topic Error pbkdf2 malformed when deploying config on CSM in Network Security

Error pbkdf2 malformed when deploying config on CSM

Aishah88 — Mon, 15 Apr 2024 05:00:15 GMT

Hi, I'm deploying config from CSM but received error :

An error response from the device prevented successful completion of this operation. The device provided the following description: enable password ****** pbkdf2 PBKDF2 hashed enable password ****** is malformed

What caused by the error and what I need to do?

Thank You

Re: Error pbkdf2 malformed when deploying config on CSM

Marius Gunnerud — Mon, 15 Apr 2024 06:48:21 GMT

What version CSM and ASA are you using?

is this a new enable password you are creating or are copying it from one ASA to another? Depending on the CSM version (and possibly the ASA version also), the CSM might be sending the password hash as MD5. Or the other way around, the ASA might be expecting the password hash to be MD5.

Re: Error pbkdf2 malformed when deploying config on CSM

tvotna — Mon, 15 Apr 2024 07:44:50 GMT

Adding to @Marius Gunnerud reply. There was a bug in the past: CSCwa27320 CSM 4.19 Deployment Job is failed with ERROR "Malformed pbkdf2 hash". So far as I remember it was fixed in 4.25

Re: Error pbkdf2 malformed when deploying config on CSM

Aishah88 — Mon, 15 Apr 2024 07:45:33 GMT

Yes, I'm copying from one ASA to another. I will try to change to MD5 and will update here the result.

Thanks.

Re: Error pbkdf2 malformed when deploying config on CSM

Aishah88 — Tue, 16 Apr 2024 09:14:38 GMT

Hi, I didn't change the password as MD5. I'm delete and re-added back the device into CSM and it works now. I can make changes from CSM.