Configure Password Encryption

YüksekDüzey 2Otomatikcisco-nxos

Açıklama

You can enable strong, reversible 128-bit Advanced Encryption Standard (AES) password encryption, also known as type-6 encryption. To start using type-6 encryption, you must enable the AES password encryption feature and configure a master encryption key, which is used to encrypt and decrypt passwords. Encryption is a good way to protect data that will be used later. Encrypted data can later be decrypted to its original value. Although encrypting passwords protects them, typically, an application uses the same encryption key for storing all user passwords. CIS marks this Manual; also confirm a master key is set ('show encryption service stat'). Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^feature password encryption aes\b

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! Configure a master key to be used with the AES password encryption feature. The key can contain between 16 and 32 alphanumeric characters key config-key ascii New Master Key: Retype Master Key: feature password encryption aes

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-nxosnetworkaaa
Referans: CIS Cisco NX-OS Benchmark v1.2.0 - 1.4.2 Configure Password Encryption

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target cisco-nxos --level 2