topic Re: Cortex XDR supervisor password in Cortex XDR Discussions

Cortex XDR supervisor password

Marsooq_A — Thu, 28 May 2020 08:04:37 GMT

Hi Team,

Some cytool commands were asking to enter supervisor password to proceed, Is this the uninstall password had to set while creating the package? or the Login account password?

Re: Cortex XDR supervisor password

dfalcon — Thu, 28 May 2020 12:20:46 GMT

HI @Marsooq_A -

Yes, this is the uninstall password. If you need to change the password, this can be done within the agent profile.

Re: Cortex XDR supervisor password

Marsooq_A — Thu, 28 May 2020 12:30:02 GMT

well , It didn't work for me, even I created a dedicated policy for an endpoint with customized agent profile with a known uninstall password to test this. But did not work

Re: Cortex XDR supervisor password

Marsooq_A — Thu, 28 May 2020 12:39:13 GMT

Re: Cortex XDR supervisor password

dfalcon — Thu, 28 May 2020 12:46:10 GMT

Hi @Marsooq_A-

When you go to to your list of endpoints, can you right-click on the machine in question then select Endpoint Data > View Endpoint Policy.

From there, can you please confirm that the machine received the correct profile?

Re: Cortex XDR supervisor password

Marsooq_A — Thu, 28 May 2020 12:50:36 GMT

@dfalcon , Yes the endpoint is configured with right policy.

Re: Cortex XDR supervisor password

dfalcon — Thu, 28 May 2020 13:00:24 GMT

One more thing to confirm -- did you run cmd.exe as administrator?

Re: Cortex XDR supervisor password

Marsooq_A — Thu, 28 May 2020 13:17:40 GMT

@dfalcon

Thanks for the suggestion, its working with cmd with admin privilege

Re: Cortex XDR supervisor password

vigneshmohan — Mon, 16 Aug 2021 06:34:04 GMT

Same issue even if i am working with cmd with admin privileges,

but got resolved once I set new uninstall password as specified above.

Thanks Dfalcon

Re: Cortex XDR supervisor password

yogisun — Sun, 03 Oct 2021 01:45:17 GMT

Hi @vigneshmohan ,

Could you share the steps to change uninstall password? did you perform that using Cytool or other tools?

Thanks

Re: Cortex XDR supervisor password

yogisun — Sun, 03 Oct 2021 01:48:26 GMT

Hi @dfalcon ,

I tried running the "Cytool protect disable" command in cmd - admin window. Still it requested for password, I gave the user password with which I was logged in to the system. It is part of admin group. But the 'protect disable' command gave 'Access denied' response.

Regards

Re: Cortex XDR supervisor password

vigneshmohan — Sun, 03 Oct 2021 06:35:10 GMT

Please access to Management Console >>> Go to your Cortex XDR instance where u have your endpoint XDR Agent is binded >>> Go to Endpoint Tab >>> Policy Management>>> Profiles>>> Agent settings profile ( the Agent settings profile that you added to your policy that has your endpoint as its target) >>> Uninstall Password >>> Change the uninstall password to your own local password,

make sure to Check-in ( perform heart beat),

Now what you had done is replaced either the global settings/ Agent Settings uninstall password

hope it helps

Re: Cortex XDR supervisor password

vigneshmohan — Sun, 03 Oct 2021 06:39:38 GMT

Supervisor password is also called as Uninstall Password

to change it >> go and change the agent settings profile uninstall password. This must be done on your Cortex XDR Instance.

Steps

make sure to Check-in ( perform heart beat),

Now what you had done is replaced either the global settings/ Agent Settings uninstall password