Query on Master key

Reply
Highlighted
L4 Transporter

Query on Master key

Hello,

 

We had to factory reset our standalone unit after the master key expired.

Is Master key necessary for the PA?  Looks like after factory reset there is no master key anymore. Thanks.

Tags (1)

Accepted Solutions
Highlighted
Cyber Elite

@FarzanaMustafa,

As @kiwi  mentioned you technically still have a master key, it's just the default that everyone else gets right out of the box. The issue with keeping the default master key is that your phash values would be identical to mine if we used the same password, and therefore we would also have the same API key. If you modify the master key it's just one less security vector to worry about. 

View solution in original post


All Replies
Highlighted
Community Team Member

Hi @FarzanaMustafa ,

 

While it is not necessary to configure one, Palo Alto Networks recommends that you configure a new master key instead of using the default key.

 

If you perform a factory reset the master key will be reset to default.

 

Cheers !

-Kiwi.

Highlighted
Cyber Elite

@FarzanaMustafa,

As @kiwi  mentioned you technically still have a master key, it's just the default that everyone else gets right out of the box. The issue with keeping the default master key is that your phash values would be identical to mine if we used the same password, and therefore we would also have the same API key. If you modify the master key it's just one less security vector to worry about. 

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!