Cisco Nexus 9000 Series - Verifying the Password Encryption Configuration; Configuration Examples for Password Encryption

DETAILED STEPS
PurposeCommand or Action
Deletes all type-6 encrypted passwords.encryption delete type6
Example:
Step 1
switch# encryption delete type6
Verifying the Password Encryption Configuration
To display password encryption configuration information, perform the following task:
PurposeCommand
Displays the configuration status of the AES password encryption feature
and the master key.
show encryption service stat
Configuration Examples for Password Encryption
The following example shows how to create a master key, enable the AES password encryption feature, and
configure a type-6 encrypted password for a TACACS+ application:
key config-key ascii
New Master Key:
Retype Master Key:
configure terminal
feature password encryption aes
show encryption service stat
Encryption service is enabled.
Master Encryption Key is configured.
Type-6 encryption is being used.
feature tacacs+
tacacs-server key Cisco123
show running-config tacacs+
feature tacacs+
logging level tacacs 5
tacacs-server key 6
"JDYkqyIFWeBvzpljSfWmRZrmRSRE8syxKlOSjP9RCCkFinZbJI3GD5c6rckJR/Qju2PKLmOewbheAA=="
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
417
Configuring Password Encryption
Verifying the Password Encryption Configuration