BugZero | Cisco BugID CSCwa65789 - NTP authentication on Catalyst 9300 using HMAC-SHA...

Cisco - Defect ID: CSCwa65789

NTP authentication on Catalyst 9300 using HMAC-SHA2-256 32 Byte Key failure

Cisco - Defect ID: CSCwa65789

NTP authentication on Catalyst 9300 using HMAC-SHA2-256 32 Byte Key failure

Last updated on 4/30/2025

Overall: 3.53.5

Severity: 3.73.7

Lifecycle: 9.19.1

Popularity: 5.15.1

What is the BugZero Risk Score?

Vendor details

No defect details.

Overall: 3.53.5

Severity: 3.73.7

Lifecycle: 9.19.1

Popularity: 5.15.1

What is the BugZero Risk Score?

Vendor details

No defect details.

Symptom

Attempting to authenticate NTP using hmac-sha2-256 on a Catalyst 9300, running SW version 17.3.4 The 64 character 32 byte key is not supported on the switch with an error message that: NTP: Key too long.

Conditions

Unable to authenticate NTP using hmac-sha2-256 with 3rd party NTP servers.

Workaround

Further Problem Description

Original Vendor Announcement

9.65Defect ID: CSCwd45843
Auth Step latency for policy evaluation due to Garbage Collection activity.
9.65Defect ID: CSCwa92734
CUBE DTMF interworking fails from rtp-nte to OOB SIP methods
9.65Defect ID: CSCwj45822
Cisco ASA and FTD Software Remote Access VPN Brute Force Denial of Service Vulnerability
9.65Defect ID: CSCvo03458
PKI "revocation check crl none" does not fallback if CRL not reachable
9.65Defect ID: CSCvq05584
Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability

Ready to prevent the next vendor outage?

Get a demo

OPERATIONAL DEFECT DATABASE

Cisco - Defect ID: CSCwa65789

NTP authentication on Catalyst 9300 using HMAC-SHA2-256 32 Byte Key failure

Cisco - Defect ID: CSCwa65789

NTP authentication on Catalyst 9300 using HMAC-SHA2-256 32 Byte Key failure

Last updated on 4/30/2025

Vendor details

Vendor details

Description

Symptom

Conditions

Workaround

Further Problem Description

Links

Top Cisco defects by risk score

Ready to prevent the next vendor outage?