Entering Common Criteria Operational mode

When the device is in Common Criteria Administrative mode, perform the following steps to place the device into Common Criteria Operational mode.

1. Configure the local user accounts as secure and delete non-secure user accounts. A local user account is secure when it has a password with characters from three or more character classes. These character classes are uppercase, lowercase, numeric, and ASCII non-alphanumeric characters.
2. Configure secure logging by setting up the encrypted Syslog server. For details, refer to Appendix C: Configuring an external Syslog Server with TLS support.
3. Use the enable aaa console command to ensure user authentication during the next reload. This also requires that you have enabled AAA authentication with the aaa authentication login default command.
4. Use the aaa authentication login privilege-mode command. It allows you to login directly to privilege mode.
5. Use the write memory command to save the configuration.
6. Reload the device.