• Following are common steps for configuring credentials for SNMP versions v1 and v2.

1. Enter the following information in ADD CREDENTIAL screen:

   Field Name	Field Type	Description
   Credential Type	Dropdown	SNMP
   Name	String	Provide a name for the credential.
   Description	String	Provide a brief description about the credential.
   SNMP Version	Dropdown	Select a version. Default is V1. Note: For Version V3, the input fields vary. For more information, see SNMP field values.
   Port	Integer	Enter the port number. Default is 161. Agent receives requests on UDP port 161. For more information, see SNMP field values.
   Community	String	Enter the community string. Default is public.
   Password Vault (Optional)	Checkbox	Select the checkbox. The Integration and Policy Mapping dropdowns are displayed. All installed Password Management integrations are listed in the Integrations dropdown. Select integration from Integration dropdown. Select vault policy from Policy Mapping dropdown.
   Connection Timeout(ms)	Integer	Specify the connection timeout in milliseconds.

   
   
   

2. Click SAVE. The credential is saved and listed on CREDENTIALS listing screen.

SNMP v3

SNMPv3 is a user-based security model. It provides secure access to the devices by combining authenticating and encrypting packets over the network. The security features provided in SNMPv3 are message integrity, authentication, and encryption.

• To configure credentials for SNMP version v3:

1. Enter the following information in ADD CREDENTIAL screen:

   Field Name	Field Type	Description
   Credential Type	Dropdown	SNMP
   Name	String	Provide a name for the credential.
   Description	String	Provide a brief description about the credential.
   SNMP Version	Dropdown	V3 See SNMP field values.
   Port	Integer	SNMP Agent port. The default port is 161.
   Context	N/A	Specify context name (an octet string) that identifies the collection of management information accessible by an SNMP entity.
   SNMPV3 User Name	N/A	Enter the user name configured on the target device.
   Security Level	Dropdown	Select an option. Based on the selection, the fields to enter will change. NOAUTHNOPRIV: Communication without Authentication and Privacy AUTHPRIV: Communication with Authentication and Privacy AUTHNOPRIV: Communication with Authentication and without Privacy
   Authentication Protocol	MD5 SHA SHA224 SHA256 SHA384 SHA512	Authentication in an SNMPv3 uses an encryption algorithm to determine if the data is from a valid source. The encryption algorithms for authentication: Message Digest Algorithm: Generates a 128-bit (16 bytes) message digest. Secure Hash Algorithm: Generates a 160-bit (20 bytes) message digest. MD5: Message Digest 5 - Older hash function, less secure but still supported. SHA: SHA-1 – More secure than MD5, commonly used. SHA224: SHA-2 variant with 224-bit output. SHA256: Stronger SHA-2 variant with 256-bit output (recommended for higher security). SHA384: Even stronger SHA-2 variant. SHA512: Most secure in this list; used in environments requiring high-level security. Tip: Use SHA256 or higher if your device supports it and security is a concern. Use SHA or MD5 for compatibility with older devices.
   Password Vault (Optional)	Checkbox	Select this checkbox to securely retrieve the SNMPv3 authentication credentials from the configured password vault. The Integration and Policy Mapping dropdowns are displayed. All installed Password Management integrations are listed in the Integrations dropdown. Select integration from Integration dropdown. Select vault policy from Policy Mapping dropdown.
   Authentication Password	N/A	Enter the Authentication password.
   Confirm Authentication Password	N/A	Re-enter authentication password for validation.
   Privacy Protocol	AES-128 AES-192 AES-192-C AES-256 AES-256-C DES 3DES	Privacy in SNMPv3 uses an encryption algorithm to encode the contents of an SNMPv3 packet. This encoding is used to verify that the content cannot be viewed by unauthorized entities when routed over the network. Advanced Encryption Standard (AES 128) is a 128-bit standard, cryptographic algorithm that encrypts and decrypts data. Advanced Encryption Standard (AES 192) is a 192-bit standard, cryptographic algorithm that encrypts and decrypts data. AES-192 using Cisco-specific conventions – supported by some Cisco devices. Advanced Encryption Standard (AES 256) is a 256-bit standard, cryptographic algorithm that encrypts and decrypts data. AES-256 using Cisco-specific conventions – for Cisco compatibility. Data Encryption Standard (DES) is a 64-bit standard that encrypts and decrypts data. Triple DES – applies DES three times for improved security, but less efficient than AES.
   Privacy Password	N/A	Enter the privacy password.
   Confirm Privacy Password	N/A	Re-enter authentication password for validation.
   Connection Timeout(ms)	N/A - Default value: 1000 milliseconds	Provide a maximum time period for discovery. If the gateway does not get a response from the device after 1000 milliseconds, it terminates the discovery.

   
   
   

2. Click SAVE. The credential is saved and listed on CREDENTIALS listing screen.

1. Enter the following information in CREDENTIALS screen:

   Field Name	Field Type	Description
   Credential Type	Dropdown	SSH
   Name	String	Provide a name for the credential.
   Description	String	Provide a brief description about the credential.
   Authentication Type	Dropdown	PASSWORD or KEYPAIR types are available. For PASSWORD: Enter username, password, and reenter password in the User Name, Password, and Confirm Password fields. For KEYPAIR: Enter username in the User Name field. Upload a file through the Upload via file option or provide a link through the Already has a link option. Enter passphrase in the SSH Key Passphrase field. To ensure that you have typed the correct passphrase, click the eye icon to view the passphrase that you entered. Reenter the passphrase in Confirm SSH Key Passphrase field. To ensure that you have typed the correct passphrase, click the eye icon to view the passphrase that you entered.
   Password Vault (Optional)	Checkbox	Select the checkbox. The Integration and Policy Mapping dropdowns are displayed. All installed Password Management integrations are listed in the Integrations dropdown. Select integration from Integration dropdown. Select vault policy from Policy Mapping dropdown.
   Secure	Checkbox	Select this checkbox to enable secure connection.
   Port	Integer	Enter the port number. Default is 22.
   Connection Timeout(ms)	Integer	Specify the connection timeout in milliseconds. Example: 10000

   
   

2. Click SAVE. The credential is saved and listed in CREDENTIALS listing screen.

1. Enter the following information in CREDENTIALS screen:

   Field Name	Field Type	Description
   Credential Type	Dropdown	WINDOWS
   Name	String	Provide a name for the credential.
   Description	String	Provide a brief description about the credential.
   Domain Name	String	Enter domain name. Example: Administrator
   User Name	String	Enter username.
   Password Vault (Optional)	Checkbox	Select the checkbox. The Integration and Policy Mapping dropdowns are displayed. All installed Password Management integrations are listed in the Integrations dropdown. Select integration from Integration dropdown. Select vault policy from Policy Mapping dropdown.
   Password	String	Enter the password. To ensure that you have typed the correct password, click the eye icon to view the password that you entered.
   Confirm Password	String	Reenter the password. To ensure that you have typed the correct password, click the eye icon to view the password that you entered
   Connection Timeout(ms)	Integer	Specify the connection timeout in milliseconds. Example: 10000

   
   

2. Click SAVE. The credential is saved and listed in CREDENTIALS listing screen.