<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Support File Password in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/support-file-password/m-p/532024#M3688</link>
    <description>&lt;P&gt;We used to be able to access endpoint files and now the zip is asking for a password. Is this the 'admin password' setup under agent settings?&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="eumbach_0-1677098454680.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48165i721E5B0262395E9C/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="eumbach_0-1677098454680.png" alt="eumbach_0-1677098454680.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Wed, 22 Feb 2023 20:41:08 GMT</pubDate>
    <dc:creator>eumbach</dc:creator>
    <dc:date>2023-02-22T20:41:08Z</dc:date>
    <item>
      <title>Support File Password</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/support-file-password/m-p/532024#M3688</link>
      <description>&lt;P&gt;We used to be able to access endpoint files and now the zip is asking for a password. Is this the 'admin password' setup under agent settings?&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="eumbach_0-1677098454680.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48165i721E5B0262395E9C/image-size/medium/is-moderation-mode/true?v=v2&amp;amp;px=400" role="button" title="eumbach_0-1677098454680.png" alt="eumbach_0-1677098454680.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 22 Feb 2023 20:41:08 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/support-file-password/m-p/532024#M3688</guid>
      <dc:creator>eumbach</dc:creator>
      <dc:date>2023-02-22T20:41:08Z</dc:date>
    </item>
    <item>
      <title>Re: Support File Password</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/support-file-password/m-p/532038#M3692</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/192039"&gt;@eumbach&lt;/a&gt;, thank you for writing to Live Community&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;You are correct, this is a relatively new feature was introduced in version 7.8.&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;There are two methods to retrieve the password:&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Retrieve Support File Password from Endpoints → All Endpoints.&lt;/STRONG&gt;&lt;STRONG&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;OL&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;At the top of the page, click the Tokens and Passwords button and select Retrieve Support File Password option.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;In the Retrieve Support File Password dialog, in the Encrypted Password field, paste the token that you copied from the metadata file located in the saved file when running the Cytool log collect.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Click the copy button to copy the password displayed and then click Ok. Use the password to unzip the TSF file.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;/OL&gt;
&lt;P&gt;&lt;STRONG&gt;&lt;BR /&gt;&lt;/STRONG&gt;&lt;STRONG&gt;&amp;nbsp; &lt;/STRONG&gt;&lt;STRONG&gt;&lt;BR /&gt;&lt;/STRONG&gt;&lt;STRONG&gt;&lt;BR /&gt;&lt;/STRONG&gt;&lt;STRONG&gt; &amp;nbsp; Retrieve Support File Password from Action Center → All Actions.&lt;/STRONG&gt;&lt;STRONG&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/STRONG&gt;&lt;/P&gt;
&lt;OL&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Right-click the relevant action of action type Support File Retrieval and select Additional Data.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Right-click the action and select Retrieve Support File Password.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;In the Retrieve Support File Password dialog, in the Encrypted Password field, paste the token that you copied from the metadata file located in the download file.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;LI style="font-weight: 400;" aria-level="1"&gt;&lt;SPAN&gt;Click the copy button to copy the password displayed and then click Ok. Use the password to unzip the TSF file.&lt;/SPAN&gt;&lt;/LI&gt;
&lt;/OL&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;SPAN&gt;The instructions on how to obtain the password file can be found &lt;/SPAN&gt;&lt;A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Retrieve-Support-File-Password" target="_blank" rel="noopener"&gt;&lt;SPAN&gt;here.&lt;/SPAN&gt;&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Hope this helps!&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 22 Feb 2023 23:14:31 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/support-file-password/m-p/532038#M3692</guid>
      <dc:creator>mavraham</dc:creator>
      <dc:date>2023-02-22T23:14:31Z</dc:date>
    </item>
  </channel>
</rss>

