System Security Configuration Guide for Cisco 8000 Series Routers, IOS XR Releases

PDF

System Security Configuration Guide for Cisco 8000 Series Routers, IOS XR Releases

Configure the first router user

Updated: September 18, 2026

Want to summarize with AI?

Log in

Provides instructions for creating the initial local user account, enabling administrators to establish secure access before further AAA configuration.

Create the first root-system user to establish administrative access for the initial management session.

When a Cisco router boots for the first time, you must configure a root-system username and password. This step is necessary to access IOS XR and manage the router.

Before you begin

Use the console port for the initial login dialog.

Procedure

  1. Establish a connection to the console port.

    Example:

    Enter root-system username

    This connection initiates communication with the router. When the connection succeeds, the router displays the prompt.

  2. Type the username for the root-system login and press Enter.

    The router sets the root-system username that you use to log in to the router.

  3. Type the password for the root-system login and press Enter.

    Example:

    Enter secret

    The router creates an encrypted password for the root-system username. The password must be at least six characters long.

  4. Retype the password for the root-system login and press Enter.

    Example:

    Enter secret again

    The router verifies that both password entries match.

    Note

    If the passwords do not match, the router prompts you to repeat the process.

  5. Log in to the router.

    The login establishes your access rights for the router management session.

    Note

    If the router reloads and no username and password are stored, you must create a new username and password.

You can log in to the router and reach the IOS XR prompt. The first-user configuration is complete.

The following example shows the root-system username and password configuration for a new router, and it shows the initial login:

Administrative User Dialog
Enter root-system username: cisco
Enter secret:
Enter secret again:

Router#:Jan 10 12:50:53.105 : exec[65652]: %MGBL-CONFIG-6-DB_COMMIT : 'Administration configuration committed by system'.
Use 'show configuration commit changes 2000000009' to view the changes. Use the 'admin' mode 'configure' command to modify this configuration.
User Access Verification
Username: cisco
Password:

The "secret" line in the configuration script indicates that the password is encrypted. When you type the password during configuration and login, it is hidden for security.