ERROR-%CRYPTO_ENGINE-4-CSDL_COMPLIANCE_RSA_WEAK_KEYS: RSA

[Niteshshelar7404]

Hello,

just wanted know the below mention error on Cisco -4331 router
%CRYPTO_ENGINE-4-CSDL_COMPLIANCE_RSA_WEAK_KEYS: RSA keypair Is there a cause and solution?

[Niteshshelar7404]

Please help ?

[Georg Pauwen]

Hello,

the 'error' is actually more a warning than an actual error, it tells you that your 4331 can run legacy hashes and ciphers that are considered outdated within the CSDL (Cisco Secure Development Lifecycle). 

It is obviously advisable to do that, disable these hashes and ciphers, but if you just want to get rid of the message, I think there is the command:

crypto engine compliance shield disable

which might or might not be available in your IOS...