Enabling or disabling CAC/PIV for certificate authentication using the configuration menu

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:

$ ssh npadmin@10.1.0.1

or

$ ssh npadmin@exampleFQDN

Enter privileged mode:

npadmin@ia> enable

Enter the npadmin password. The password can be 5 to 24 characters long.

[sudo] password for npadmin: <password>

Enter configuration mode:

npadmin@ia# configure system

Enter configuration CAC mode.

npadmin@ia(config)# authentication

In the CAC/PIV configuration menu, select 1 to access the Authentication Mechanism menu.

Authentication Mechanisms: 1: PAM 2: LDAP 3: Radius 4: TACACS+ 5: Active Directory 6: PKI 7: PKI w/ LDAP 8: PKI w/ Active Directory C: Cancel changes and exit

Depending on the external user management system you use, select a PKI option:

In CAC/PIV configuration menu, select 2 to configure your selected PKI authorization method.

In the PKI configuration menu, select 1 and enter the status. If a valid CA-signed certificate is not uploaded to the IA, you will not be able to enable CAC/PIV authentication.

Select Q to save your settings and exit the menu.