Export users and encrypted passwords

[Anonymous user]

I'm trying to setup a bunch of APC PDUs and would like to ensure that each of them have the same set of user accounts with the same passwords. (The PDUs are on a private subnet with limited access.)

The default "Download User Configuration File (ini)" does not contain any user information.

Is there a way to download all the users and then be able to upload that file to other PDUs?

[BillP · Accepted solution]

Hi Robert,

For mass configuration of user settings, I would recommend configuring one of the PDUs to your liking via the web interface (or the CLI) and then downloading the config.ini file which can be pushed to the other devices. This is applicable to gen 1 pdus and gen 2 pdus with older version 5 firmware.

Since you mentioned "the default download user configuration file does not contain any user information", I think you have gen 2 pdus (skus that start with AP84XX, AP86XX, AP88XX or AP89XX) with the current version 6 firmware (green web interface). This has a seperate .csf file in addition to the config.ini file. The config just does the default user settings. See the two kbases below for additional help.

FA176542

FA156117

Let me know if you have any further questions.

Thanks,

Tommy

[BillP]

Unfortunately, for security reasons, we do not allow usernames and passwords to be exported for mass configuration or download anymore. This started with passwords but now applies to both usernames and passwords in v6.X.X firmware. user -l command will show you usernames in the CLI though in a list. .csf files Tommy mentioned will be upload only.

[Anonymous user]

Thank you Tommy and Angela.

Is there any way to encrypt the password in the .csf file? I want to version control the configuration and user files in git, and storing password in clear text is really unadvisable.

[BillP]

Hi Robert,

No, we don't have a way to encrypt this since the file (a plain text file) is something the user makes and manages. The credentials are certainly encrypted on the device itself though.