topic Re: IDSM passwd recovery in Network Security

IDSM passwd recovery

aksher — Sun, 10 Mar 2019 10:50:34 GMT

How to login to IDSM (6513 box) by recoverning the passwd.

Re: IDSM passwd recovery

marcabal — Fri, 19 Oct 2007 21:05:29 GMT

Password Recovery is only supported with IPS 6.0. During password recovery you can reset the cisco user password back to default cisco without losing any of the configuration on the sensor.

If you are running IPS 6.0, then you would need to boot to the Maintenance Partition and run a special file that will just reset the password on the Application Partition.

Instructions are available here:

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a0080751859.html#wp1008249

If you are running IPS 4.x, 5.0, or 5.1; then there is no password recovery option that only changes the password. You would instead just have to boot to the Maintenance Partion and load a completely new System Image on the sensor.

The new System Image will reformat the Application Partition and load a completely new image. All configuraiton would be lost. I will reset the cisco user password to default cisco, but at the cost of also losing all of your sensor configuration.

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00807517ba.html#wp1031426

Re: IDSM passwd recovery

aksher — Tue, 23 Oct 2007 08:45:29 GMT

What are the other steps other than these,

1.Boot to maint. partition

2.Upgrade by connecting to the FTP where passwd. recovery image is placed using upgrade command.(Here we can specify the new passwd)

3.Reload to application partition

Re: IDSM passwd recovery

marcabal — Tue, 23 Oct 2007 13:54:40 GMT

Boot to maint partition

Download the following file from cisco.com and place on an ftp server:

WS-SVC-IDSM2-K9-a-6.0-password-recovery.bin.gz

Located here on cisco.com:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-cat6500-idsm2-sys

From the main partition execute the upgrade command to download and install that special password recovery file.

Boot to the application partition (this may be done automatically).

You will be prompted to enter the default "cisco" password again, and then be prompted for the new password.