Loading...
Loading...
Security scanning applications may report that the MSM controller is using a SHA-1 signature algorithm, which current industry standards now deem as weak and vulnerable.
Any of the following MSM Controllers:HP MSM720 Access Controller (WW)HP MSM760 Access ControllerHP MSM765 zl Premium Mobility ControllerHP MSM775 zl Premium Controller Module
The certificate, named "wireless.hp.internal", was upgraded to SHA-256 in software versions 6.6.0 and later.However, if a customer upgrades a controller from a build prior to 6.6.0 to a post 6.6.0 version, the certificate will not be upgraded until the controller is reset to factory defaults.To check whether or not a controller is using a SHA-256 certificate, you must look at the certificate itself. On the Certificate Stores page of the controller's GUI, click on the certificate name "wireless.hp.internal" this will display all cf the certificate's details. The section titled "Signature Algorithm" indicates whether the certificate is SHA-1 or SHA-256.NOTE: Starting with software version 6.6.5.0 the certificate will be named "wireless.hp.internal.sha256" to make it easier for customers to determine whether their controller is using the most secure certificate.RECEIVE PROACTIVE UPDATES: Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively via e-mail through HPE Subscriber's Choice. Sign up for Subscriber's Choice at the following URL:Proactive Updates Subscription Form.SEARCH TIP: For hints on locating similar documents on HPE.com, refer to theSearch Tips document.
Operating Systems Affected:Not Applicable
Click on a version to see all relevant bugs
Hewlett Packard Enterprise Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.