Overview

Objective

The purpose of this document is to assist new SEA administrators in onboarding their first Cisco IE network device to Cisco IoT Operations Dashboard and configuring the first remote session through Secure Equipment Acccess (SEA) service. Upon completion, the SEA administrator will be able to perform remote access to the required OT asset from an Internet-enabled device.

It’s a self-contained quick start guide designed to provide the shortest and most efficient path to achieving the objective.

For more details and advanced concepts, refer to the main documentation.

Introduction

Cisco Secure Equipment Access (SEA) service aims to provide customers and partners with remote access to specific industrial IoT resources for performing maintenance operations.

Enabling SEA on the IE switch

To enable SEA on an IE switch and perform a remote session with the connected assets, do the following steps:

  1. Create a device profile and add an IE switch to the Application Manager service

  2. Configure the IE switch and initiate a connection with the IoT Operations Dashboard

  3. Add an IE switch to the Secure Equipment Access service

  4. Configure remote sessions

Prerequisites

  • You must have a valid IoT OD organization (cloud tenant). If you don’t have one, send a request to mailto:iotod-account-request@cisco.com.

  • You must have an Application Manager admin and SEA System admin roles in the organization.

  • The IE switch has an SD card.

  • The IE switch requires a minimum IOS-XE version of 17.14.1.

  • The IE switch has connectivity to the Internet site us.ciscoiot.com or eu.ciscoiot.com, depending on the IoT OD cluster used.