About No Service Password-Recovery; Enabling No Service Password-Recovery - Cisco Nexus 9000 Series Configuration Manual

Configuring User Accounts and RBAC

About No Service Password-Recovery

The No Service Password-Recovery feature enables anyone with console access, the ability to access the
router and its network. The No Service Password-Recovery feature prevents the password recovery with
standard procedure as described in the

Enabling No Service Password-Recovery

If the no service password-recovery feature is enabled, then none except the administrator with network
privileges will be able to modify the administrator password.
Before you begin
If you plan to enter the no service password-recovery command, Cisco recommends that you save a copy of
the system configuration file in a location away from the device.
SUMMARY STEPS
1. configure terminal
2. no service password-recovery
3. (Optional) copy running-config startup-config
4. Reload
5. exit
6. (Optional) show user-account
7. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2 no service password-recovery
Example:
switch(config)# no service password-recovery
WARNING: Executing this command will disable the
password recovery mechanism. Do not execute this
command without another plan for password recovery.
Are you sure you want to continue? (y/n) : [y] y
switch(config)# copy run start
[########################################] 100%
Copy complete, now saving to disk (please wait)...
Copy complete.
Step 3 (Optional) copy running-config startup-config
Example:
Cisco Nexus 9000 Series NX-OS Troubleshooting
Purpose
Enters global configuration mode.
Disables the password recovery mechanism.
Copies the running configuration to the startup
configuration.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
About No Service Password-Recovery
Guide.
171