Cisco ASA Series Cli Configuration Manual page 514

Performing Password Recovery
The ASA prompts you for new values.
Step 8
Accept the default values for all settings, except for the "disable system configuration?" value.
Step 9
At the prompt, enter Y.
Step 10
Reload the ASA by entering the following command:
rommon #2> boot
Launching BootLoader...
Boot configuration file contains 1 entry.
Loading disk0:/asa800-226-k8.bin... Booting...Loading...
The ASA loads the default configuration instead of the startup configuration.
Step 11
Access the privileged EXEC mode by entering the following command:
hostname# enable
Step 12
When prompted for the password, press Enter.
The password is blank.
Step 13
Load the startup configuration by entering the following command:
hostname# copy startup-config running-config
Step 14
Access the global configuration mode by entering the following command:
hostname# configure terminal
Step 15
Change the passwords, as required, in the default configuration by entering the following commands:
hostname(config)# password password
hostname(config)# enable password password
hostname(config)# username name password password
Step 16
Load the default configuration by entering the following command:
hostname(config)# no config-register
The default configuration register value is 0x1. For more information about the configuration register,
see the command reference.
Step 17
Save the new passwords to the startup configuration by entering the following command:
hostname(config)# copy running-config startup-config
Disabling Password Recovery
To disable password recovery to ensure that unauthorized users cannot use the password recovery
mechanism to compromise the ASA, enter the following command:
Command
no service password-recovery
Example:
hostname (config)# no service
password-recovery
Cisco ASA Series CLI Configuration Guide
1-14
Purpose
Disables password recovery.
Chapter 1 Configuring Basic Settings