How to reset Firepower 1120 Device Manager admin password

[weiliu8322339]

HI, Expert,

I am a new man working on Cisco Firepower 1120. Unfortunately, I setup a complex admin passwod. and PC crash and the password not saved. How can I reset the password? As sophos can conect to monitor, keyboard to do this.

Which tool should I use to open console to reset the password?

Tks n brgds

Liu Wei

[balaji.bandi]

If you still have access to Login to FTD, then you can reset the password

if you lost the password  then : you need to reset password :

https://www.cisco.com/c/en/us/support/docs/security/firepower-2100-series/213257-password-recovery-procedure-for-fp2100-s.html

[weiliu8322339]

HI, Balaji,

My device is FPR 1120. I see the instruction is for FPR 2100. It is same?

brgds

Liu Wei

[balaji.bandi]

Technically it should be the same.

[weiliu8322339]

Sure.

I installation USB B software on my Two Laptop(W10Pro). and check no COM port in the device manager.

I do not know what wrong with it.

I will try  connecting  to device via  management RJ45 default IP addresss is 192.168.45.45.

Tks.

Liu Wei

[weiliu8322339]

HI, Balaji,

I got connect to the device via console port.

Sorry. password_reset is not avaible. see below command record. please give advice.

*******

*************************:
Threat Defense System: CMD=-stop, CSP-ID=cisco-ftd.6.4.0.102__ftd_001_JMX2430X0D7CVN7M71, FLAG=''
Cisco FTD stopping ...
^[^[^[^[^[
Stopping Cisco Firepower 1120 Threat Defense......ok
Skipping sfifd for this platform...
Stopping nscd... [ OK ]
Turning off swapfile /ngfw/Volume/.swaptwo
Stopping system log daemon... [ OK ]
Stopping Threat Defense ... [ OK ]

*******************************************************************************
Cisco System ROMMON, Version 1.0.08, RELEASE SOFTWARE
Copyright (c) 1994-2019 by Cisco Systems, Inc.
Compiled Mon 06/17/2019 15:54:21.43 by builder
*******************************************************************************

Current image running: Boot ROM0
Last reset cause: SwitchOff (0x00000100)
DIMM0 : Present

Platform FPR-1120 with 16384 MBytes of main memory
BIOS has been successfully locked !!
MAC Address: bc:4a:56:b2:60:00

Use BREAK or ESC to interrupt boot.
Use SPACE to begin boot immediately.
Boot interrupted.

rommon 1 > password_reset
The command "password_reset" is an invalid command. Use "help" for a command list.

rommon 2 > password_reset
The command "password_reset" is an invalid command. Use "help" for a command list.

rommon 3 > help
? Display this help menu
address Set the local IP address
alias Set and display alias commands
boot Boot an application program
confreg Configuration register contents display and management
console Console BAUD rate display and configuration
dev Display a list of available file system devices
dir File directory display command
factory-reset Erase all configuration and data
and reinstall the current version
file Set the application image file path/name to be TFTPed
gateway Set the default gateway IP address
help "help" for this menu
"help <command>" for specific command information
history Show the command line history
image Set the application image file path/name to be TFTPed
netmask Set the IP subnet mask value
ping Test network connectivity with ping commands
reboot Perform a cold restart of the system
repeat Repeat a CLI command from history list
server Set the TFTP server IP address
set Display the configured environment variables
show Display system device and status information
sync Save the environment variables to persistent storage
tftpdnld Download and run the image defined by "FILE"
unalias Unset an alias
unset Clear a configured environment variable

rommon 4 > reboot

Restarting the system...

*****

brgds

Liu Wei

[balaji.bandi · Accepted solution]

Sorry for that - unfortunately that did not work?

Is this production kit ? or in Lab?

below procedure to reset : ( please read carefully before you proceed).

https://www.cisco.com/c/en/us/td/docs/security/asa/fxos/troubleshoot/asa-fxos-troubleshoot/system_recovery.html

[weiliu8322339 · Accepted solution]

HI, Balaji,

The  cisio viral USB drive downloaded from ciso. and Terminal Evalator from web.

I will check again and let you know.

Brgds

Liu Wei