: Configure the ZTP Installer Administrator Account
Focus
Focus

Configure the ZTP Installer Administrator Account

Table of Contents

Configure the ZTP Installer Administrator Account

Configure the ZTP installer admin for on-boarding new ZTP firewalls.
The ZTP installer admin user is an administrator account created for non-IT staff or installation contractor to on-board new ZTP firewalls. The installer admin uses an automatically created
installeradmin
admin role to limit visibility into the Panorama web interface and only allow the installer the ability to enter the ZTP firewall claim key and serial number on Panorama.
If you want to configure remote authentication instead of a locally defined administrator, you can configure authorization for the ZTP installer administrator account using RADIUS and TACACS+ authentication so long as you pass the
installeradmin
admin role to the Vendor-Specific Attributes (VSA) for the administrator.
To configure authorization for the ZTP installer admin using SAML authentication, map the
installeradmin
admin role to the
SAML Response Attribute
and specify the attribute as
Admin Role Attribute
in the SAML authentication profile.
  1. Select
    Panorama
    Admin Roles
    and verify that the
    installeradmin
    admin role is created.
    The
    installeradmin
    is automatically created after you successfully install the ZTP plugin on Panorama.
  2. Configure the ZTP installer administrator user.
    1. Select
      Panorama
      Administrators
      and
      Add
      a new admin user.
    2. Enter a descriptive
      Name
      for the ZTP installer admin user.
    3. Enter a secure
      Password
      and
      Confirm Password
      .
    4. For the
      Administrator Type
      , select
      Custom Panorama Admin
      .
    5. For the
      Profile
      , select
      installeradmin
    6. Click
      OK
      to save your configuration changes.
  3. Select
    Commit
    and
    Commit to Panorama
    .

Recommended For You