9-7
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 9 Configuring Basic Settings
Configuring the Master Passphrase
• Logging
• Shared licenses
• And many more...
Licensing Requirements for the Master Passphrase
Guidelines and Limitations
This section includes the guidelines and limitations for this feature.
Context Mode Guidelines
Supported in single and multiple context mode.
Adding or Changing the Master Passphrase
This section describes how to configure the master passphrase feature.
Prerequisites
• If failover is enabled but no failover shared key is set, then changing the master passphrase displays
an error message, informing you that a failover shared key must be entered to protect the master
passphrase changes from being sent as plain text.
In the Configuration > Device Management > High Availability > Failover pane, enter any character
in the Shared Key field or 32 hexdecimal numbers (0-9A-Fa-f) if failover hex key is selected except
a back space
. Then click Apply.
Detailed Steps
Step 1 In single contex mode, choose Configuration > Device Management > Advanced > Master
Passphrase pane.
In multiple context mode, choose Configuration > Device Management > Device Administration >
Master Passphrase.
Step 2 Check the Advanced Encryption Standard (AES) password encryption check box.
If no master passphrase is in effect, a warning statement appears when you click Apply. You can click
OK or Cancel to continue.
If you later disable password encryption, all existing encrypted passwords are left unchanged, and as
long as the master passphrase exists, the encrypted passwords will be decrypted as required by the
application.
Model License Requirement
All models Base License.