Configure User Account Details
The My Account page allows users to configure basic user information, SSH keys, and API tokens. Users can also view their assigned roles and associated privileges.
Configure privileges for a user to access Edges securely. This process requires a basic access level for the user. Set the access level during new user creation (under User Management) or modify it later. Only a Super user can modify a user's access level.
To access the My Account page, use the following steps:
- Select the User icon in the Global Navigation located at the top right of the screen.
- The following panel illustrates the User Information:
Figure 1. User Information 
- Select the My Account button. The following screen appears:
Figure 2. Profile Tab 
- It displays the Profile tab by default. User can update the following basic user details:
Table 1. Profile Tab - Options and Descriptions Option Description Username Displays the username, and it is a read-only field. Contact Email Enter the primary contact email address of the user. Current Password Enter the current password. New Password Enter the new password. Starting from the 4.5 release, the special character "<" in the password is no longer supported. In cases where users have already used "<" in their passwords in previous releases, they must remove it to save any changes on the page. Confirm Password Re-enter the new password. First Name Enter the first name of the user. Last Name Enter the last name of the user. Phone Enter the primary phone number of the user. Mobile Phone Enter the user's mobile number and country code. - Select the Role tab to view the existing user role and description. It also displays the privileges associated with the user role.
Figure 3. Role and Privileges Tab 
- Select the API Tokens tab to display the new token.
Figure 4. API Token Tab 
- Enter a Name and Description for the token, and then select the Lifetime from the drop-down menu.
- Select Generate Key.
- Select the SSH Key tab to configure a Secure Shell (SSH) key-based authentication. The SSH key-based authentication is a secure and robust authentication method to access VeloCloud Edges. It provides a strong, encrypted verification and communication process between users and Edges. Using SSH keys bypasses the need to enter login credentials manually and automates the secure access to Edges.
- The Edge and the Orchestrator must use Release 5.0.0 or later for this feature.
- Users with Operator Business or Business Specialist account roles cannot access Edges using key-based authentication.
Key-based authentication for Edge access generates a pair of SSH keys: Public and Private. The database stores the public key and shares it with the Edges. The local computer holds the private key; the user uses this key and the SSH username to access Edges.
Users can generate only one pair of SSH keys at a time. To add a new pair, delete the existing pair before generating the new one. The Orchestrator cannot recover lost private keys. In the event of a lost key, delete the existing entry and add a new key to regain access. Based on their roles, users can perform the following actions:- All users, except those with Operator Business or Business Specialist account roles, can create and revoke SSH keys for themselves.
- Operator Super users can manage SSH keys of other Operator users, Partner users, and Enterprise users, if the Partner user and Enterprise user have delegated user permissions to the Operator.
- Partner Super users can manage SSH keys of other Partner users and Enterprise users, if the Enterprise user has delegated user permissions to the Partner.
- Enterprise Super users can manage the SSH keys of all the users within that Enterprise.
- Super users can only view and revoke the SSH keys for other users. Enterprise and Partners Customers without SD-WAN service access can not configure or view SSH keys-related details.
Select the SSH Key tab, and then select the Generate Key button. The following screen appears:
Figure 5. SSH Keys Tab 
Table 2. SSH Keys Tab - Options and Descriptions Option Description User Name Displays the username, and it is a read-only field. Actions Select either one of the following options: - Generate key: This option generates a new pair of public and private SSH keys.
Note: The generated key gets downloaded automatically. By default, the generated SSH key is in a .pem file. If users are using a Windows operating system, ensure that users convert the file format from .pem to .ppk and then import the key. For instructions to convert .pem to .ppk, see Convert Pem to PpK File Using PuTTYgen.
- Enter key: This option pastes or enters the public key if users already have a pair of SSH keys.
PassPhrase If users select Generate key, then users must enter a unique passphrase to safeguard further the private key stored on their computer. Note: This optional field is available only if users select the Generate key action.Duration Select the number of days by which the SSH key must expire. - Select Generate Key.
Note: It creates one SSH Key per user.
- To deactivate an SSH token, select the Revoke button. A pop-up window appears to confirm the revoke operation. Select the checkbox, then select Revoke to permanently revoke the key. The SSH keys for a user are automatically deleted when:
- Users change the user role to Operator Business or Business Specialist because these roles cannot access Edges using key-based authentication.
- Users delete a user from the Orchestrator.
Note: When a user is deleted or deactivated from the external SSO providers, the user can no longer access the Orchestrator. However, the user's Secure Edge Access keys remain active until the user is explicitly deleted from the Orchestrator as well. Therefore, users must first delete the user from the IdP before deleting from the Orchestrator.
What to do next: Ensure that users enable secure Edge access for the Enterprise and switch the authentication mode from Password-based to Key-based. For additional information, see Enable Secure Edge Access for an Enterprise.