Skills/New skill Drafted from CASE-4182 by the agent

Security · owner Trung D.

VPN credential rotation, two-store firmware

The agent wrote this from your 42 minutes of work. Check it, test it, and it joins the library every agent draws on.

  1. Step {{st.n}}{{st.label}}
    2.

Use it when

An SSL VPN on firmware from before 2020 keeps a second credential store, and the shared credential is older than 90 days.

It needs to know

VPN vendor and firmwareAdmin accessCredential ageDaily users

Steps

  1. Find the second credential store in the configuration backup
  2. Create a new credential; update the second store first
  3. Push the new connection profile to every daily user
  4. Test the connection from two devices
  5. Revoke the old credential
  6. Confirm every daily user reconnects

Customer approval

Always required, because it changes remote access.

Counts as done when

All daily users reconnect and the old credential is refused.

Test

3 of 3 passed Replayed on sandbox copies of three customer setups. No lockouts; 6 minutes on average. Not tested yet. We replay it on sandbox copies before anyone reviews it.

Reach

17 customers match today Barcelona Travel, Atlas Hotels, Nexo Dental, Grupo Ribera and 13 more.

Second pair of eyes

Ana R., senior security engineer Approved
See it in the library