snmptd SHA and AES level

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

May I know what is the highest SHA and AES for snmptd probe? For snmpcollector probe, there are options to choose the level (highest SHA256 and AES256) but there are no options to choose the level (Only SHA and AES) when trying to add credential for snmptd. 

 

Environment

Release: UIM  20.4

Component: SNMPTD

Resolution

The snmptd probe does not support AES 192 and AES 256 authentication due to a limitation in the SNMP library.

SHA-2 and AES encryption 256-bit key strength are currently not supported.

 AES256/SHA256 is normally not part of the standard for snmpv3 although it is becoming more and more common for vendors to offer an "enhanced" capability which supports it. 

But as we are currently using a more "standard" snmp3 library it is not included. There is a roadmap item which intends to bring "all" probes up to the latest security standards. 

 

 

Additional Information

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/ca-unified-infrastructure-management-probes/GA/monitoring/networking-infrastructure/snmptd-simple-network-management-protocol-trap-daemon-monitoring/snmptd-simple-network-management-protocol-trap-daemon-monitoring-release-notes.html#concept.dita_2d33382d86600471d02035bc7dc76350f7759b4f_RecentEnhancements