Cisco ACS 4.x Password Recovery

cboyce · ‎11-05-2007

I inherited a ACS server, but I don't have the admin password. Does anyone know of a password recovery technique ?

Jagdeep Gambhir · ‎11-06-2007

If it is running acs ver 4.0 on windows, then it is not possible. With ACS v4.0 all the configurations have been shifted from registry to a database file thus increasing the security in ACS. So as of now there is no way to recover the lost Admin password in ACS v4.0, cause no setting is in registry, all settings are in SQL database.

So need to reimage it ...

If it is acs windows 3.3.4 or below then you need to make registry change,

login to ACS machine as administrator..

Go to start ===> run ===> regedit

Click on HKEYLOCAL machine ===> software ===> cisco

===>CiscoAAAv3.2===>CSAdmin===> and delete all administrative users defined by

right clicking into the administraor folder.

Now login locally to ACS and it should not prompt you for password.

For a best practice make sure that you have Allow automatic login is checked

This will not prompt you for password if you are logging in locally from ACS mahcine.

If it is appliance then you need to use recovery cd to reset admin password.

Regards,

~JG

Do rate helpful posts

cdmb · ‎11-16-2007

If i know the password for a locked admin is there a way to unlock it via command line?

SBakelli2 · ‎12-01-2007

Hello,

I have ACS windows 3.2, I forgot my Admin password, and I lost my recovery CD.

Please advice What I can do???

===== it's very urgent =======

Please Notify me by email: bakelli_salah@yahoo.fr when answered.

Best Regards

Jagdeep Gambhir · ‎12-03-2007

Pls open a case, TAC will provide you with recovery image.

Regards,

~JG

SBakelli2 · ‎12-03-2007

Hi,

I can provide you all Information that you need

SN, Customer name, Date of Purchase, Supplier name....etc

But We haven't SmartNet for this prodect.

Many Thanks

Jagdeep Gambhir · ‎12-03-2007

I can't provide you software on this forum. You need to contact your accounts team, if you can't open a case.

Regards,

~JG

hwknight53 · ‎12-04-2007

I guess that I'm missing something here. You can access ACS from the web browser on the server where ACS is installed without credentials, as long as you have a logon to the system. Then you can change the admin accounts.

Wes

akemp · ‎12-04-2007

Thats fine for http://127.0.0.1:2002 unless you've got the "allow automatic local login" de-selected under Administration Control-->Session Policy Setup. If that is not selected you're looking at re-installing.