topic Query on Master key in General Topics

Query on Master key

FarzanaMustafa — Tue, 06 Aug 2019 11:09:01 GMT

Hello,

We had to factory reset our standalone unit after the master key expired.

Is Master key necessary for the PA? Looks like after factory reset there is no master key anymore. Thanks.

Re: Query on Master key

kiwi — Tue, 06 Aug 2019 14:30:21 GMT

While it is not necessary to configure one, Palo Alto Networks recommends that you configure a new master key instead of using the default key.

If you perform a factory reset the master key will be reset to default.

Cheers !

-Kiwi.

Re: Query on Master key

BPry — Tue, 06 Aug 2019 17:06:40 GMT

@FarzanaMustafa,

As @kiwi mentioned you technically still have a master key, it's just the default that everyone else gets right out of the box. The issue with keeping the default master key is that your phash values would be identical to mine if we used the same password, and therefore we would also have the same API key. If you modify the master key it's just one less security vector to worry about.