# SOPHOS UTM: ADMIN, LOGINUSER, AND ROOT ŞİFRE YENİLEME

# SOPHOS UTM: ADMIN, LOGINUSER, AND ROOT ŞİFRE YENİLEME

## OVERVİEW

This article contains steps to reset the password of the accounts `admin`, `loginuser`, and `root`.

## PRODUCT AND ENVİRONMENT

Sophos UTM

## RESETTİNG PASSWORD FOR ADMİN, LOGİNUSER, AND ROOT

### RESET THE LOGİNUSER AND ROOT PASSWORDS VİA CLI

1. Power off Sophos UTM.
2. Do either of the following: 
    - Connect a monitor and a keyboard to Sophos UTM.
    - Connect a computer to Sophos UTM via a serial cable and use a terminal emulator application such as PuTTY and configure it to connect to `COM1` with a baud rate of `38400`. For more information, see [Sophos UTM: Access the UTM shell via SSH using PuTTY](https://support.sophos.com/support/s/article/KB-000038680).
3. Power on Sophos UTM and press **ESC** once the GRUB boot loader shows:  
      
    [![img1.jpg](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/scaled-1680-/IZre2hmEDSJ0SZFu-img1.jpg)](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/IZre2hmEDSJ0SZFu-img1.jpg)
4. Select the running Sophos UTM version that does not have the words `previous` or `rescue` listed and press **E**.  
      
    Example:  
      
    [![img2.jpg](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/scaled-1680-/DKqRABfcNo0tLbZO-img2.jpg)](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/DKqRABfcNo0tLbZO-img2.jpg)
5. Select the option that starts with the word `kernel` and press **E**.  
      
    Example:  
      
    [![img3.jpg](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/scaled-1680-/DoiSFUHsm5cP8vCc-img3.jpg)](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/DoiSFUHsm5cP8vCc-img3.jpg)
6. Run the following commands: 
    - Connected via a monitor and keyboard or if you are using a virtual machine: `init=/bin/bash`  
          
        Example:  
          
        [![img4.jpg](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/scaled-1680-/TUFmJeVA2c7mjokO-img4.jpg)](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/TUFmJeVA2c7mjokO-img4.jpg)
    - Connected via a laptop and serial cable: `init=/bin/bash console=ttyS0,38400`
7. Press **Enter** to return to the previous screen.
8. Press **B** to restart Sophos UTM.  
      
    The keyboard layout may change when going through the GRUB boot loader, and this may cause passwords to be different than what you entered. Avoid using the following:  
    
    - Letters `s`, `y`, and `z`
    - Short passwords like `test`
    
      
    You can use a simple password like `ClosedDoor` and change its complexity later via WebAdmin.
9. Run the command `passwd loginuser`
10. Confirm the password for the account `loginuser`.
11. Run the command `passwd root`  
      
    **Note**:  
    Step 11 and onwards may not work with certain firmware versions due to a known issue with USB keyboard drivers not loading correctly when accessing the bash recovery environment. Ensure your Sophos UTM is updated to the [latest firmware version.](https://www.sophos.com/en-us/support/downloads/utm-downloads)  
     **Affected versionsNon-affected versions**9.104-9.1119.1129.205-9.2099.2109.300-9.307 for SG-series UTMs9.308+
12. Enter and confirm the password for the account `root`:  
      
    [![img5.jpg](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/scaled-1680-/a591seqcI6MtRuiu-img5.jpg)](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/a591seqcI6MtRuiu-img5.jpg)
13. Press Ctrl+Alt+Del to restart Sophos UTM or run the command `./etc/init.d/rc6.d/S10reboot`  
      
    **Note**: Do not enter the GRUB CLI that will be displayed.
14. Run the command `root` and enter its newly-set password.
15. Run the command `cc`
16. Run the command `RAW`
17. Run the command `system_password_reset`  
      
    Example:  
      
    [![img6.jpg](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/scaled-1680-/6hUxDMtZzvIwpfE1-img6.jpg)](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/6hUxDMtZzvIwpfE1-img6.jpg)
18. Ensure your computer: 
    - is connected to Sophos UTM’s local area network (LAN) port.
    - is on the same LAN as that of Sophos UTM.
    - has the Sophos UTM’s IP address configured as its gateway.
19. Open a browser on your computer and connect to your Sophos UTM via `https://IP address:4444`  
      
    Example: `https://192.168.2.1:4444`
20. Enter a new password for the account `admin` and click **Apply**.

**Note**:  
If resetting the password fails on Sophos UTM appliances that are online and in high availability (HA) setup, power off the secondary appliance and reset the password of the primary appliance. Once successful with the password reset, power on the other appliance to sync the updated passwords.

### RESET THE WEBADMİN PASSWORD

Follow the steps here if you cannot sign in to WebAdmin using the account `admin` but you know the password for the account `root`.

1. Access Sophos UTM via the following: 
    - Connect a monitor and keyboard and sign in using the account `root`.
    - Connect a computer to Sophos UTM via a serial cable and use a terminal emulator application such as PuTTY and configure it to connect to `COM1` with a baud rate of `38400`. For more information, see [Sophos UTM: Access the UTM shell via SSH using PuTTY](https://support.sophos.com/support/s/article/KB-000038680).
2. Sign in via the following: 
    - CLI: Use the account `root`
    - PuTTY: Use the account `loginuser` then run the command `su` to go to the account `root`
3. Follow step 15 onwards of the section [Reset the loginuser and root passwords via CLI](https://support.sophos.com/support/s/article/KB-000034260?language=en_US#step15).

**Note**: This procedure will also reset the `loginuser` and `root` SSH passwords. Do either of the following to enter new passwords:

- Go to **Management** > **System Settings** > **Shell Access** > **Shell user passwords**
- Run the commands `passwd loginuser` and `passwd root` on the console, while signed in as `root`

If you cannot access the WebAdmin sign-in page, the allowed networks may have changed. Run the following commands and press **Enter** to fix the access:

1. `cc`
2. `webadmin`
3. `allowed_networks@`
4. `=['REF_NetworkAny']`  
      
    [![img7.jpg](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/scaled-1680-/vUxB8JkxyjSPHS54-img7.jpg)](https://docs.teletek.net.tr/uploads/images/gallery/2024-07/vUxB8JkxyjSPHS54-img7.jpg)

Kaynak: https://support.sophos.com/support/s/article/KB-000034260?language=en\_US