Enabling the automatic SSH encryption key replacement

Last Updated : Jul 13, 2023 |

About this task

Configure the automatic encryption key replacement for SSH connection between Configuration Server and Routing Core Server instances. You can configure the key replacement period according to your company security policy. You can also specify the time of the day when the contact center replaces the keys.

Procedure

  1. Access the active Configuration Server.
  2. To activate the automatic SSH key replacement, run the following command:

    ./installMega.sh sshmgr configure_auto_keys -e <period> <time of day>

    • <period> is the key replacement period in days. You can type a number from 1 through 30.

    • <time of day> is the time when the contact center replaces the SSH keys. The value range is 0 through 23.

    For example, to automatically replace SSH keys every 2 days at 10 a.m., run the following command:

    ./installMega.sh sshmgr configure_auto_keys -e 2 10

  3. To check whether automatic key replacement is enabled, run the following command:

    ./installMega.sh sshmgr show

  4. To check whether an enabling job entry is created in the cron job log, run the following command:

    cat /etc/crontab