The appliance has two different command prompts:
<hostname>: This is the nsshell prompt.<hostname>(config): This is the configuration prompt (nsshell prompt in configuration mode).
You can login to the appliance using one of the two admin user accounts, nsadmin or nstransfer. The nsadmin user account has the privilege to operate and configure the appliance. Whereas the nstransfer user account can be used to upload logs from the appliance using protocols like SFTP, SCP, or FTP.
Note
Netskope recommends that you set a new password for nsadmin and nstransfer user accounts to secure your appliance. To learn more: Change the Appliance Password.
You can also configure SSH keys on the appliance to log in without a password. To learn more: Configure SSH Keys.
Change the Appliance Password
Important
It is mandatory to update your password every 90 days (starting from the day of the appliance installation or upgrade).
Passwords must have a minimum length of 14 characters and include at least:
- 1 number
- 1 uppercase letter
- 1 lowercase letter
- 1 special character or symbol
To change your appliance password:
- Connect to the virtual appliance console.
- Log into the virtual appliance using the credentials:
nsadmin/nsappliance. - Change your password by using the following command.
nsappliance> auth change-password nsadmin New password: <newpassword> Retype new password: <newpassword> passwd: password updated successfully nsappliance> auth change-password nstransfer New password: <newpassword> Retype new password: <newpassword> passwd: password updated successfully
- At the nsshell prompt, enter
configureto go into configuration mode. The command prompt changes to the nsshell configuration prompt (<hostname>(config)).
Configure SSH Keys
Note
The following steps illustrate how to add an SSH key for nsadmin and other user accounts except nstransfer. For instructions on adding an SSH key for the nstransfer user account, see Configure SSH Keys for Log Uploads.
To configure the SSH key on the appliance:
- Connect to the virtual appliance console.
- Create the SSH key by using the following command:
nsappliance(config)# add system ssh-public-keys
added index 0
nsappliance(config)# set system ssh-public-keys 0 user nsadmin
nsappliance(config)# set system ssh-public-keys 0 key
Enter one or more lines of input. When done, press Ctrl-D
ssh-ed25519 {SSH key content}
nsappliance(config)# save
You can now login to the appliance with the SSH key.
To create a user that uses the SSH key on the appliance:
- Connect to the virtual appliance console.
- Create the new user by using the following command:
nsshell> auth nsshell-user add username newuser
nsappliance(config)# add system ssh-public-keys
added index 2
nsappliance(config)# set system ssh-public-keys 2 user newuser
nsappliance(config)# set system ssh-public-keys 2 key
Enter one or more lines of input. When done, press Ctrl-D
ssh-ed25519 {SSH key content}
nsappliance(config)# save
You can now log in to the appliance as this user with the SSH key.