topic Re: How do I get the Pre-Shared Key in Plain text rather than in in Network Security

How do I get the Pre-Shared Key in Plain text rather than in XXXXX form when I take backup and what is the best tool available to take the backup of my ASA boxes.

SeshiBhush — Mon, 11 Mar 2019 20:14:03 GMT

How do I get the Pre-Shared Key in Plain text rather than in XXXXX form when I take backup and what is the best tool available to take the backup of my ASA boxes.

Re: How do I get the Pre-Shared Key in Plain text rather than in

Jennifer Halim — Tue, 29 Mar 2011 05:04:51 GMT

The best tool to backup your ASA configuration is through the ASA Configuration backup tool itself.

ASDM --> Tools --> Backup Configurations --> and choose which files you want to backup

The backup file will be backup and zip, and if you open the zip file, it will contain the configuration files that has the pre-shared key in plain text.

Hope that helps.

Re: How do I get the Pre-Shared Key in Plain text rather than in

SeshiBhush — Tue, 29 Mar 2011 06:27:57 GMT

Thank you for the reply Jennifer,

I tried from the ASDM and the zip file is only showing the Pre-Shared key in Start ( * ). It is not showing up in plain text.

Do you have any information about any other tool like Cisco Works that can help me? Can you tell me the information along with details like version number also?

Re: How do I get the Pre-Shared Key in Plain text rather than in

Jennifer Halim — Tue, 29 Mar 2011 07:59:29 GMT

I have just tested the backup configuration and the zip file that contains the pre-shared key is in the actual plain text format.

What version of ASDM are you running?

Did you back up both the running and start up config as well? Can you double check if it's in plain text? I just did exactly the same and I saw the plain text format of the pre-shared key.

Also if you grab the pre-shared key from command line, it will also show you the plain text.

Here is the example that I have run:

ASA# more system:running-config | b tunnel-group
tunnel-group 1.1.1.1 type ipsec-l2l
tunnel-group 1.1.1.1 ipsec-attributes
pre-shared-key cisco123

Re: How do I get the Pre-Shared Key in Plain text rather than in

SeshiBhush — Tue, 29 Mar 2011 08:18:20 GMT

I am using ASDM 6.1

Re: How do I get the Pre-Shared Key in Plain text rather than in

SeshiBhush — Tue, 29 Mar 2011 08:33:40 GMT

I had backup both the running and start up config.

But its not coming up on plain text.

Yes I am able to grab the pre-shared key from command line in plain text.

But I need to have it being done automatically backed up in plain text along with the remaining configuration.

I am using ASDM 6.1.

Re: How do I get the Pre-Shared Key in Plain text rather than in

Jennifer Halim — Tue, 29 Mar 2011 10:12:52 GMT

Please kindly upgrade to the latest version of ASDM that is supported by your ASA. BTW, what is your current ASA version?

Re: How do I get the Pre-Shared Key in Plain text rather than in

SeshiBhush — Wed, 30 Mar 2011 03:36:42 GMT

Jennifer,

I nearly have 60 ASA firewalls.

They are mostly 5510 and few are 5505 and 5520.

Some are 8.0(3), 8.2(1), 7.2(2).

Please let me know what version supports which ASDM.

Thanks.

Re: How do I get the Pre-Shared Key in Plain text rather than in

Jennifer Halim — Thu, 31 Mar 2011 01:41:15 GMT

Here is the hardware software compatibility matrix for your reference:

http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html

For all ASA 8.x version, you can use ASDM version 6.4.1

For ASA 7.x version, it is recommended to use ASDM version 5.2.4.

Re: How do I get the Pre-Shared Key in Plain text rather than in

SeshiBhush — Thu, 31 Mar 2011 04:47:53 GMT

Jennifer,

Thank you for the information.

Re: How do I get the Pre-Shared Key in Plain text rather than in

Jennifer Halim — Thu, 31 Mar 2011 06:05:32 GMT

Great, thank you. Please kindly mark the post as answered so others can learn from your post. Thanks.