[VPN] CryptoCluster 2500 Recover Mode doesn't work

[Joel Snyder]

 >   We've recently acquired two CryptoCluster 2500's with working flash 
cards
 > and kernel images.

You need to boot into a valid kernel.  When you boot the system up 
without the flash in it, you should get a Boot: prompt.  Push the FLASH 
back in.  Then use "*" to give a list of valid files on the FLASH.  Pick 
one of the kernels (a filename ending in .SR, probably something like 
cc-v4.0-1.sr) and boot that file with a "-w" switch at the end, meaning 
"run the configuration wizard."  The Configuration Wizard blasts out all 
the valid configuration files and then the next time you boot your box 
it should be all minty tasting and factory fresh.

There is no way to 'discover' or 'recover' the password which will work 
on those boxes (short of a dictionary attack).

jms


Matt Stancliff wrote:
> Hello,
> 
>   We've recently acquired two CryptoCluster 2500's with working flash cards
> and kernel images.  The kernel images work fine, but we can not get access
> to the box because of the required logins (to which we do not know the
> usernames or passwords).
> 
>   I have tried to use the recover mode (start with no flash, * enter enter)
> then both of the boxes tell me that the "ENGINEERING KEY" is valid, but then
> it says a key's signature failed.  The boxes will not let me enter recovery
> mode with the failed key.
> 
>   Also, because the flash cards use a proprietary file system, I can't mount
> them in anything else to just copy or overwrite the offending files.
> 
>   Any help with finding out how to get into recovery mode or how to get by
> the login would be greatly appreciated.
> 
> 
> Thank you very much for your time,
> 
> -Matt Stancliff


-- 
Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719
Phone: +1 520 324 0494 (voice)  +1 520 324 0495 (FAX)
jms at Opus1.COM    http://www.opus1.com/jms    Opus One