topic Re: Password Reset for AIP-SSM 10 in Network Security

Password Reset for AIP-SSM 10

a.shaukat — Sun, 10 Mar 2019 10:35:08 GMT

Hi,

i have an ASA5520 with v 7.2(2) running.

but the IPS module spftware is 5.1

when i tried to login to the > session 1

it prompts me for a login and password.

i tried cisco and a few other combinations.. but no luck ,,

how do i reset it ?? also that reset procedure on the docs says its resets password or the user cisco ..

how can i be sure if the user cisco even exists on it or not ?

any help please ???

Re: Password Reset for AIP-SSM 10

Rodrigo Gurriti — Sun, 29 Apr 2007 21:07:58 GMT

hw-module module 1 password-reset

Re: Password Reset for AIP-SSM 10

a.shaukat — Wed, 02 May 2007 09:02:51 GMT

my ASA 5520 device is running IOS 7.2 and the AIP SSM-10 module is running IPS software verson 5.0

the command you specified is available on ASA IOS 7.2 but does not run on IPS version 5.0 .. ( it runs on IPS version 6)

now cisco says to reset password il have to reimage the IPS module.. :-s now thats a problem... cause i dont have the IPS's software image on my TFTP..

how do i get this image on the tftp in the first place |??

Re: Password Reset for AIP-SSM 10

a.shaukat — Tue, 08 May 2007 04:46:57 GMT

ANY HELP PLEASEEEE ?? stuck badly in this situation..

Device ASA 5520

IOS running 7.2(2)

IPS module AIP-SSM-10

IPS software version 5.0(2)S152.0

Problem

IPS module locked out. dont know the session password to the module.

Tried the hw-module module 1 reset password command but it turns out it is supported by IPS software version 6 only.

Experts tells me to Reimage the module.

Problem agian... i dont have the system image of the module... no CD media no tftp backup.

anyyway to reset the IPS module to factory default???? (not using the module right now)

ALSO CAN ANY ONE CLEAR THIS CONFUSION ... can i reimage using IP software version 6.0 ( ifi can get it) ?? or do i need 5.0 then upgrade to 6.0 ???

Re: Password Reset for AIP-SSM 10

hoogen_82 — Tue, 08 May 2007 06:54:08 GMT

hw-module module 1 recover boot is the command your looking for. For re imaging the whole this you can do it directly to 6. No need to upgrade to 5 and then to 6

HTH

Hoogen

Do rate if this helps 🙂

Re: Password Reset for AIP-SSM 10

mfreijser — Tue, 08 May 2007 06:54:20 GMT

The only way to get the software for your module is downloading it via the Software Center from Cisco.com. You'll need a Smartnet contract or proper CCO account to access the downloads.

You will be able to reimage the module with 6.0 software, but it is advised to reimage it with the most basic image. You can always upgrade from there!

Information about reimaging can be found in the following document:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_book09186a008055dbb1.html

Hope this information helps, if it does; please rate!

Regards,

Michael

Re: Password Reset for AIP-SSM 10

a.shaukat — Tue, 08 May 2007 11:02:03 GMT

done that too.. but this device wasnt configured wth the recovery configurations..

thanks for the tip though.. guess il just have to ask the vendor to give me the IPS softwares ...

🙂 thanks again ..

Re: Password Reset for AIP-SSM 10

Rodrigo Gurriti — Tue, 08 May 2007 11:13:55 GMT

please do a show module 1 details and paste it here

that command works for 5.0 too

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_password_recovery09186a0080094e83.shtml#ipsapp

check it out

Re: Password Reset for AIP-SSM 10

khanh_isphn — Wed, 09 May 2007 08:14:22 GMT

I have same problem when i tried to recovery password for IPS AIP-SSM 10.

I upgraded to IOS 7.21, IPS version 6.02 but i can not type the command : hw-module module 1 password-reset.

Does any one know why ?

Re: Password Reset for AIP-SSM 10

mfreijser — Wed, 09 May 2007 08:19:45 GMT

The command "hw-module module 1 password-reset" is only supported when the hardware module is in the Up state and supports password reset.

More information on this command can be found here:

http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f0e6.html#wp1692443

Regards,

Michael

Re: Password Reset for AIP-SSM 10

khanh_isphn — Wed, 09 May 2007 08:46:20 GMT

Thank Michael, but how to show which module is supported "password-reset" command as guided?

This is output of command screen:

====================================

ciscoasa# hw-module module 1 ?

recover Configure recovery of this module

reload Reload the module

reset Reset the module

shutdown Shut down the module

====================================

Can you help to reset to default password in this case ?

Thanks

Re: Password Reset for AIP-SSM 10

mfreijser — Wed, 09 May 2007 09:07:19 GMT

Strange, i get the following with a AIP-SSM10 with software 6.01(E1):

---------------------------------------------

ASA# hw-module module 1 ?

password-reset Reset the CLI password on the module

recover Configure recovery of this module

reload Reload the module

reset Reset the module

shutdown Shut down the module

ASA# hw-module module 1 password-reset

Reset the password on module in slot 1? [confirm]

---------------------------------------------

You could always try to reset the module entirely, but take notice that you will erase the configuration of the module, thus losing all your signature settings.

Regards,

Michael

Re: Password Reset for AIP-SSM 10

a.shaukat — Wed, 09 May 2007 11:25:36 GMT

no man it doesnt ..

the link u specified says it too..

hw-module module slot_number password-reset?This command recovers a password on a Cisco ASA 5500 Series Content Security and Control Security Services Module (CSC-SSM) or the AIP-SSM without having to re-image the device.

Note: This command starts support from IPS 6.0 (ASA 7.2 version) and is used to restore the Cisco CLI account password to the default cisco

hers my ASA and IPS details..

ASA# sh version

Cisco Adaptive Security Appliance Software Version 7.2(2)

Device Manager Version 5.2(2)

Compiled on Wed 22-Nov-06 14:16 by builders

System image file is "disk0:/asa722-k8.bin"

Config file at boot was "startup-config"

ASA up 22 days 3 hours

Hardware: ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz

ASA# sh module 1

Mod Card Type Model Serial No.

--- --------- ------ ----------

1 ASA5500 SSM-10 ASA-SSM-10 B155670DW4

Mod MAC Add Range Hw Ver. Fw Ver. Sw Ver.

--- ------------- ------- ------- -------

1 00xx to 001 1.0 1.0(10)0 5.0(2)S152.0

Mod SSM Apps. Name Status SSM Apps Version

--- -------------- ------ ----------------

1 IPS Up 5.0(2)S152.0

Mod Status Data Plane Status Compatibility

--- ------ ----------------- -------------

1 Up Up

Re: Password Reset for AIP-SSM 10

a.shaukat — Wed, 09 May 2007 11:37:32 GMT

Khan if u are not getting the password-reset command then ur IOS does not support this command... if i am correct IOS7.2(2) onwards supports the password rest. cause i upgraded to 7.2(2) recently and then only i got this command..

however when i try to reset the password of the module its rejects me giving..

ASA# hw-module module 1 ?

password-reset Reset the CLI password on the module

recover Configure recovery of this module

reload Reload the module

reset Reset the module

shutdown Shut down the module

ASA# hw-module module 1 password-reset

Reset the password on module in slot 1? [confirm]

The SSM application version does not support password reset

Failed to reset the password on the module in slot 1

cause my IPS software is 5.0 .. 6.0 would solve my problems.. 😛

Re: Password Reset for AIP-SSM 10

khanh_isphn — Thu, 10 May 2007 00:31:05 GMT

yes, my IOS is running version 7.21 then it is maybe not support "password-reset" command,

However when i do re-image ips software then ips module is restored default factory,

So I tried to find out which way to reset password simply.

Thanks