password encryption aes

[Wojciech Mitus]

I need to turn on "password encryption aes" on IOS-XE/IOS based devices (some compliance requrement). So, how this feature exactly works? Will this only encrypt username/enable passwords, or also tacacs keys, BGP auth keys and other encrypted strings? If i'll enter this on a running switch/router - will this reencrypt passwords already present in the configuration, or will it be used only for a new ones, created after entering "password encryption aes"?

[omz]

on IOS - service password-encryption

on NX-OS - feature password encryption aes

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_5-x/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_5-x_chapter_010101.p...

[Wojciech Mitus]

Hi, "password encryption aes" is not the same as "service password-encryption" - these are two different commands doing different things. 

I'm referring only to IOS/IOS-XE, not NX-OS.

switch(config)#password encryption ?
aes Enable stronger (AES) password encryption

I'm asking specificaly about "password encryption aes" - enable stronger (AES) password encryption.

[omz]

whats the IOS version?

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/46420-pre-sh-keys-ios-rtr-cfg.html