Cisco Security Cloud Control: Mesh Policy Engine

PDF

Cisco Security Cloud Control: Mesh Policy Engine

Manage credentials

Want to summarize with AI?

Log in

Manage credentials that Mesh Policy Engine uses to connect to install targets and intermediary managers through the interface or API.


To securely connect to the install targets, Mesh Policy Engine must authenticate the install targets using their credentials. Create a local copy of your credentials using JSON. Each credential is a reusable object that you can use for one or more install targets by name. This procedure lets you upload all of your credentials in bulk. If you want to update a credential, you need to paste in the complete credential set; Mesh Policy Engine replaces any existing credentials with the ones you upload.

Note

You don't need to add Firewall Threat Defense credentials because they are imported directly from Security Cloud Control.

Procedure

1.

For the Security Cloud Control Firewall Management intermediary manager for ASA, generate a TOKEN type credential.

  1. From the Security Cloud Control Home page, click Firewall.

  2. Choose Administration > API User Management, and click the Add icon (Add icon).

  3. Specify a Username, choose the Deploy Only Role, and click Add.

    Figure 1. API username and role
    API username and role
  4. Click Generate API Token.

    Figure 2. Generate API token
    Generate API token
  5. Click Copy API Token and save it for use to add to the credentials, and then click OK.

    Figure 3. Copy API token
    Copy API token

    Use this token in your local JSON credentials file.

2.

Create a local JSON file with your named credential objects.

Use the following JSON example showing the two credential types, USERNAME_PASSWORD and TOKEN:


{
  "integrationCredentials": {
    "Credential_1": {
      "type": "USERNAME_PASSWORD",
      "usernamePasswordCredentials": {
        "username": "username_1",
        "password": "password_1"
      }
    },
    "Credential_2": {
      "type": "TOKEN",
      "tokenCredentials": {
        "token": "token_1"
      }
    }
  }
}
3.

From the Security Cloud Control Home page, click Mesh Policy Engine.

4.

Choose Install Targets > Credentials > Manage Credentials.

5.

Paste the JSON text for all credentials into the window and click Submit.

Figure 4. Client Credentials
Client Credentials

When you add install targets and topology, you will refer to the credential name. In the above graphic, the name shown is "fw-mgr."