Skip to main content
sw408b
New Member
August 31, 2018
Question

System admin password encrypt

  • August 31, 2018
  • 3 replies
  • 9634 views

Please tell us how to encrypt the system admin password.

set strong-crypto disable

admin password Encryption is AES 128? AES 256?

Is it possible to change the encryption algorithm?

Please help me

    3 replies

    Alexis_G
    New Member
    August 31, 2018
    ede_pfau
    SuperUser
    SuperUser
    August 31, 2018

    That cookbook article refers to HTTPS and SSH admin access. It's not about the stored passwords, PSKs, certs...

     

    You cannot influence how passwords are stored in the config or in memory. If we knew the algorithm we could possibly re-engineer the cleartext password from the stored ENC string which would be detrimental in most cases.

    I know of no other vendor who would allow this freedom, or document these details, in a security device.

    emnoc
    New Member
    August 31, 2018

    [I know of no other vendor who would allow this freedom, or document these details, in a security device.]

     

    Cisco and Juniper password some types can be backwards engineer. Forcepoint NGFW password are store in a  posgresql.db with a salt, and hashed_password.

     

    So I would be " loose to say";    'no other vendor offers this freedom'  ;)

     

    Ken Felix

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!