Password and Database Management on NSO.

rmaqsood — Fri, 01 Mar 2019 12:10:39 GMT

Hi,

I am VSE working in GVE, handling a case regarding NSO and its password and database management. I have been asked the following questions by the case requestor:

1. Are any passwords stored in the DB of NSO? If so, how are they stored?

2. Will any restricted data held in the NSO DB be encrypted at application layer?

3. What accounts will be created for access to the DB? Will these be local accounts? Or can we use LDAP or at least have the passwords in our password management system?

Can you please answer these questions or provide me with guidance to the right resources?

Many thanks

Re: Password and Database Management on NSO.

KJ Rossavik — Wed, 23 May 2018 14:19:11 GMT

At a high level, NSO follows the CSDL process https://www.cisco.com/c/en/us/about/security-center/security-programs/secure-development-lifecycle.html?dtid=osscdc000283

That has explicit requirements regarding encryption of sensitive data such as passwords

Also, you can integrate NSO with external authentication systems, e.g. via LDAP

Cheers,

KJ.

topic Re: Password and Database Management on NSO. in NSO Developer Hub Discussions

Password and Database Management on NSO.

Re: Password and Database Management on NSO.