cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
331
Views
0
Helpful
1
Replies

Issue with FTD Provisioning on Nutanix V2 API - Password Not Working

mdusman
Level 1
Level 1

Hey everyone,

I'm running into an issue while provisioning Cisco FTD on Nutanix using the V2 API. When I deploy the VM without a Day 0 configuration file, the default password works fine. However, when I attempt to set a custom password using vm_customization_config, neither the default nor the configured password works.

Setup Details:

  • Using Nutanix V2 API for FTD deployment.

  • Tried provisioning with and without a Day 0 config.

  • Without Day 0 Config: Default credentials (admin / Admin123) work.

  • With Day 0 Config: Neither the default nor the custom password (AdminPassword: Dinserver12@) works.

Day 0 Configuration JSON Used:

{
    "EULA": "accept",
    "Hostname": "ftdv-test2",
    "AdminPassword": "xxxxxxxxxxxx",
    "FirewallMode": "routed",
    "DNS1": "8.8.8.8",
    "DNS2": "",
    "DNS3": "",
    "IPv4Mode": "manual",
    "IPv4Addr": "XXX.XXX.XXX.XXX",
    "IPv4Mask": "255.255.254.0",
    "IPv4Gw": "XXX.XXX.XXX.XXX",
    "IPv6Mode": "disabled",
    "FmcIp": "XXX.XXX.XXX.XXX",
    "FmcRegKey": "Cisco123",
    "FmcNatId": "",
    "ManageLocally": "No"
}

Configuration Applied During VM Creation

# Convert JSON to Base64
day0_config_content = json.dumps(ftd_config, indent=4)
encoded_userdata = base64.b64encode(day0_config_content.encode()).decode()

# Add `vm_customization_config`
ftd_vm_create["vm_customization_config"] = {
    "datasource_type": "CONFIG_DRIVE_V2",
    "files_to_inject_list": [],
    "fresh_install": True,
    "userdata": encoded_userdata,
    # "userdata_path": "/cisco/ftd/day0-config.txt"
}

What I Tried:

Tried logging in with admin / Admin123 and admin / xxxxxxxxxxx  Both failed.

Questions:

1️ Has anyone successfully applied Day 0 configuration to FTD on Nutanix using V2 API?
2️ Does FTD require additional steps for password enforcement (e.g., first-time password reset)?
3️ Is there an alternative way to ensure the password is correctly applied during deployment?

Any insights would be greatly appreciated!

Thanks in advance.

 

1 Reply 1

Torbjørn
VIP
VIP

I believe this is intended behaviour for the UI & API when "ManageLocally" set to no and FMC IP & reg key is configured. Can you see your VM on your FMC? Are you able to log in with SSH?

Happy to help! Please mark as helpful/solution if applicable.
Get in touch: https://torbjorn.dev