AP Join profile>management> user configuration fail when set aes encryption. it can success when set clear. AES is not working? is it a bug or configuration issue.

[yaoszhan]

AP Join profile>management> user configuration fail when set aes encryption. it can success when set clear. AES is not working? is it a bug or configuration issue.

[Scott Fella]

You set it unencrypted when you apply it. If you have enabled encryption, it will be encrypted after you applied it.

[Scott Fella]

FYI:

If password encryption was enabled on the original configuration, all keys and passwords would have to be reconfigured. Once the keys/passwords are reconfigured enable password encryption back again. The command is below:
key config-key password-encrypt password encryption aes”

[yaoszhan]

I think this management user is for login AP by SSH or Telnet. when we set up the user in AP Join profile, the AP will download the configuration of AP Join profile. The user account will be used to login the AP. as follow: 0 is clear, 8 is AES encryption, but look like it is not support the aes encryption.

C9840-2(config-ap-profile)#mgmtuser username anz1 password 8 anz123456 secret 8 anz123456
% Password encryption failed

[JPavonM]

This is returning error because that command is expecting the password hash with AES encryption and not the clear text.

As Scott has told a few post above, you must set the password in clear text, and then it can be encrypted using that command.

HTH
-Jesus
*** Please Rate Helpful Responses ***

[yaoszhan]

Could you help to show me configuration on this? I have tried to generate a username with clear password, but I still can’t encrypt it by aes.

[Scott Fella · Accepted solution]

You need to enter the information in clear text, not with AES. Then if you issue a show run and the password is in clear text, you need to run this command:

key config-key password-encrypt encryption aes