topic Re: can we get the lost pre-shared key ? in General Topics

can we get the lost pre-shared key ?

Harshit — Fri, 24 Oct 2014 15:47:53 GMT

Hi ,

i have a palo alto firewall, i have been asked to put together the pre-shared keys for our VPN peers.i am not able to locate the key for some tunnels, is there any way i can recover the key from my config ?

Regards,

~Harry

Re: can we get the lost pre-shared key ?

HULK — Fri, 24 Oct 2014 16:05:25 GMT

Hello Harry,

Due to security reason, the pre-shared key will not be in plain text format in the FW configuration. Hence, you will not be able to recover the pre-shared key from existing configuration. Instead, you may configure a new pre-shared key on both VPN peers. ( Network > Network Profiles > Ike-Gateway > Pre-shared Key).

Example:

authentication {

pre-shared-key {

key -AQ==cojt0Pw//L6ToM8G41aOKFIWh7w=CVJ5/F84i6cL7ejjM15fRA==; >>>>>>>>>>>>>>>>>>>>> encrypted format

Hope this helps.

Thanks

Re: can we get the lost pre-shared key ?

hshah — Fri, 24 Oct 2014 16:32:20 GMT

Hi Harshit,

That is correct, you can not recover pre-shared key. Firewall stores it in encrypted format. There is no way to decrypt it.

Best way is to create new preshared key on both the peers.

Regards,

Hardik Shah