You configure Common Criteria superusers with the superuser login class. For example:
- [edit]
- system {
-
- login {
-
- user CC-superuser {
- full-name “Common Criteria Super User”;
- uid 1001;
- class superuser;
-
- authentication {
- encrypted-password “$1$pfKfjbHo0rjnnKL”; #
SECRET-DATA
- }
- }
- }
- }
Superusers have all permissions, including the ability to change the router configuration.
![]() |
Note: When setting a password using a pre-encrypted format, the system manager is responsible for meeting or exceeding the minimal password strength requirements outlined in Protecting Management Connections. |