How can I recover the APIC's password?

YOUNG HAN KIM · ‎09-21-2015

Hello,

I forgot APIC's admin password.

So, I run the password recovery procedure as below.

Step 1

Create and save an empty file named "aci-admin-passwd-reset.txt".

Step 2

Add the file to a USB drive.

Step 3

Connect the USB drive to one of the rear USB ports on the Cisco APIC.

Step 4

Reboot the APIC using Cisco Integrated Management Controller (CIMC) or by hard power cycling the device.

Step 5

When the APIC displays the "Press any key to enter the menu" prompt, press a key to interrupt the boot process.

Step 6

The APIC displays supported Linux versions. Highlight the version installed on your system and press e to edit the boot command.

Step 7

Add the name of the empty file to the end of the command, shown as follows:

Example:

[ Minimal BASH-like line editing is supported.  For the first word, TAB
  lists possible command completions. Anywhere else TAB lists the possible
  completions of a device/filename. ESC at any time cancels. ENTER
  at any time accepts your changes.]

< rhgb quiet selinux=0 audit=1  aci-admin-passwd-reset

Step 8

Press Enter to save the file.

Step 9

Press b to boot the APIC.

Note

To cancel the password reset operation and return to the default boot parameters, press Esc and Enter.

Step 10

The APIC boots and prompts for a new administrator password.

But, APIC is still asking an existing(old) password after booting.

I do not know what went wrong.

Let me know how to solve this problem.

Thanks,

Amanuddin Shaikh · ‎10-08-2015

Hi,

I am also facing the same issue, any idea about it?

how we can re-install iso in APIC via virtual media? Is there any idea

Thanks,

Ramu Gajula · ‎12-29-2015

Hi Amanuddin,

When the APIC prompts for the password, login to "rescue-user" and then you will get few admin privileges like erasing the config and restore to factory default setting.

after you login using rescue-user

type "eraseconfig setup" to factory default or "eraseconfig" to just erase the config.

thanks for using the Cisco Support community for ACI.

vithulas · ‎05-27-2018

When I type "rescue-user" but still it is prompting for a password.

jose.tamayo.segarra · ‎07-30-2018

Hi there,

In my case, it had to be the very first user that tries to login. Reboot the APIC and at the first login prompt enter 'rescue-user'.

Wait a bit until the system is fully operational. I kept typing every now and then the '?' key until I stopped receiving this message:

Authentication cookie not present
System is not ready please wait

Then type `eraseconfig setup` command and reboot.

Now you will have to start the Wizard again.

Hope it helps,

Ignacio

aleccham · ‎07-30-2018

Hello,

Please do not use the command provided, "eraseconfig setup". It is deprecated.

If you need to reconfigure the initial setup script. Then you should use the following. "acidiag touch setup"