Summary
This article describes two methods you can use the reset the SMS SuperUser password.
- Method 1: password reset that uses "Press any key to enter the menu."
- Method 2: password reset that uses shortcut key during boot-up.
NOTE: Both of these methods reset the password to the SMS's serial number (CERT) number. The serial number can be found on the bottom of the SMS unit on the white sticker or by pressing Alt-F12 from the login screen (press Alt-F1 to return to the main login screen).
IMPORTANT: If your SMS server is configured for High Availability (HA), you must disable HA before performing this procedure. To reset the SuperUser password, break down the cluster, reset the SMS, and re-establish the cluster.
Method 1:
NOTE: Connection to the SMS server with a local keyboard and monitor is required to complete the reset, a serial connection will not work.
- Attach a console and cable to the SMS and reboot the system.
- Watch for the prompt "Press any key to enter the menu." This prompt only appears for 2 seconds during the boot process. Press any key before the countdown timer reaches 0.
- If successful, the system will display the following:
- Select the Password Recovery option by using the Up/Down arrow keys and press Enter. The SMS will complete its boot sequence.
- After the SMS completes the boot sequence, the factory SuperUser account is reactivated and the password is the serial number (CERT) of your SMS.
- TippingPoint highly recommends changing the password immediately following the reset. Once logged in, the password can be changed with the "password" command.
Method 2:
- Attach a console and cable to the SMS and reboot the system.
- Watch the system boot sequence, when the "Starting mgmt:" prompt is displayed, press the letter "P" (capital or lowercase). IMPORTANT! The "P" must be entered within three seconds to trigger password recovery. If this method of password recovery is successfully initiated, the "Password recovery enabled" message is displayed.
Example;
Initializing...
Calling the system activity collector (sadc): [OK]
Ip6tables: Applying firewall rules: [OK]
Iptables: Applying firewall rules: [OK]
Bringing up loopback interface: [OK]
Bringing up interface eth0: [OK]
Starting system logger: [OK]
Starting kernel logger: [OK]
Starting rpcbind: [OK]
Starting RPC idmapd: [OK]
Starting system message bus: [OK]
Starting acpi daemon: [OK]
Starting HAL daemon: [OK]
Starting ipmi drivers: [OK]
Starting sshd: [OK]
ntpd: Synchronizing with time server: [OK]
Starting ntpd: [OK]
Starting crond: [OK]
Starting mgmt: P
Password recovery enabled
- When the SMS completes the boot sequence, the factory SuperUser account is reactivated and the password is the serial number (CERT) of your SMS.
- TippingPoint highly recommends changing the password immediately following the reset. Once logged in, the password can be changed with the "password" command.