Password change for the agent

[RamyashreeMada]

Hello,

We want to change the agent password for all the endpoints. Could you please let us know the process, implications of doing this. Is there any recommended settings for this.

[eluis]

Hi @RamyashreeMada 

to change the global pass on all endpoints you can do it following the options:

Settings --->Configurations ----->General ----> Agent Configurations

On top of the screen you will see the option to change it

The implications are that all your endpoints will managed with this new pass whenever you need to uninstall the agents and maybe you will be asked for this pass when performing other admin tasks. So anyone that used to know this pass will no longer be able to perform these admin tasks.

If you want to allow some of your security analysts or just endpoint admins a temporary pass to perform admin activities on your endpoints you can use the Tokens feature, you have rolling tokens generated automatically by the tenant (expiration time every two weeks) or you can create your own temporary tokens (expiration time between 1 to 21 days). With the tokens you dont need to communicate the global pass to anyone that just need to perform temporary admin tasks on one or just a few endpoints (not all of them)  

You have the info here: 

https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/endpoint-security/manage-co...

Hope this helps,

Luis