topic Re: Reset Expert Password on an 1100 in Spark Firewall (SMB)

Reset Expert Password on an 1100

Dylan_Jensen — Fri, 03 Aug 2018 21:25:02 GMT

Here's a little one liner to reset the expert password on 1100, might work with other models but I've never tried it.

Must be ran from the management server.

$CPDIR/bin/cprid_util -server <IP of 1100> -verbose rexec -rcmd /bin/bash -c "cd /pfrm2.0/config1 ; rm expert_pass_"

After you run that, ssh into the 1100. Enter expert and now you'll be prompted for a new expert password.

Re: Reset Expert Password on an 1100

G_W_Albrecht — Tue, 07 Aug 2018 10:04:15 GMT

This will work on any SMB device !

Re: Reset Expert Password on an 1100

Steve_Parry — Mon, 14 Jan 2019 09:02:49 GMT

We have an 1100 centrally managed device, the chap who it up a while back has left and we no longer have the expert password. As it is centrally managed we don't have a Management Server to run this on. Any suggestions?

Re: Reset Expert Password on an 1100

G_W_Albrecht — Mon, 14 Jan 2019 10:01:41 GMT

If it is centrally managed you must have a Management Server to install policy. If it is managed locally, t.m. all configuration is done in WebGUI, see sk106025: How to reset Expert password on a Check Point SMB Appliance

Re: Reset Expert Password on an 1100

Steve_Parry — Mon, 14 Jan 2019 10:56:35 GMT

Thank you Günther, yes it is locally managed, my mistake. The only option from that link seems to be a factory reset. if I reset, will a restore from backup then overwrite the new passwords I set or will they stay as is? I've been fortunate never having to restore before.

Steve

Re: Reset Expert Password on an 1100

G_W_Albrecht — Mon, 14 Jan 2019 12:44:18 GMT

This is only partly true - in sk107558: How to change administrator password to a clear-text password or a password hash you can find how to generate a password hash. In the SMB backup file, you can find the file expert_pass_ that contains the hash top level in the .zip file. If you replace the content of expert_pass_ with a newly generated hash for the new expert password and import the backup, this should reset the expert password. But i have to admit that i did never try this before 😉

Re: Reset Expert Password on an 1100

G_W_Albrecht — Fri, 26 Nov 2021 09:59:13 GMT

You can also just delet expert_pass and compress the backup again - after import, expert will ask yoi to set a new expert password and you save the time to generate a hash, see here:

sk106025: How to reset the Expert mode password on a Quantum Spark Appliancewith Gaia Embedded OS

Also @PhoneBoy mentioned it: Reset 1450 (Gaia imbedded) expert password

Re: Reset Expert Password on an 1100

Constantin — Sat, 26 Nov 2022 07:29:08 GMT

Thanks! I can confirm it's working.