System admin password encrypt

[sw408b]

Please tell us how to encrypt the system admin password.

set strong-crypto disable

admin password Encryption is AES 128? AES 256?

Is it possible to change the encryption algorithm?

Please help me

[Alexis_G]

https://cookbook.fortinet.com/increasing-the-encryption-level/

[ede_pfau]

That cookbook article refers to HTTPS and SSH admin access. It's not about the stored passwords, PSKs, certs...

You cannot influence how passwords are stored in the config or in memory. If we knew the algorithm we could possibly re-engineer the cleartext password from the stored ENC string which would be detrimental in most cases.

I know of no other vendor who would allow this freedom, or document these details, in a security device.

[emnoc]

[I know of no other vendor who would allow this freedom, or document these details, in a security device.]

Cisco and Juniper password some types can be backwards engineer. Forcepoint NGFW password are store in a  posgresql.db with a salt, and hashed_password.

So I would be " loose to say";    'no other vendor offers this freedom'  ;)

Ken Felix