Showing results for 
Search instead for 
Did you mean: 

update to login problem

Peter __

Just a warning if you have special characters in your password at the start and update to you may not be able to login.


Recommend you make another admin user and backup your config 


Should you be locked out you have to reset login with cisco default change password Swap firmware Image to old reboot then load your config login change your password then Swap firmware Image to new and your up and running again. 

9 Replies 9

VIP Mentor VIP Mentor
VIP Mentor


          - Useful but you also may want to specify the device/model which gave you this problem.


SG350-10 10-Port Gigabit but guess other models will have the same problem 


Same problem with SG350-10MP.. This is a stupid bug and will catch anyone out who cares about security!

How to reset password:

Fully agree ! This is not funny whether or not it can be solved via password reset.


I did not experience this issue upgrading an SG350X-12PMV from v2.5.7.85 to v2.5.8.12. (Password 60+ characters/350+ bits/multi-case alphanumeric plus special characters.)

Martin Aleksandrov
Cisco Employee
Cisco Employee



You may need to log a case with the TAC so they can investigate and eventually file a bug. Following the standard process, this can be escalated and fixed with some of the next firmware releases.





According to the release notes the password encryption changed between and but I had no problems with that release.

I have verified that the username line in my config file was the same in an externally backed up config file as when I recovered it from using the console cable.

My password I've now checked was/is exactly 20 characters long with just lowercase and uppercase alphanumerics (it had no special characters).

What is possible is between and my password age was not updated and between and it had erroneously expired.


Resetting it using a console cable to exactly the same password as before works fine.. of course the line now looks different due to a different password age (presumably the date the password was set is stored in there) and salt ("In current release user credentials are salted and hashed using PBKDF2 based on HMAC-SHA-512 hash").


So while I haven't changed the outcome - I can bring clarity that it's unlikely to be specific passwords or a config upgrade issue that is causing the issue rather password expiry.


In my config I had no reference to ageing but in I have "passwords aging 0 ", I wonder if there's an expiry bug we will see in the default ageing period (potentially 180 days). I'll keep my console cable handy.

Same issue with SG250X and Update completed, rebooted and now "invalid password". 16 lenght with only & and ^ as special chars. Rest numbers and letters (mixed case)

Another SG350X updated at the same time (same version number), with the same password complexity and lenght has no issue. 16 lenght with only @ and ^ as specials chars. Rest numbers and letters (mixed case)


I have the same issue on a SG250-26 with the firmware After the update was finished, I switched the boot version with the new firmware, rebooted the device and I am unable to login. The password contains only alpha-numeric characters and an *


I saw a couple of what I believe that are related issues, after the firmware upgrade.


This is very annoying, because I personally don't have physical access to the switch. Also, the SG250 does not have CLI in order to reset the password, and you are only left with the option to reset the switch.


Maybe CISCO is trying now to force some users to buy more expensive devices.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: