Imperva Cyber Community

Expand all | Collapse all

Reset Password admin and root

  • 1.  Reset Password admin and root

    Posted 04-09-2020 07:56

    Hi there
    I hope you can help me.

    I have a device mx which I do not have the passwords of admin or root.

    My question is if there is a way to reset the admin and root account.
    Do you know of any documentation link that I can consult for this?

    Thanks in advance.

    JN


    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Juan Nogueron
    Wise Solutions
    CD MX
    ------------------------------


  • 2.  RE: Reset Password admin and root

    Community Manager
    Posted 04-09-2020 08:07
    Juan, 

    I think this could help guide an answer to your question. Let me know if it doesn't. 

    Some Documentation can be found here: 

    Retrieving and Resetting Passwords
    ------------------------------
    Christopher Detzel
    Community Manager
    Imperva
    ------------------------------



  • 3.  RE: Reset Password admin and root

    Posted 04-09-2020 19:04
    Hi Christopher.
    Thanks for the info.

    Complementing, the procedure depends on the version (11.0 in my case) and I found this information:

    Future Support - Starting with  On-Premises SecureSphere version v13.6.0.30 and 14.1.0 and higher you will be able to execute the command form the MX CLI which will reset the password to webco123

    impctl support server --reset-admin-password


    The following steps are to reset the password to webco123 by updating the MX DB. 
    Initial Steps

    • Login to the MX via SSH as user root (or through another user and elevate)
    • Run the command "su - oracle"
    • Login to the local database by running the command
    • "sqlplus secure/<password of user secure>". For example: sqlplus secure/webco123
    • Enter the following queries on the prompt: 


    The following steps will change the password to "webco123" :

    • For for V13.2 and earlier 
    UPDATE SECURE.CONF_SECURE_MEMBERS SET password = 'c803ac767fddcdfc230a31c98ed27745'  WHERE dn = 'admin';
    commit;

    • For for V13.3 and newer - the encryption string is different 
    UPDATE SECURE.CONF_SECURE_MEMBERS SET password = '$2a$07$zFlZZFscmZuxCIltoclHk..NuPzrZTUHl3BhkQW5ImwiJiURgO9LC' WHERE dn = 'admin';
    commit;

    It is important that the password is between '', example 'password'

    And for the recovery of the root password and the bootloader password, I followed the following links:

    https://wiki.centos.org/TipsAndTricks/ResetRootPassword
    https://www.youtube.com/watch?v=t0OgDxV6AFU

    I hope not to violate any policy by putting these links and help many friends.Thanks for your help.
    Solved case!!.

    ------------------------------
    Juan Nogueron
    Wise Solutions
    CD MX DIF
    ------------------------------



  • 4.  RE: Reset Password admin and root

    Impervian
    Posted 04-10-2020 07:16
    Hi Juan,

    You could use the following KB articles to reset root password. In addition, you can change bootloader password via impcfg command line utility.

    https://www.imperva.com/sign_in.asp?retURL=/articles/Procedure/Password--How-to-recover-and-reset-root-password-on-virtual-appliance-VM
    https://www.imperva.com/sign_in.asp?retURL=/articles/Procedure/Password--How-to-recover-and-reset-root-password-on-hardware-appliances

    ------------------------------
    cezmi çal
    technical expert
    Barikat Cyber Security
    ------------------------------



  • 5.  RE: Reset Password admin and root

    Posted 04-10-2020 10:06
    Hi Cezmi.

    Thanks for the official information.

    I did a virtual lab, and followed the steps I shared and it worked without problems. but now I already have the official document.
    Thanks for the help.
    Regards

    ------------------------------
    Juan Nogueron
    CD MX
    ------------------------------



  • 6.  RE: Reset Password admin and root

    Community Manager
    Posted 04-10-2020 12:06
    @Juan Nogueron, thanks for the information. No, it's not a violation. this is cool stuff. It's exactly what we are looking for. When you figure out a way to do something with Imperva products, like this, then share it every time.

    ------------------------------
    Christopher Detzel
    Community Manager
    Imperva
    ------------------------------