Is it possible to use SHA-256 instead of MD5 for password encryption in Foglight? (4257687)

Foglight encrypts the user passwords with MD5 algorithm.

Is it possible to modify Foglight to use SHA-256 instead of MD5?

Since Foglight version 5.9.6 the encryption algorithm has been changed to SHA-256. If you use this version or higher no adjustments are needed.

If you use a Foglight version lower than 5.9.6, please follow the steps below to change the encryption algorithm:

1. Log in Foglight with the administrator user (for example foglight)
2. Go to the script console and rule this code:
   
   return server.SecurityService.setSecPolicyValue("defHashAlg", "SHA-256");
   
   It will return null.
   
   NOTE: The user running the above code line needs to be Foglight Administrator + Security Administrator. If the script is failing, check if the user belongs to the these groups.
3. Now log out and open the Login dashboard.
4. Here you have the link "Change password". Use that link to change the password
5. After the password has been changed, the new password is encrypted with SHA-256 algorithm

Note:

The new algorithm will not be used when changing the password via "User & Security" dashboard. The "Change password" link on the Login dashboard needs to be used.
If you want to cross check the change in the Foglight database itself, it might take a little bit until Foglight makes the change persistent. Please wait a minute before looking at the database.

The workaround above can be used for all internal Foglight users.