SFR Expert mode Root password

[keithcclark71]

Is there a specific root password to gain access to Expert mode so that a hostname can be changed? I can get into the sfr > launch a shell but when I go to su  all passwords I know of Admin123, Sourcefire are not working????

[Marvin Rhoads]

What platform are you trying to log into?

[keithcclark71]

Hi Marvin is there a way to reinvoke the SFR setup from the > prompt???

Also I can access > no problem. I can also shell as admin just cant get into expert mode to change things like hostname of the SFR etc. Wondering if they changed root in the image? Two seperate ASA's and same issue on both using the below Boot & System combo

Boot: asasfr-5500x-boot-6.1.0-330.img

System:asasfr-sys-6.1.0-330.pkg

> show version
----------[ sf01prdadm.gogadmin.gog.org ]-----------
Model : ASA5508 (72) Version 6.1.0 (Build 330)
UUID : 72d6a04c-07e8-11e7-95d1-c8a56711b59d
Rules update version : 2017-03-09-002-vrt
VDB version : 279

[keithcclark71]

Marvin I went into Configure mode on the SFR which allowed me to change its hostname and put in the IP settings etc. What I wondered then is while researching this it was instructed to chage hostname using "Expert" mode. This now has me thinking is it necessary to be able to use "Expert" mode in order to manage these Modules in a production environment in time of crisis or needing to change setting that could not be accomplished outside of expert mode

[Marvin Rhoads · Accepted solution]

Interestng - I jsut checked a 5512-X with FirePOWER 6.2 and switching to expert did not require a root password at all.

One should almost never have to go into expert mode unless working with the TAC to troubleshoot an operational issue. There is very little, if anything, one should change there outside of TAC direction as it can very easily render the module non-functional.

I have just a few "go to" commands that I keep around that help me assist customers during installations and troubleshooting that I have gleaned from some partner training and TAC cases I have been on. Mostly showing the contents of logs, checking process status and troubleshooting intial registration with FMC.