C H A P T E; Configuring Secure Storage; Information About Secure Storage; Enabling Secure Storage - Cisco Catalyst 9500 Manual

Configuring Secure Storage

•
•
•
•
•

Information About Secure Storage

Secure Storage feature allows you to secure critical configuration information by encrypting it. It encrypts
asymmetric key-pairs, pre-shared secrets, the type 6 password encryption key and certain credentials. An
instance-unique encryption key is stored in the hardware trust anchor to prevent it from being compromised.
By default, this feature is enabled on devices that come with a hardware trust anchor. This feature is not
supported on devices that do not have hardware trust anchor.

Enabling Secure Storage

Before you begin
By default, this feature is enabled. Perform this procedure only after disabling secure storage on the device.
Procedure
Step 1
Step 2
Information About Secure Storage, on page 299
Enabling Secure Storage , on page 299
Disabling Secure Storage , on page 300
Verifying the Status of Encryption, on page 300
Feature Information for Secure Storage, on page 301
Command or Action
configure terminal
Example:
Device# configure terminal
service private-config-encryption
Example:
DEvice(config)# service
private-config-encryption
System Management Configuration Guide, Cisco IOS XE Amsterdam 17.2.x (Catalyst 9500 Switches)
16
C H A P T E R
Purpose
Enters the global configuration mode.
Enables the Secure Storage feature on your
device.
299