Adding a secret

You can add up to 500 secrets to the application.

To add a secret:

1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
2. Select Settings → Secrets.
3. Open the details area by clicking the Add secret link.
4. Enter the secret name.

   The secret name must be unique (must not match the names of other secrets) and must contain from 8 to 256 characters. You can use letters, numerals, a space, and the following special characters: ! @ # № $ % ^ & ( ) [ ] { } / \ : ; , . - _. The secret name must begin and end with any permitted character except space.

5. Enter the user name to be used for remote connections to devices.

   A user name can contain Latin characters, numbers, periods, and the following special characters: _ and -. The name must begin with a letter, and end with any supported character except a period.

6. Select the secret type:
   • If the secret contains a user password, select the User password type and enter the password.

     The password must contain from 8 to 256 ASCII characters.

   • If the secret contains a certificate private key, select the Private key type and place the key contents in the text field.

     You can manually enter the sequence of characters comprising the key or upload the key from the certificate file by clicking the Copy from file link. Files in the CRT, PEM, CER formats are supported for uploading private keys. If the private key file is protected by a password phrase, before uploading the key enter the password phrase in the Passphrase field.

     To use the certificate private key, copy the certificate public key to all devices to which the remote connections using the secret are established. Copying the public key to devices is performed without the participation of Kaspersky Industrial CyberSecurity for Networks.

7. If necessary, enter an additional password in the Root user password field.

   An additional password may be required for scans based on certain security audit rules which are used when connecting to the network equipment with administrator privileges (with root privileges). In such cases, access is requested on behalf of the root account or on behalf of the account that is set on the network equipment to process requests with administrator privileges.

8. Click Save.