not able to change default admin password on PA-1410

[s.kotkar727868]

We are setting up new PA-1410 firewall and first login from SSH and GUI asking to change password which we did. But after changing new password still not able to login using new admin password from SSH and GUI, keep asking change password.

Any suggestions ?

[reaper]

have you disabled ZTNA?

in my experience you log on the first time, change password, disable ZTNA, device reboots, login with default admin, change password again, commit

and then you should be ok

are you able to share the output from your CLI ?

[TomYoung]

Hi @s.kotkar727868 ,

You have to commit for the new password to take effect.  This is a pain because on some platforms you have to disable ZTP 1st as @reaper said.  When you disable ZTP, you reboot without committing.  So, you have to change it again the next time you login!

Thanks,

Tom

Edited:   ZTP

[s.kotkar727868]

Thanks for your reply, Tom.

Do you mean disabling ZTP (Zero Touch Provision)? 

not disabled yet. from CLI output is just asking to change password everytime login using default admin account. 

[s.kotkar727868]

Thanks for reply, Tom. Just wondering to disable ZTNA or ZTP ?

Can't see any details to disable ZTNA in palo alto documents.

[TomYoung]

Thanks @s.kotkar727868 for the correction.  I edited the reply.

Yes, if you get the banner on the CLI to disable ZTP, then you need to do that 1st.

[s.kotkar727868]

Thanks, I will try this and update you.