Create the Keys for the Server and the Client
To protect the data transmitted between the server and client, you create a
hashing key and an encryption key. The server uses the hashing key
to protect the integrity of the wanboot program. The server uses the encryption key
to encrypt the configuration and installation data. The client uses the hashing key
to check the integrity of the downloaded wanboot program. The client uses
the encryption key to decrypt the data during the installation.
First, you assume the same user role as the web server user.
In this example, the web server user role is nobody.
wanserver-1# su nobody
Password:
Then, you use the wanbootutil keygen command to create a master HMAC SHA1 key
for wanserver-1.
wanserver-1# wanbootutil keygen -m
Then, create a hashing key and an encryption key for wanclient-1.
wanserver-1# wanbootutil keygen -c -o net=192.168.198.0,cid=010003BA152A42,type=sha1
wanserver-1# wanbootutil keygen -c -o net=192.168.198.0,cid=010003BA152A42,type=3des
The previous command creates a HMAC SHA1 hashing key and a 3DES
encryption key for wanclient-1. 192.168.198.0 specifies the subnet of wanclient-1, and 010003BA152A42 specifies the
client ID of wanclient-1.