Palo Alto Networks Knowledgebase: Recovering M-100 from maintenance mode following factory reset

Recovering M-100 from maintenance mode following factory reset

7217
Created On 02/07/19 23:56 PM - Last Updated 02/07/19 23:56 PM
Resolution

PAN-OS: 5.0, 5.1, 6.0, 6.1

 

Details

When an M-100 appliance is restored to factory defaults (Factory Reset), on reboot the appliance may go into maintenance mode and ends in a non-functional state. A fix for this issue is being implemented, tested, and will be available in an upcoming maintenance release.

 

Please reference this workaround:

 

Through the console, the following error may be seen when the reboot cycle completes:

maintenance_mode-2.jpg

 

To recover, perform the following steps:

  1. Press Continue at the Maintenance Recovery Tool, then highlight Disk Image and press Enter:
    1.JPG
  2. Scroll to Advanced Options and press Enter:
    2.JPG
  3. At the password prompt, enter MA1NT and press Enter:
    password-2.JPG
  4. Disk Image - Advanced screen should show the following, with cms-5.1.0 selected by default (X):
    default.JPG
  5. Scroll over to the Status option and press Enter:
    status.JPG
  6. Make a note of which sysroot partition is EMPTY (in this case, sysroot1). Highlight Back and press Enter:
    sysroot.JPG
  7. Press the Down Arrow to navigate to any other available image (for example, 5.0.4.) When highlighted, press Enter to select:
    504.JPG
  8. Within the same menu, verify that the correct EMPTY sysroot partition is selected, (as mentioned in the previous example, sysroot1), highlight the correct partition and press Enter:sysroot2.JPG
  9. Within the same menu, arrow down and select panos (default setting will be maint), highlight and press Enter:
    boot-3.JPG
  10. Within the same menu, arrow down to Bootstrap and press Enter:
    bootstrap-2.JPG
  11. Disk Image Status will run, as shown below:
    disk-image-status.JPG
  12. Once complete, the status should show Success. Once complete, press ESC to re-enter the Disk Image - Advanced Screen:
    success.JPG
  13. Highlight Status and Press Enter:
    status-3.JPG
  14. Verify that the new image is now mounted as READY in the previously empty sysroot partition (this example being sysroot1). Scroll to highlight Back and then press Enter:
    sysroot-4.JPG
  15. At the Disk Image - Advanced Screen, select the correct sysroot partition, then scroll to the Boot option and press Enter:
    boot-4.JPG
  16. The Disk Image Status should show Status: Success. Once confirmed, press Back:
    disk-image-status-2.JPG
  17. Highlight Status and press Enter:
    status-4.JPG
  18. Verify that the target sysroot containing the NON 5.1.0 image (this example being sysroot1) now shows a state of PENDING-CHANGE:
    pending-change-2.JPG
  19. Once confirmed, scroll down to Reboot within the same Menu and press Enter:
    reboot-2.JPG
  20. Following the reboot, login with the default credentials (u : admin / p : admin) and verify that you are now running the non 5.1.0 image, for example.: > show system info
    504-2.JPG

owner: bryan



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClLjCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language