Password Encryption - Cisco TelePresence Administrator's Manual

Reference material

Password encryption

All passwords configured on the VCS are stored securely in either an encrypted or hashed form. This applies
to the following items, which all have usernames and passwords associated with them:
the default admin administrator account
n
any additional administrator accounts
n
local authentication database credentials (a list of valid usernames and passwords that are used when
n
other devices are required to authenticate with the VCS)
outbound connection credentials (used by the VCS when required to authenticate with another system)
n
LDAP server (used by the VCS when binding to an LDAP server)
n
Web interface
When entering or viewing passwords using the web interface, you will see placeholder characters (e.g. dots
or stars, depending on your browser) instead of the characters you are typing.
Command line interface (CLI)
When entering passwords using the command line interface (CLI), you type the password in plain text.
However, after the command has been executed, the password is displayed in its encrypted form with a
{cipher} prefix, for example:
xConfiguration Authentication Password: "{cipher}xcy6k+4NgB025vYEgoEXXw=="
Note that FindMe is a standalone application that can be hosted by the VCS or by another remote server.
This means that FindMe account information is not configured or accessible using the CLI of the VCS.
However, FindMe account passwords are still stored securely.
Maximum length of passwords
For each type of password, the maximum number of plain text characters that can be entered is shown in the
table below.
Password type
Admin account
Other local administrator accounts
Local database authentication credentials
Outbound connection credentials
LDAP server
FindMe accounts
Note that:
local administrator account passwords are hashed using SHA512; other passwords are stored in an
n
encrypted format
when a password is encrypted and stored, it uses more characters than the original plain text version of the
n
password
Cisco VCS Administrator Guide (X8.1.1)
Maximum length
1024
1024
128
128
60
30
Password encryption
Page 388 of 507