cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
198
Views
2
Helpful
2
Replies

FMC 7.4.1

Brett Walters
Level 1
Level 1

Newly installed 7.4.1 (well, upgraded to 7.4.1 from 7.4 install).  Somehow the admin password stopped working.  Figured I forgot it or didn't write it down correctly - so got in via console and reset it. Works in the CLI for access, but not in the UI.  Did I miss a step?  I followed the documents exactly.  Hence the CLI access working.  FMC is Vmware-based and has been rebooted several times.

1 Accepted Solution

Accepted Solutions

@Brett Walters the CLI and GUI admin passwords are different, they are just synchronised upon initial configuration. You can try the following procedure:-

Reset a Lost Web Interface Admin Password for Firepower Management Centers

Use these instructions to change the password for the admin account used to access the Firepower Management Center web interface.

Procedure:

  1. Log in to the appliance with the CLI admin account with SSH or the console.
  2. Access the Linux shell:
    • If your FMC runs Version 6.2 or lower, log in gives you direct access to the Linux shell.
    • If your FMC runs Version 6.3 or 6.4 and the Firepower Management Center CLI is not enabled, log in gives you direct access to the Linux shell.
    • If your FMC runs Version 6.3 or 6.4 and the Firepower Management Center CLI is enabled, log in gives you access to the Firepower Management Center CLI. Enter the expert command to access the Linux shell.
    • If your FMC runs Version 6.5+, the log in gives you access to the Firepower Management Center CLI. Enter the expert command to access the Linux shell.
  3. At the shell prompt, enter this command to reset the password for the web interface admin user:
    sudo usertool.pl -p 'admin password'
    Where password is the new password for the web interface admin user.
  4. At the Password prompt, enter the password for the username with which you are currently logged in.
  5. If the Web admin account has been locked out due to too many failed log in attempts, you must unlock the account. Run the usertool command, enter your CLI admin password when prompted:
    sudo usertool.pl -u admin
  6. Type exit to exit the shell.
  7. On a Firepower Management Center with the CLI enabled, type exit to exit the CLI.

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118631-technote-firesight-00.html

 

View solution in original post

2 Replies 2

@Brett Walters the CLI and GUI admin passwords are different, they are just synchronised upon initial configuration. You can try the following procedure:-

Reset a Lost Web Interface Admin Password for Firepower Management Centers

Use these instructions to change the password for the admin account used to access the Firepower Management Center web interface.

Procedure:

  1. Log in to the appliance with the CLI admin account with SSH or the console.
  2. Access the Linux shell:
    • If your FMC runs Version 6.2 or lower, log in gives you direct access to the Linux shell.
    • If your FMC runs Version 6.3 or 6.4 and the Firepower Management Center CLI is not enabled, log in gives you direct access to the Linux shell.
    • If your FMC runs Version 6.3 or 6.4 and the Firepower Management Center CLI is enabled, log in gives you access to the Firepower Management Center CLI. Enter the expert command to access the Linux shell.
    • If your FMC runs Version 6.5+, the log in gives you access to the Firepower Management Center CLI. Enter the expert command to access the Linux shell.
  3. At the shell prompt, enter this command to reset the password for the web interface admin user:
    sudo usertool.pl -p 'admin password'
    Where password is the new password for the web interface admin user.
  4. At the Password prompt, enter the password for the username with which you are currently logged in.
  5. If the Web admin account has been locked out due to too many failed log in attempts, you must unlock the account. Run the usertool command, enter your CLI admin password when prompted:
    sudo usertool.pl -u admin
  6. Type exit to exit the shell.
  7. On a Firepower Management Center with the CLI enabled, type exit to exit the CLI.

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118631-technote-firesight-00.html

 

Staring right at me, wasn't it?  Thank you.  The sudo usertool.pl command reset it.  Apologies for the simple question, but thank you for the help!

Review Cisco Networking for a $25 gift card