You configure Common Criteria read-only users with the read-only login class. For example:
- [edit]
- system {
-
- login {
-
- user CC-read-only-user {
- full-name “Common Criteria Read-only User”;
- uid 1003;
- class read-only;
-
- authentication {
- encrypted-password “$1$oWlSRkewLtHeysAy”; #
SECRET-DATA
- }
- }
- }
- }
Read-only users have only view permission and can only view current values and statistics.
![]() |
Note: When setting a password using a pre-encrypted format, the system manager is responsible for meeting or exceeding the minimal password strength requirements outlined in Protecting Management Connections. |