Factory Reset HA pair of Cisco ASAs

[irbk]

I've got a pair of hosted Cisco ASA 5525's in an HA pair that are being replaced.  It's a bit of a weird situation because the hosting company owns the devices but they don't manage the devices.  Because they don't manage the devices, they won't perform a wipe on the devices.  The responsibility is on me to wipe the devices, but I have to do it remotely.  I know I could run a "configure factory-default" From the CLI or probably even do the "Reset Device To the Factory Default Configuration" from the ASDM.  My question comes with the HA part.  If I run this on one of the devices, will the other device also run the factory reset?  Or will the factory reset only reset whatever device I just ran the reset on and then I'd have to run it a 2nd time on the 2nd device?

TIA! 

[Flavio Miranda]

@irbk 

 I would log into the standby and run the command "write erase" and reload. You will lost access to the standby. Then, log on the active one and repeat the process.

[irbk]

Which would be a reasonable approach, but I actually only have access to 1 of the devices now.  Just sort of a single patch into the primary device.  Hosting company would probably charge me to move the cable to the secondary device too.  So stupid that they won't wipe devices they own.

[Flavio Miranda]

@irbk 

From active "failover exec standby  write erase" , "failover exec standby reload"

[irbk]

Appreciate the attempted assist but I get a [FAILED] error when I try that.

ASA-Primary# failover exec standby write erase
Erase configuration in flash memory? [confirm]
[FAILED]

[Flavio Miranda]

shame on you ASA! LOL  but it could be due the criticity of the command.  I actually never did it before. 

[irbk]

Yeah, I think I'm just going to have to pay them to move the cable to the secondary and wipe them separately.

[Flavio Miranda]

Sounds like a plan.

[MHM Cisco World]

The following commands are replicated to the standby ASA:

• All configuration commands except for mode, firewall , and failover lan unit

• copy running-config startup-config

• delete

• mkdir

• rename

• rmdir

• write memory

The following commands are not replicated to the standby ASA:

• All forms of the copy command except for copy running-config startup-config

• All forms of the write command except for write memory

• debug

• failover lan unit

• firewall

• show

• terminal pager and pager

So factory is replication from active to standby 

MHM