Users Guide

572 | Management Access Dell PowerConnect W-Series ArubaOS 6.1 | User Guide
5. To configure the management user, navigate to the Configuration > Management > Administration page.
a. Under Management Users, click Add.
b. Select Certificate Management.
c. Select WebUI Certificate.
d. Enter the username.
e. Select the user role assigned to the user upon validation of the client certificate
f. Enter the serial number for the client certificate.
g. Select the name of the CA that issued the client certificate.
h. Click Apply.
In the CLI
web-server
mgmt-auth certificate
switch-cert <certificate>
mgmt-user webui-cacert <ca> serial <number> <username> < role>
Public Key Authentication for SSH Access
The controller allows public key authentication of users accessing the controller using SSH. (The default is for
username/password authentication.) When you import an X.509 client certificate into the controller, the
certificate is converted to SSH-RSA keys. When you enable public key authentication for SSH, the controller
validates the client’s credentials with the imported public keys. You can specify public key authentication only, or
public key authentication with username/password (if the public key authentication fails, the user can login with
a configured username and password).
To use public key authentication, you must do the following:
1. Import the X.509 client certificate into the controller using the WebUI, as described in “Importing
Certificates” on page 583.
2. Configure SSH for client public key authentication. You can optionally also select username/password
authentication.
3. Configure the username, role and client certificate.
In the WebUI
1. Navigate to the Configuration > Management > General page.
2. Under SSH (Secure Shell) Authentication Method, select Client Public Key. You can optionally select
Username/Password to use both username/password and public key authentication for SSH access.
3. Click Apply.
4. To configure the user, navigate to the Configuration > Management > Administration page.
a. Under Management Users, click Add.
b. Select Certificate Management.
c. Select SSH Public Key.
NOTE: ArubaOS recommends that the username and role for SSH be the same as for the WebUI Certificate. You can optionally use
the checkbox to copy the username and role from the Web Certificate section to the SSH Public Key section.