This post is about the common password recovery procedure via the ROMMON mode. This procedure shows how to recover the password with the Cisco Adaptive Security Device Manager (ASDM).įor the AIP-SSM, click Tools on the main menu, and select IPS Password Reset.įor the CSC-SSM, click Tools on the main menu, and select CSC Password Reset.I previously posted a quick procedure for password recovery on a Cisco 2900 router via ejecting the compact flash (CF) card. Reset the password on module in slot 1? Sample Procedure ciscoasa(config)# hw-module module 1 password-reset For the CSC module, this command sends the session 1 do reset-password command to the module. For the AIP module, this command sets the configuration register in ROMMON to cause a boot of the password reset image and then power cycles the module. Issue the hw-module module password-reset command from the Cisco ASA CLI.

This step is necessary in order to complete the password recovery. Refer to Cisco Technical Tips Conventions for more information on document conventions. This password recovery procedure can be used for any of these products:Īdvanced Inspection and Prevention Security Services Module (AIP-SSM)Ĭontent Security and Control Security Services Module (CSC-SSM) There is no option for password recovery in version 5.0 for the AIP-SSM or CSC-SSM, because this feature is not introduced until version 6.0.

Note: The CSC and AIP modules must run version 6.0 in order for the feature to work. This includes an explanation of how and where to get the files and any processing that needs to happen before the recovery procedure begins.Ĭisco ASA 8.x and later software provides a mechanism to reset the passwords of the SSM modules (CSC or AIP) without the need to re-image the device.

Prerequisites RequirementsĪ list of additional files that you need for the recovery procedure is required. This document describes how to recover a password on a Cisco ASA 5500 Series Content Security and Control Security Services Module (CSC-SSM) or the Advanced Inspection and Prevention Security Services Module (AIP-SSM) without the need to re-image the device.

Password recovery cisco 5505 asa