10-02-2026 01:09 AM
Dear all,
We have face an issue recently with our Palo Alto HA pair.
When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all.
The only recent change we have implemented was the CIS Device Hardening using this version (CIS_Palo_Alto_Firewall_11_Benchmark_v1.2.0) and was done around mid August.
And Now when we try to login all admin accounts shows Invalid username or password now I want to know if this is a bug or something related to device hardening, password expiry or what?
And how to fix it?
Is password recovery the only option for this?
Best Regards,
Shah.
10-02-2026 06:05 AM
@S.Alizada I checked the CIS guide, and it has parameters for password requirement.
You can check in system logs if password was changed in Aug or not?
Other than that, only option is to Factory reset as I am not aware of any bug linked to admin password?
Does Radius work?
Also on passive firewall you can suspend it and do below
How to Reset the Administrator Password - Knowledge Base - Palo Alto Networks
Regards
10-04-2026 07:41 PM
HI @MP18
We have never changed the password in Aug: We have done two CIS device hardenings: (1: 1st April 2026, 2: 25th Aug 2026).
My last web interface login was done on 30 Sep 2026 to just check the syslog server configuration. When I wanted to attempt again on 2 Oct nothing words and it gives me password invalid.
Now my other colleague has same issue while trying to chang the password he reverted to an older version but still didnt work and had to factory reset the device.
Plus is there is a way to generate a TSF via console or something to get the PA support to help us fix it.
Best Regards,
Shah.
10-05-2026 07:29 AM - edited 10-05-2026 07:30 AM
@S.Alizada Does Radius work?
From console if you have access via Radius, you can use this command
request tech-support dump
Replace 00654321 with your case number (including leading zeros).
Regards
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
