All of my devices with 12.2(55) and higher have the username secrets encrypted with SHA256 as opposed to MD5. You can see this in the show run output as:
username user secret 4 ......
as opposed to
username user secret 5....
Any of the older MD5 based devices are able to be managed via CNA and access via the web device manager, the newer with the SHA 256 cannot. Anybody know how to make the https connections recognize these users?