The access domain determines the resources governed by your role permissions. For Access domain, choose All-access. All-access is the only domain currently available for selection.

For Role, choose one or more roles for the user.

Assign only the roles required for the user’s responsibilities.

Select Next.

Review the user details and assigned roles.

Select Confirm.

Choose Administration > Users and Roles, and then select Active sessions.

Figure 16. User active sessions

Use Search or filter by login method and session type to narrow the results.

Review the session ID, username, login method, session type, login time, last activity time, and session duration.

To investigate activity associated with a session, choose …​ > Audit log for that session.

The Audit Log displays the related audit records. You can download the displayed audit records in CSV or JSON format.

Select Refresh to retrieve the latest session information.

Choose Administration > AAA.

Select Add identity provider.

Figure 17. Add a new IdP

Enter a name for the identity provider.

Upload the IdP metadata XML file.

Select Add.

To download the Crosswork AI service provider metadata, select Download SP metadata.

Choose Administration > AAA, and then select Settings.

Figure 18. Configure AAA settings

Under Global idle timeout, configure the session timeout settings as required:

Changing the session timeout settings restarts Crosswork AI services. The application and APIs are temporarily unavailable during the restart, and users may see a connection error or need to sign in again.

Under Local password policy, configure the settings required for your security policy:

Select Save.

Choose Administration > System Settings.

Under Storage, select Edit.

Select Add location to configure a new remote storage location, or select the edit icon for an existing location.

Enter a name and, optionally, a description for the remote location.

Enter the SCP server hostname or IP address.

Enter the path on the server, if required.

Enter the username and password used to access the server.

Select Save.

Choose Administration > System Settings.

Under Routes, select Edit.

Add the route to the appropriate network:

Enter the destination IPv4 subnet in CIDR notation, for example, 192.168.1.0/24.

Add additional routes as required.

Select Save.

Choose Administration > System Settings.

Under DNS, select Edit.

Figure 21. DNS settings

Under Provider IP addresses, add, edit, or remove DNS server IP addresses as required.

To add a DNS server, select Add provider IP address and enter the IP address. Select Add.

Under Search domains, add, edit, or remove DNS search domains as required.

To add a search domain, select Add search domain and enter the domain name. Select Add.

Select Save to save the DNS settings.

Choose Administration > System Settings.

Under NTP, select Edit.

If the NTP server requires authentication, add the authentication key:

To add a new NTP server, select Add NTP host name. To edit an existing NTP server, choose Edit from the corresponding …​ menu.

Enter the NTP server hostname or IP address.

If you configured authentication, choose the corresponding Key ID.

Enable Preferred if this server should be the preferred NTP server.

Select Add.

Select Save to save the settings.

Choose Administration > System Settings.

Under Proxy configuration, select Edit.

Select Add to configure a new proxy, or select the edit icon for an existing proxy.

For Type, choose HTTP, HTTPS, or HTTP and HTTPS.

Enter the proxy server URL or IP address and port.

For Authentication, select one of the following:

Under Ignored hosts, add or edit any domains or IP addresses that should bypass the proxy.

Select Save.

After you save the proxy settings, Crosswork AI restarts the LLM proxy service. Wait for the restart to complete before configuring or verifying LLM provider connectivity.

Choose Administration > System Settings.

Under Pre-login disclaimer notification, select Edit.

Enter the message that you want to display to users before sign-in.

Select Save to save the message.