Contents

Title and Copyright Information

About This Guide

1 ISR Security Overview

• Secure Installation
  • Critical Security Services and Settings
    • Creating and Using a Non-Root User Account
    • File Permissions
    • Secure Passwords
• Firewalld Configuration Overview
  • ISR Firewalld Configuration
  • Modifying ISR Firewalld Configuration
• ISR Port Usage
• ISR Certificates
  • Imported Certificates for Secure Communications
  • Signing Keys
    • Additional CSR Details
    • Examples of Generating ISR Component CSRs
• Managing Expired Keys and Certificates
  • Checking the Expiration Dates of ISR Keys
    • RSS
    • Dashboard
    • FACE
  • Updating Expiring Self-Signed Keys
    • Expiring RSS Certificate
    • Expiring Dashboard Certificate
    • Expiring FACE Certificate
• Configuring Reduced Security
  • Configuring FACE API Reduced Security
• ISR Dashboard Cookies
• Supported Ciphers