topic FMC Managed FTD Device CLI Password in Network Security

FMC Managed FTD Device CLI Password

Lee Dress — Mon, 13 May 2024 13:46:50 GMT

I have an FTD device that is managed through FMC and working properly.

I'm trying to log in to the console port as "admin" but the passwords we use here are not working.

the default Admin123 also does not work.

is there any direction someone can point me to figure out what the reason is, or how to recover?

the device works fine and is not having any management issues, but if I need the CLI for some reason, it would be good to know the admin password.

Re: FMC Managed FTD Device CLI Password

balaji.bandi — Mon, 13 May 2024 17:49:34 GMT

Hope you have not setup AAA

then you may try reset as below guide :

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118631-technote-firesight-00.html

Re: FMC Managed FTD Device CLI Password

Lee Dress — Mon, 13 May 2024 17:59:55 GMT

For FTD devices run on Firepower 1000/2100/3100, you must reimage the device. See the Cisco FXOS Troubleshooting Guide for the Firepower 1000/2100 Series Running Firepower Threat Defense for the Reimage Procedure on these platforms.

That's not doable. I'll have to live without CLI/Console access if that's the case. the device is in production.

Re: FMC Managed FTD Device CLI Password

Marvin Rhoads — Tue, 14 May 2024 14:05:50 GMT

If you have working FMC-based management, you could add external authentication (RADIUS), making sure to select to use it for ssh access. Then an externally-authenticated account with admin access could log in and change the local admin password.

Re: FMC Managed FTD Device CLI Password

Lee Dress — Tue, 14 May 2024 14:24:52 GMT

Thanks Marvin,

I'll give that a shot. I can build a Radius server in the environment.

a little less intrusive than a reimage

Re: FMC Managed FTD Device CLI Password

MHM Cisco World — Tue, 14 May 2024 14:29:18 GMT

Add to that you can not access via SSH using local username/password as I know.

You need external server for any access via SSH.

What make me more sure a point this point in fmc platform you can config ssh port and ip can access via ssh but not password.

MHM

Re: FMC Managed FTD Device CLI Password

ilevene1 — Tue, 03 Feb 2026 17:38:05 GMT

That's not at all true. I can log directly into my FMC-1000 using SSH and the admin password. What I cannot do is access the device through the console port using the admin password.