topic Recover lost admin password from a locally managed SMB 1530 in Spark Firewall (SMB)

Recover lost admin password from a locally managed SMB 1530

Oliver-BR — Thu, 15 Sep 2022 20:46:43 GMT

Hi folks,

I've made an error and lost the credentials for my locally managed SMB 1530. The device is running R80.20.40 Build 992002691.

I understand there's no recovery option but, as a rookie administrator, would appreciate some guidance on this fix, please.

Would this solve my problem:

Boot the appliance from USB with the R80.20.40 992002691 image.
Restore a configuration backup file from before I (or anybody in my team) team last changed my password.

If so, would it matter if my configuration is taken from a backup from the previous image (I take configuration backups monthly and after every firmware update)?

Please, let me know if there's a more elegant solution.

Re: Recover lost admin password

PhoneBoy — Thu, 15 Sep 2022 20:42:42 GMT

If you put an image on USB and boot off of it, the appliance will be factory reset with that image.
From there, you can restore a backup with a known password.

That said, if the SMB appliance is centrally managed from an SMS or Smart-1 Cloud, you can probably use the SIC connection to reset the admin password.

Re: Recover lost admin password

Oliver-BR — Thu, 15 Sep 2022 20:46:09 GMT

Hi,

The device is locally managed so, unfortunately, I can't use the SIC connection.

When you say "From there, you can restore a backup with a known password", do you mean to restore a config file from which there is a known password? I'm sorry if that's a dumb question.

Re: Recover lost admin password

PhoneBoy — Thu, 15 Sep 2022 20:53:11 GMT

I mean restore a backup taken from Device > System > System Operations > Backup and Restore System Settings.
Other forms of backup, I cannot speak for.

Re: Recover lost admin password

Oliver-BR — Thu, 15 Sep 2022 21:01:27 GMT

That's what I thought you meant.

Thanks.

Re: Recover lost admin password

rakesh_ar — Thu, 03 Oct 2024 20:34:12 GMT

If SMB appliance was centrally managed from Smart-1 Cloud what is the procedure, cant seems to find the SK Article.

Re: Recover lost admin password

PhoneBoy — Fri, 04 Oct 2024 15:05:04 GMT

The procedure is here: https://support.checkpoint.com/results/sk/sk106490
TAC will most likely be needed to execute the procedure, though.

Re: Recover lost admin password

rakesh_ar — Mon, 07 Oct 2024 15:30:51 GMT

Thankyou, will reach out to the support. But the SK106490 suggests not supported for Spark Gaia Embedded appliances.

Re: Recover lost admin password

PhoneBoy — Mon, 07 Oct 2024 16:13:04 GMT

It should be similar for Embedded Gaia.