The Crypto Officer sets up JUNOS-FIPS Users. JUNOS-FIPS Users can be granted permissions normally reserved for the Crypto Officer, for example, permission to zeroize the system and individual AS-II FIPS PICs. The following is an example JUNOS-FIPS User configuration:
- [edit system]
- login {
-
- user junos-fips-user {
- uid 6401;
- class junos-fips;
-
- authentication {
- encrypted-password “$sha1$20532$dead$beefcafebabe�?;
- }
- }
-
- class junos-fips {
- permissions [ clear configure network reset view view-configuration
];
- }
- }