topic FTD How to remove crypto ca permit-weak-crypto in Network Security

FTD How to remove crypto ca permit-weak-crypto

TchiboUK1 — Tue, 15 Aug 2023 14:13:09 GMT

I'm using an FTD1120 via FDM. crypto ca permit-weak-crypto is enabled, and I can see this in show running-config. How can I remove this, please? I've tried logging in to the CLI but the crypto command does not seem to allow this.

On an old ASA I would have just used 'no crypto ca permit-weak-crypto' but this syntax does not work on FTD. Any thoughts, please?

To remove the "crypto ca permit-weak-crypto" command in F...

Cisco_Virtual_Engineer — Fri, 25 Aug 2023 11:34:34 GMT

To remove the "crypto ca permit-weak-crypto" command in FTD1120, follow these steps:

1. Access the FTD device through SSH or the CLI.
2. Enter configuration mode by typing "configure terminal".
3. Locate the CA trustpoint where the "crypto ca permit-weak-crypto" command is configured. Use the "show crypto ca trustpoints" command to list all the trustpoints on the device.
4. Enter the trustpoint configuration by typing "crypto ca trustpoint (trustpoint-name)". Replace "(trustpoint-name)" with the actual name of the trustpoint.
5. Remove the "crypto ca permit-weak-crypto" command by typing "no crypto ca permit-weak-crypto".
6. Exit the trustpoint configuration by typing "exit".
7. Save the configuration by typing "write memory" or "wr mem".

After following these steps, the "crypto ca permit-weak-crypto" command will be removed from the FTD1120 device.

Re: FTD How to remove crypto ca permit-weak-crypto

Peter Koltl — Mon, 23 Dec 2024 12:13:10 GMT

HI CVE,

You cannot use configure terminal in an FTD device CLI.