Configuring Configuration File Encryption

The configuration file contents can be encrypted using AES256 and SHA256.

Use the following CLI syntax to configure a configuration file encryption key in the classic CLI.

bof
        encryption-key key [hash | hash2 | custom]
        no encryption-key

Use the following CLI syntax to configure a configuration file encryption key in the MD-CLI.

- bof
        - configuration
            - encryption-key (plain-text | hashed-value)

When configuring an encryption key, the key can be in one of the following formats:

• a plaintext string between 8 and 32 characters; the plaintext string cannot contain embedded nulls or end with “ hash”, “ hash2”, or “ custom”
  Caution: When entering the encryption key in plaintext, ensure that the key is not visible to bystanders.

• a hashed string between 1 and 64 characters; the selected hashing scheme can be hash, hash2, or custom