08-06-2019 03:52 AM - edited 08-06-2019 04:09 AM
Hello,
We had to factory reset our standalone unit after the master key expired.
Is Master key necessary for the PA? Looks like after factory reset there is no master key anymore. Thanks.
08-06-2019 10:06 AM
As @kiwi mentioned you technically still have a master key, it's just the default that everyone else gets right out of the box. The issue with keeping the default master key is that your phash values would be identical to mine if we used the same password, and therefore we would also have the same API key. If you modify the master key it's just one less security vector to worry about.
08-06-2019 07:30 AM
Hi @FarzanaMustafa ,
While it is not necessary to configure one, Palo Alto Networks recommends that you configure a new master key instead of using the default key.
If you perform a factory reset the master key will be reset to default.
Cheers !
-Kiwi.
08-06-2019 10:06 AM
As @kiwi mentioned you technically still have a master key, it's just the default that everyone else gets right out of the box. The issue with keeping the default master key is that your phash values would be identical to mine if we used the same password, and therefore we would also have the same API key. If you modify the master key it's just one less security vector to worry about.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
