topic Re: FTD Admin Password Encryption in Network Security

FTD Admin Password Encryption

JH8286 — Tue, 04 Jul 2023 07:57:03 GMT

Hi - can anyone tell me if/how the local admin password on FTD devices is encrypted?

Is there any way to validate this (either way) via the CLI or FMC?

Many thanks

Re: FTD Admin Password Encryption

MHM Cisco World — Tue, 04 Jul 2023 10:46:03 GMT

sorry can you more elaborate ?

Re: FTD Admin Password Encryption

JH8286 — Tue, 04 Jul 2023 14:01:49 GMT

On IOS devices you can see the password encryption type e.g. 5, 7, 9 etc.

How is the password encrypted on a FTD device and how can this be demonstrated/viewed?

Thanks

Re: FTD Admin Password Encryption

MHM Cisco World — Tue, 04 Jul 2023 14:15:26 GMT

AES128, AES192, AES256, 3DES, or DES.

as I think there is not type like what we find in SW and router, in FPR there is algorithm as shown above.

Re: FTD Admin Password Encryption

JH8286 — Thu, 06 Jul 2023 13:57:29 GMT

Thanks - but how can this be demonstrated via command line or configuration setting? Is there cisco documentation I cant find?

Re: FTD Admin Password Encryption

Aref Alsouqi — Fri, 07 Jul 2023 15:50:07 GMT

That is a good question and I don't have an accurate answer to it, however, I believe the FTD relies on the underlying operating system to hash the admin password which is Linux. The recent releases of Linux would use SHA512 to hash the users passwords.