Configure Sysadmin User Password Recovery

Introduction

This document describes how to enable the sysadmin user password recovery feature in Secure Network Analytics 7.6.0 release.

Problem

This only user that can perform system configuration steps on the command line interface is sysadmin. 

Previously, resetting the sysadmin user password required a full appliance reboot and entering a very lengthy one time recovery string without error or the process would have to be restarted.

This made the recovery process slow, inefficient, and highly prone to manual entry errors during critical maintenance windows.

The Secure Network Analytics (SNA) 7.6.0 release introduces a "Gatekeeper" approach, where an administrator must first enable the reset capability at the appliance console level before the option becomes available in the web UI.

Solution

Enable the Feature via the CLI SystemConfig menu on the Manager. 

The sysadmin user with must enable the feature so in order for it to be used in the future. 

1. Log in to the Manager appliance console as the sysadmin user to enter the SystemConfig menu.
2. From the main menu, select Security .
3. Select Sysadmin Password.
4. Select Yes when prompted to enable the password reset feature.
   
   

   The feature has now been enabled. 

Change the sysadmin user password through the web UI

Once enabled in the console, a new, dynamic tab is added to the SNA Manager interface:

1. Log in to the web UI of the Secure Network Analytics Manager Appliance.
2. From the main menu, choose Configure > User Management.
3. Select the Sysadmin Password tab.
   
   

   Note: This tab is only accessible to users to Primary Admin users

4. In the New Password field, enter the new password.
5. In the Confirm Password field, re-enter the new password.
6. (Optional) Click Generate Password to automatically create a strong password.
7. (Optional) Check the Show Password check box to view the entered passwords.
8. Click Save.