Configure Known Good Files

About Known Good Files

Crosswork Cloud Trust Insights automatically interprets and verifies the integrity of Known-Good-Values (KGVs) measurements from Cisco IOS XR routers. Crosswork Cloud Trust Insights also allows you to designate files that you have self-verified and qualified as having known good data.

Maintaining a list of known good files can help you ensure your devices are running the configuration you expect. See Add Known Good Files for more information.

Add Known Good Files

You can add known-good files to Crosswork Cloud Trust Insights so you can more easily locate and track them.

Procedure

Step 1

In the main window, click Trust Insights > Configure > Known Good Files.

Step 2

Click Add Files.

Step 3

Select a device for which you want to save known-good files.

Step 4

To filter the device table, click Add Filter, enter the filter value, then click Save.

Step 5

After you select a device, click Next.

Crosswork Cloud Trust Insights displays a list of dossier collections for the device you specified.

Step 6

To find a dossier collection for a specific time frame, select a value from the Timeframe drop-down list.

An orange icon appears next to a dossier collection if the signing key changed on the device. Hover your cursor over an icon to display details about what changed.

Step 7

Select a dossier collection, then click Next.

Crosswork Cloud Trust Insights displays a list of files that have different KGVs than those already known (up to a maximum of 1,000 files).

Step 8

Select one or more files (up to a maximum of 1,000 files) that you want to designate as known-good files, then click Submit.

To add more than 1,000 files, repeat Step 8 as many times as needed.

The files you selected appear in the Known-Good files table.

Disable Known Good Files

You can disable any previously added known good files. If you aren't sure you want to delete a known good file, you can disable it to leave it in the table of Known Good Files, but the system will no longer recognize the known good files.

Procedure

Step 1

In the main window, click Trust Insights > Configure > Known Good Files.

Step 2

Select one or more files, then click Disable.

Crosswork Cloud Trust Insights changes the state of the file to Disabled.

Delete Known Good Files

You can delete any previously added known good files. If you are unsure you want to delete a known good file, you can disable it. See Disable Known Good Files for more information.

Procedure

Step 1

In the main window, click Trust Insights > Configure > Known Good Files.

Step 2

Select one or more files, then click Remove.

Step 3

To confirm that you want to remove the known good files, click Remove.