What is the Admin user Password Change Behavior in HA?

What is the Admin user Password Change Behavior in HA?

23942
Created On 04/28/19 11:26 AM - Last Modified 03/31/26 03:08 AM


Question


What is the Admin user Password Change Behavior in HA?

Environment


  • Next-Gen Firewalls
  • Supported PAN-OS
  • High Availability (HA) Active/Passive


Answer


  1. Password changes for Administrator users (Device > Administrators) take effect immediately, even before a commit is performed.
  2. A commit is required to save the change to the configuration; otherwise, the password will revert to the previous version after a reboot.
  3. In an HA pair, the password change will not sync to the passive device until a commit is executed on the active device to trigger Config Sync.


Additional Information


To change the password using CLI, use the procedure below:

admin@PA-VM> configure
admin@PA-VM# set mgt-config users <username> password
Enter password   :
Confirm password :
admin@PA-VM# commit


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kcSArticleDetail?id=kA10g000000PLpX&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkcSArticleDetail