search cancel

SHA-1/SHA-2 support in Fingerprint file

book

Article ID: 200030

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

SHA1/SHA2 is not supported in Fingerprint file, SEPM supports ONLY MD5/SHA256 values. 

Following error appears while importing a file with any other value than MD5 in it under Policies> Policy Components> File Fingerprint Lists on Symantec Endpoint Protection Manager (SEPM) console:

Only MD5 fingerprints can be imported. The file "\path_of_file" contains non-MD5 fingerprints.

Note: This error appears on version 14.3 RU1 and above, in older builds there is no error but the characters beyond the MD5 limit (32) are truncated and not catered. 

Resolution

SEPM supports ONLY MD5/SHA256 values. File fingerprint lists can include both the more secure SHA-256 and the legacy MD5 hash types

Attachments