Skip to main content
sw408b
sw408b
New Member
August 31, 2018
Question

System admin password encrypt

  • August 31, 2018
  • 1 reply
  • 9613 views

Please tell us how to encrypt the system admin password.

set strong-crypto disable

admin password Encryption is AES 128? AES 256?

Is it possible to change the encryption algorithm?

Please help me

    1 reply

    Alexis_G
    Alexis_G
    New Member
    August 31, 2018

    https://cookbook.fortinet.com/increasing-the-encryption-level/

     

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    August 31, 2018

    That cookbook article refers to HTTPS and SSH admin access. It's not about the stored passwords, PSKs, certs...

     

    You cannot influence how passwords are stored in the config or in memory. If we knew the algorithm we could possibly re-engineer the cleartext password from the stored ENC string which would be detrimental in most cases.

    I know of no other vendor who would allow this freedom, or document these details, in a security device.

    emnoc
    emnoc
    New Member
    August 31, 2018

    [I know of no other vendor who would allow this freedom, or document these details, in a security device.]

     

    Cisco and Juniper password some types can be backwards engineer. Forcepoint NGFW password are store in a  posgresql.db with a salt, and hashed_password.

     

    So I would be " loose to say";    'no other vendor offers this freedom'  ;)

     

    Ken Felix

     

    Terms & ConditionsAccessibility statement