Skip to content

tac_plus‐ng: Cisco ASA password hashes

Marc Huber edited this page Mar 28, 2025 · 1 revision

tac_plus-ng supports both legacy Cisco ASA MD5 and Cisco ASA pbkdf2 password hashes, greatly simplifying the migration of locally defined ASA remote access users to FTD:

    user demo {
        password login = pbkdf2 "$sha512$5000$gR5ezBKfDya2b4k/UxhSQw==$6nHpvOuyaiW6W06g1TBLcA=="
        # password login = asa "XjFBA5DVYjFLLcDW" # legacy MD5 format, unsafe
    }
Clone this wiki locally