Access Security Guide K/KA/KB.15.15

hex
Set the key as a 64 hexadecimal character string (32 bytes). You must enter
64 hexadecimal digits to set this key.
When encrypt-credentials is enabled without any parameters, a caution message displays
advising you about the effect of the feature with prior software versions, and actions that are
recommended. All versions of the command force a configuration save after encrypting or
re-encrypting sensitive data in the configuration.
Figure 11 Enabling encrypt credentials with caution message
Figure 12 Example of creating a pre-shared key in plaintext
Figure 13 Example of creating a pre-shared key in hex
Displaying the state of encrypt-credentials
To display whether encrypt-credentials is enabled or disabled, enter the show
encrypt-credentials command. This command is available only from the manager context.
Figure 14 Example of status of encrypt-creditials when the pre-shared key has not been set
Figure 15 Example of status of encrypt-creditials when the pre-shared key has been set
Affected commands
Several commands will have encryption available for configuration.
Setting an encrypted password 37