Snmp v3 on Cisco IOS XE Cupertino 17.8.x

[mipxman]

Hello guys, I try to configure snmp v3 in ISR routers 4451 with Coupertino 17.8.01 but it can't authentication. 

I configure same commands in Amsterdam 17.3.5 BUT it works truly. Is it about Software bug ? 

SrDoSnmp: authentication failure, Unknown Engine ID
SrParseV3SnmpMessage: digest mismatch
SrParseV3SnmpMessage: Failed.
SrDoSnmp: authentication failure

[balaji.bandi]

I configure same commands in Amsterdam 17.3.5 

Can we see those commands? If you are using MD5 authentication, that was deprecated.

[mipxman]

yes Md5 authentication get error

Aug 17 03:41:32.776: %SNMP-6-AUTHPROTOCOLMD5: Authentication protocol md5 support will be deprecated in future
Aug 17 03:41:32.776: %SNMP-6-PRIVPROTOCOLDES: Privacy protocol des support will be deprecated in future
Aug 17 03:41:32.776: %CRYPTO_ENGINE-3-CSDL_COMPLIANCE_FAIL: Cisco PSB security compliance violation is detected. Use of MD5 by SSH Process is denied

but with new authentication method I can't receive  snmp v3 , too .

(config)# snmp-server group SNMPMON v3 priv reas READ
(config)# snmp-server view READ internet included
(config)# snmp-server user USER  SNMPMON v3 auth sha SECRET priv ase 256 PASS

 my debug when I send

snmpwalk 

command from snmp server : 

#debug snmp packet 
SrDoSnmp: authentication failure, Unknown Engine ID
SrParseV3SnmpMessage: digest mismatch
SrParseV3SnmpMessage: Failed.
SrDoSnmp: authentication failure

[balaji.bandi · Accepted solution]

Use SHA authentication

MD5 - check this bug and upgrade to the suggested version :

https://bst.cisco.com/bugsearch/bug/CSCwa34684