hpe msr2003 how to enable encryption-algorithm aes

[alexkg1]

I have a msr2003 hpe router and I need to enable encryption-algorithm aes
Tell me how to do it?
Now only DES is available to me

[msr2003-ipsec-transform-set-test]esp encryption-algorithm ?
des-cbc 56-bit CBC mode Data Encryption Standard (DES)

[Emil_G]

Hello, 

Please review the following document and maybe it will answer your question

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-c04216176

If you didnt obtain a high encryption license this may be the way to go.

[alexkg1]

thank you I got my license file CN63XXXXXX.ak
uploaded it to tftp server 192.168.0.30
please tell me which command to upload it to the router and activate.

I am doing this for the first time, I am afraid to disrupt the work

[Emil_G · Accepted solution]

Hello, 

Q6 of the document explains the steps.

If you have uploaded the file to an FTP server you should copy it to the router. Please check the options of the command tftp on page 140 here

https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04770148&withFrame

I guess it should be something like

<msr2003> tftp 192.168.0.30 get CN63XXXXXX.ak

Use the dir command (page 155) to check if the file was copied to flash. If the file is there you can activate it with the command mentioned in Q6 replacing the name of the file with your license file name.

[msr2003] license activation-file install flash:/CN33FTY00B2013073016084479426.ak)

[alexkg1]

[msr2003]display license
flash:/license/CN63XXXXXX.ak
Feature: StrongCryptography
Product Description: HP MSR High Encryption E-LTU
Registered at: 2019-08-07 03:46:35
License Type: Permanent
Current State: In use

[msr2003-ipsec-transform-set-test]esp encryption-algorithm ?
3des-cbc 168-bit CBC mode 3DES
aes-cbc-128 128-bit CBC mode Advanced Encryption Standard (AES)
aes-cbc-192 192-bit CBC mode AES
aes-cbc-256 256-bit CBC mode AES
des-cbc 56-bit CBC mode Data Encryption Standard (DES)
null Use NULL

[msr2003-ipsec-transform-set-test]esp encryption-algorithm

Thank you very much