can we get the lost pre-shared key ?

[Harshit]

Hi ,

i have a palo alto firewall, i have been asked to put together the pre-shared keys for our VPN peers.i am not able to locate the key for some tunnels, is there any way i can recover the key from my config ?

Regards,

~Harry

[HULK]

Hello Harry,

Due to security reason, the pre-shared key will not be in plain text format in the FW configuration. Hence, you will not be able to recover the pre-shared key from existing configuration. Instead, you may configure a new pre-shared key on both VPN peers. ( Network > Network Profiles > Ike-Gateway > Pre-shared Key).

Example:

authentication {

        pre-shared-key {

          key -AQ==cojt0Pw//L6ToM8G41aOKFIWh7w=CVJ5/F84i6cL7ejjM15fRA==;  >>>>>>>>>>>>>>>>>>>>> encrypted format

Hope this helps.

Thanks

[hshah]

Hi Harshit,

That is correct, you can not recover pre-shared key. Firewall stores it in encrypted format. There is no way to decrypt it.

Best way is to create new preshared key on both the peers.

Regards,

Hardik Shah