Access Security Guide K/KA/KB.15.15

Figure 7 Output for show include credentials command
Executing include-credentials or include-credentials
store-in-config
When include-credentials or include-credentials store-in-config is executed
on a switch for the first time, the passwords and SSH keys are not currently stored in the
configuration file (not activated.) This prompts the a caution message.
Figure 8 Caution message
This caution message can also appear if you have successfully executed the [no]
include-credentials store-in-config command.
Storage states when using include-credentials
The following table shows the states of several access types when the factory default settings are
in effect or when include-credentials is enabled or not enabled.
Table 1 Switch storage states
No Include- Credentials
Executed
Include-Credentials
Disabled but ActiveEnabledFactory DefaultType
one set for switch
—[no]
Same as
includecredentials
one set per — stored
config — stored in
config'— displayed in
config
single set for switch —
stored outside config —
not displayed in config
file
manager/operator
passwords &
port access
credentials
displayed in config
enabled— not
displayed in config
one set for switch— no
credentials displayed in
config
same as
includecredentials
enabled — not
displayed in config
one set per — stored
config — stored in
flash— displayed in
config
one set for switch —
stored in flash— not
displayed in config
SSH Public Key
no credentials
displayed in config
Same as
includecredentials
stored in flash—
displayed in config
stored in flash— not
displayed in config
SNMPv3 auth
and priv
enabled— not
displayed in config
Include-Credentials 33