topic Re: Palo Alto 1420 - Invalid username or password. in General Topics

Palo Alto 1420 - Invalid username or password.

S.Alizada — Fri, 02 Oct 2026 08:09:35 GMT

Dear all,

We have face an issue recently with our Palo Alto HA pair.

When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all.

The only recent change we have implemented was the CIS Device Hardening using this version (CIS_Palo_Alto_Firewall_11_Benchmark_v1.2.0) and was done around mid August.

And Now when we try to login all admin accounts shows Invalid username or password now I want to know if this is a bug or something related to device hardening, password expiry or what?
And how to fix it?
Is password recovery the only option for this?

Best Regards,

Shah.

Re: Palo Alto 1420 - Invalid username or password.

MP18 — Fri, 02 Oct 2026 13:05:42 GMT

@S.Alizada I checked the CIS guide, and it has parameters for password requirement.

You can check in system logs if password was changed in Aug or not?

Other than that, only option is to Factory reset as I am not aware of any bug linked to admin password?

Does Radius work?

Also on passive firewall you can suspend it and do below

How to Reset the Administrator Password - Knowledge Base - Palo Alto Networks

Regards

Re: Palo Alto 1420 - Invalid username or password.

S.Alizada — Mon, 05 Oct 2026 02:41:19 GMT

HI @MP18

We have never changed the password in Aug: We have done two CIS device hardenings: (1: 1st April 2026, 2: 25th Aug 2026).

My last web interface login was done on 30 Sep 2026 to just check the syslog server configuration. When I wanted to attempt again on 2 Oct nothing words and it gives me password invalid.

Now my other colleague has same issue while trying to chang the password he reverted to an older version but still didnt work and had to factory reset the device.

Plus is there is a way to generate a TSF via console or something to get the PA support to help us fix it.

Best Regards,

Shah.

Re: Palo Alto 1420 - Invalid username or password.

MP18 — Mon, 05 Oct 2026 14:30:28 GMT

@S.Alizada Does Radius work?

From console if you have access via Radius, you can use this command

request tech-support dump

scp export tech-support to 00654321@tacupload.paloaltonetworks.com:./

Replace 00654321 with your case number (including leading zeros).

Regards