Password Recovery Procedure for …

Security ServicesModules AIP−SSM and CSC−SSM
Document ID:82109
Contents
Introduction
Prerequisites
Requirements
RelatedProducts
Conventions
Step−by−StepProcedure
SampleProcedure
RelatedInformation
Introduction
This documentdescribes how to recover a password on a Cisco ASA 5500 SeriesContent Security and
Control SecurityServices Module (CSC−SSM) or the Advanced Inspection and PreventionSecurity Services
Module (AIP−SSM)without the need to re−image the device.
Prerequisites
Requirements
A list ofadditional files that you need for the recovery procedure isrequired. This includes an explanation of
how and where toget the files and any processing that needs to happen before therecovery procedure begins.
Cisco ASA 8.x andlater software provides a mechanism to reset the passwords of theSSM modules (CSC or
AIP) without theneed to re−image the device.
Note: The CSC andAIP modules must run version 6.0 in order for the feature to work.There is no option for
password recoveryin version 5.0 for the AIP−SSM or CSC−SSM, because this feature isnot introduced until
version6.0.
RelatedProducts
This passwordrecovery procedure can be used for any of theseproducts:
· AdvancedInspection and Prevention Security Services Module(AIP−SSM)
· Content Securityand Control Security Services Module(CSC−SSM)
Conventions
Refer to CiscoTechnical Tips Conventions for more information on documentconventionsStep−by−Step Procedure
This step isnecessary in order to complete the passwordrecovery.
Issue thehw−module module <module_num>password−reset command from the Cisco ASA CLI. Forthe
AIP module, thiscommand sets the configuration register in ROMMON to cause a bootof the password reset
image and thenpower cycles the module. For the CSC module, this command sends thesession 1 do
reset−passwordcommand to the module.
ciscoasa(config)#hw−module module 1password−reset
Reset the passwordon module in slot 1? [confirm]
SampleProcedure
This procedureshows how to recover the password with the Cisco Adaptive SecurityDevice Manager
(ASDM).
1. For theAIP−SSM, click Tools on the main menu, and select IPS PasswordReset.
2. For theCSC−SSM, click Tools on the main menu, and select CSC PasswordReset