What is the Admin user Password Change Behavior in HA?
23946
Created On 04/28/19 11:26 AM - Last Modified 03/31/26 03:08 AM
Question
What is the Admin user Password Change Behavior in HA?
Environment
- Next-Gen Firewalls
- Supported PAN-OS
- High Availability (HA) Active/Passive
Answer
- Password changes for Administrator users (Device > Administrators) take effect immediately, even before a commit is performed.
- A commit is required to save the change to the configuration; otherwise, the password will revert to the previous version after a reboot.
- In an HA pair, the password change will not sync to the passive device until a commit is executed on the active device to trigger Config Sync.
Additional Information
To change the password using CLI, use the procedure below:
admin@PA-VM> configure
admin@PA-VM# set mgt-config users <username> password
Enter password :
Confirm password :
admin@PA-VM# commit