topic Re: Password Reset | CLI | 1500 in Spark Firewall (SMB)

Password Reset | CLI | 1500

Tharindu — Mon, 14 Aug 2023 08:25:18 GMT

Hi Guys,

One of our customers lost his admin password for the firewall and requested to reset it. Can anyone help me with the steps or guide?

TIA

Re: Password Reset | CLI | 1500

Chris_Atkinson — Mon, 14 Aug 2023 08:57:51 GMT

Is there any access to the appliance at all or he lost the password for the only admin account configured?

If this is a centrally managed appliance you can look at: https://support.checkpoint.com/results/sk/sk119633

Alternately if it's locally managed it may need to be factory reset, in the current EA version a new feature has been added to help avoid such scenarios.

Re: Password Reset | CLI | 1500

Tharindu — Mon, 14 Aug 2023 09:02:32 GMT

Hi Chris,

He only lost the admin password. We believe we can get an SSH session but won't be able to log in.

Also, it's a locally managed firewall. Is there any solution to recover the password without resetting the device?

Re: Password Reset | CLI | 1500

G_W_Albrecht — Mon, 14 Aug 2023 09:03:46 GMT

https://community.checkpoint.com/t5/SMB-Gateways-Spark/Recover-lost-admin-password-from-a-locally-managed-SMB-1530/m-p/157354

Re: Password Reset | CLI | 1500

Tharindu — Mon, 14 Aug 2023 09:09:46 GMT

Hi,

It means we have to reset the box right?

TIA

Re: Password Reset | CLI | 1500

_Val_ — Mon, 14 Aug 2023 09:22:43 GMT

Yes. Unless you have an another admin account that still works

Re: Password Reset | CLI | 1500

Tharindu — Mon, 14 Aug 2023 09:25:23 GMT

Hi,

Unfortunately, the customer doesn't have any other account.

Re: Password Reset | CLI | 1500

_Val_ — Mon, 14 Aug 2023 09:31:20 GMT

Too bad. Any existing backup of that appliance?

Re: Password Reset | CLI | 1500

Tharindu — Mon, 14 Aug 2023 09:33:27 GMT

Hi,

yeah we have 03 month old backup

Re: Password Reset | CLI | 1500

_Val_ — Mon, 14 Aug 2023 09:39:36 GMT

Well, this is better than nothing. Perform a factory reset, set up two admin accounts, just in case, and see if you can restore your policies from that backup or not. Plan for an extensive downtime while you do that, or, if you have another appliance handy, try doing it in the lab first, to see if it works.

Re: Password Reset | CLI | 1500

G_W_Albrecht — Mon, 14 Aug 2023 09:40:49 GMT

Backup contains the old password...

Re: Password Reset | CLI | 1500

_Val_ — Mon, 14 Aug 2023 09:51:38 GMT

Will it remove the second admin account created on the device; as I suggested above?

Re: Password Reset | CLI | 1500

G_W_Albrecht — Mon, 14 Aug 2023 09:56:33 GMT

It will replace the passwd and shadow files. You can change the passwd in backup, see https://community.checkpoint.com/t5/SMB-Gateways-Spark/Replace-expert-password-on-SMB-Appliance/m-p/102708

Re: Password Reset | CLI | 1500

_Val_ — Mon, 14 Aug 2023 10:05:42 GMT

Thanks for sharing, I see a way out here 🙂

Re: Password Reset | CLI | 1500

G_W_Albrecht — Mon, 14 Aug 2023 10:30:39 GMT

Another alternative, use USB media during boot: https://community.checkpoint.com/t5/SMB-Gateways-Spark/set-expert-password-hash-using-autoconf-clish-doesnt-work/m-p/86417#M3633

Not sure if this works on a configured appliance, but could be tested.

Re: Password Reset | CLI | 1500

Tharindu — Mon, 14 Aug 2023 10:30:42 GMT

Thank you, guys, for your great support. found an another login and we logged into the firewall using that account

Re: Password Reset | CLI | 1500

_Val_ — Mon, 14 Aug 2023 10:39:02 GMT

Fantastic news, thanks for sharing

Re: Password Reset | CLI | 1500

davidl36 — Wed, 05 Jun 2024 22:12:47 GMT

why can't there be a reset button like synology which requires physical access to push button to default admin password?

Re: Password Reset | CLI | 1500

PhoneBoy — Thu, 06 Jun 2024 02:00:03 GMT

We don't have a default admin password.
There is an option to perform a factory reset with physical access, however: https://support.checkpoint.com/results/sk/sk98549