-
Title
How to reset the built in Admin password -
Description
How to unlock and reset the password for the Safeguard Bootstrap Admin account. -
Resolution
The Bootstrap Administrator is a built-in account to get the appliance running for the first time. The default credentials (admin/Admin123) should be changed once Safeguard is configured. If you lose the password, you can reset it to the default using the challenge response process below.
Method 1 - Using the web Support Kiosk remotely (Only for AWS or Azure cloud instances)
1. Open your web browser and navigate to the network address of the SPP appliance, on port 9337 (ie. https://10.10.10.10:9337)Note: The URL on port 9337 is only available for the cloud instances of SPP such as in AWS or Azure.
2. In the left menu, expand Support Kiosk and select Admin Password Reset.
3. Fill out the Full Name or Email box.
4. Click Get Challenge.
5. Click Copy Challenge. Then paste the challenge into a text file, and attach that file to your Support Service Request.
OR Screenshot the QR code and attach the image to your Support Service Request. .
Support will send back a challenge response that is good for 48 hours. Do not refresh your screen.
Use a QR code reader on your phone to get the challenge response.
6. After the response is accepted, click Reset Password. Once the operation has completed, the password for the admin account will default back to Admin123.
Method 2 - Using the Support Kiosk through the MGMT port
You will need physical access to the appliance, a laptop and an ethernet cable to complete this.
1. Connect an Ethernet cable from the laptop to the MGMT port on the back of the appliance.
2. Set the IP address of the laptop to 192.168.1.100, the subnet mask to 255.255.255.0, and no default gateway.3. Open a browser on the laptop and connect to https://192.168.1.105 (the IP address of the MGMT port) and proceed past any certificate warnings.4. In the left menu, expand Support Kiosk and select Admin Password Reset.
5. Fill out the Full Name or Email box.
6. Click Get Challenge.
7. Click Copy Challenge. Then paste the challenge into a text file, and attach that file to your Support Service Request.
OR Screenshot the QR code and attach the image to your Support Service Request. .
Support will send back a challenge response that is good for 48 hours. Do not refresh your screen.
Use a QR code reader on your phone to get the challenge response.
8. After the response is accepted, click Reset Password. Once the operation has completed, the password for the admin account will default back to Admin123
Method 3 - Serial Kiosk available on physical Safeguard appliances
1. Connect to the recovery Kiosk, either physically via serial cable or via the IPMI network interface
You will need to navigate the text based interface using the arrows keys and the Enter key to select.
2. From the kiosk, select the "Admin Password Reset" option.
3. Press the right arrow key
4. In the ID field, enter your e-mail address, and press the down-arrow key.
5. On the Get challenge screen, press the Enter key. Safeguard produces a challenge string.
6. Copy and Paste the full challenge string into a text document and attach the file to your Support Service Request.
7. While waiting for the response do not move from this screen, or disconnect the serial cable
8. After receiving the One Identity Support response string, enter the response into the kiosk screen and select "Reset Password"Note: The response is only valid for 24 hours from when it was generated by One Identity.
9. Once the operation has completed, the password for the admin account will be defaulted back to Admin123
Method 4 - VM Console available for VMWare and Hyper-V virtual appliances
Note, due to Microsoft limitations, when using the Windows Kiosk it is not possible to copy and paste. In Hyper-V it is possible to automate typing text from the keyboard, and using full ESX it may be possible to emulate keypresses via the API call PutUsbScanCodes().
The recommend option is to utilize Method #1 or #2 above, where possible.
1. From the hypervisor software connect to the console session of Safeguard
2. Select Support Kiosk | Admin Password Reset
3. Enter your email address and click "Get Challenge"
4. Take a screenshot of the Challenge QR Code, and send to One Identity Support
5. After receiving the One Identity Support response string, enter the response code into the response field
6. Click "Reset Password"
7. Once the operation has completed, the password for the admin account will be defaulted back to Admin123
Method 5 - Serial Console Kiosk available on Azure virtual appliances
1. Logon to the Azure website and select the Safeguard Virtual Machine.
2. Select "Serial console" under "Support + troubleshooting"
3. When the console opens select "Admin Password Reset"
4. Enter your email address and click "Get Challenge"
5. Click "Copy Challenge" to copy the string into the clipboard
6. Copy and Paste the full challenge string into a text document and send it to One Identity Support.
7. After receiving the One Identity Support response string, copy and paste the response code into the response field
8. Click "Reset Password"
9. Once the operation has completed, the password for the admin account will be defaulted back to Admin123