Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

How to Recover the Root Password

Learn how to recover the root password for SRX1600, SRX4120, and SRX4300 Firewalls.

If you forget the root password for your firewall, you can use the password recovery procedure to reset the root password.

Before you begin, note the following:

  • You need console access to recover the root password.

To recover the root password:

  1. Power off the firewall by pressing the power button on the front panel.
  2. Connect a console cable between the management device and the console port of the firewall.
  3. On the management device, start your asynchronous terminal emulation application (such as Microsoft Windows HyperTerminal). Then, select the appropriate COM port to use (for example, COM1).
  4. Configure the port settings as follows:

    • Baud rate: 9600

    • Data bits: 8

    • Parity: None

    • Stop bits: 1

    • Flow control: None

  5. Power on the firewall by pressing the power button on the front panel.

    Verify that the POWER LED on the front panel turns green.

    The terminal emulation screen on your management device displays the firewall’s boot sequence.

  6. When the following prompt appears, press the Spacebar to access the firewall’s bootstrap loader command prompt.
    Note:

    Depending on your device hardware, the bootstrap loader might proceed quickly at this step without pausing for input. Pay close attention to the prompts that appear and press the Spacebar immediately after seeing the above prompt flash on the screen.
  7. At the following prompt, type boot -s to start the system in single-user mode.
  8. At the following prompt, type recovery to start the root password recovery procedure.
  9. Enter configuration mode in the CLI.
  10. Set the root password.

    When you configure a plaintext password, the system encrypts the password for you.

    CAUTION:

    Avoid using the encrypted-password option unless the password is already encrypted and you are entering the encrypted version of the password. If you commit the encrypted-password option with a plaintext password or with blank quotation marks (" "), you cannot log in to the device as root and must repeat this password recovery process.
  11. At the following prompt, enter the new root password. For example:
  12. At the second prompt, reenter the new root password.
  13. After you have finished configuring the password, commit the configuration.
  14. Exit configuration mode in the CLI.
  15. Exit operational mode in the CLI.
  16. At the prompt, type y to reboot the firewall.